Privacy Policy

Last updated: 29 September 2026

Mandiram ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you visit mandiram.in or place an order, why we collect it, who we share it with, and the rights you have over it. It is written with the Digital Personal Data Protection Act, 2023 (DPDP Act) in mind.

1. Who is responsible for your data

Mandiram
WZ - 43, Sector 38 Begum Pur, New Delhi, Delhi 110086, India
Email: info@mandiram.in
Phone / WhatsApp: +91 98118 00661

We are the Data Fiduciary for the personal data described here. Our store runs on Shopify, which processes data on our behalf.

2. What we collect

  • Contact details — name, email address, phone number, billing and delivery address.
  • Order information — items ordered, order value, order history, returns and cancellations.
  • Payment information — transaction reference, payment method and confirmation status. We never see or store your full card number, CVV or UPI PIN; these go directly to our payment provider.
  • Communications — messages you send us by email, WhatsApp or phone, including photographs and videos submitted for damage claims.
  • Technical data — IP address, device and browser type, and pages visited, collected through cookies and similar technologies.

3. Why we use it

  • To process, pack and deliver your order.
  • To send order confirmations, dispatch notices and tracking updates.
  • To handle returns, replacements, cancellations and refunds.
  • To provide customer support and respond to your queries.
  • To detect and prevent fraud and unauthorised transactions.
  • To meet legal, tax and accounting obligations.
  • To improve our products, website and service.
  • To send marketing messages — only where you have opted in. You can withdraw consent at any time.

4. Who we share it with

We share only what is necessary, and only with:

  • Courier and logistics partners — your name, address and phone number, so they can deliver.
  • Payment providers — to process payments and refunds securely.
  • Shopify — our e-commerce platform, which hosts the store and processes order data.
  • Communication and support tools — such as email or WhatsApp providers, to send you order updates.
  • Government or legal authorities — where required by law or valid legal process.

We do not sell your personal data. We do not rent or trade it. We do not share it for unrelated third-party advertising without your consent.

5. Cookies

We use cookies to keep your cart working, remember preferences, and understand how the site is used. Essential cookies are required for the store to function. You can block or delete cookies in your browser, but some features may stop working.

6. How long we keep it

Order and transaction records are retained for as long as needed to fulfil the order and to meet tax, accounting and legal obligations under Indian law — generally up to eight years. Marketing data is kept until you withdraw consent. Support correspondence is retained for a reasonable period to handle follow-up queries.

7. Your rights

Under the DPDP Act, 2023 you have the right to:

  • Access a summary of the personal data we hold about you and how it is processed.
  • Correct inaccurate or incomplete data, and complete or update it.
  • Erase your personal data where we no longer need it for the purpose collected or to meet a legal obligation.
  • Withdraw consent at any time, including for marketing.
  • Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
  • Grievance redressal — raise a complaint with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these, email info@mandiram.in. We may need to verify your identity first. We will respond within the timelines required by law.

8. Security

Our site uses HTTPS encryption and payments are handled by PCI-DSS compliant providers. We limit internal access to personal data to those who need it. No system is perfectly secure, however, and we cannot guarantee absolute security. Please do not send card numbers, PINs, OTPs or passwords to us by email or WhatsApp — we will never ask for them.

9. Children

Our store is not intended for children under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. International transfers

Some of our service providers, including Shopify, may store or process data on servers outside India. Where that happens we take reasonable steps to ensure your data remains protected to the standard described in this policy.

11. Grievance Officer

As required by the DPDP Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020:

Grievance Officer: Riyansh Ahlawat
Email: support@mandiram.in
Phone: +91 9999117050
Address: WZ - 43, Sector 38 Begum Pur, New Delhi, Delhi 110086, India

We acknowledge complaints within 48 hours and aim to resolve them within one month.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The current version is always on this page with the "Last updated" date above.

13. Contact

Questions about your data? Email info@mandiram.in or call +91 98118 00661.