Privacy Policy & Data Security
Last updated: September 2026 · Committed to your privacy
1. Information We Collect
We collect personal information necessary to fulfill your festive orders, ensure timely delivery, and improve your shopping experience. This includes your name, email address, mobile number, delivery addresses, and payment transaction references (we do not store raw card numbers or CVVs).
2. How We Use Your Information
- Processing and fulfilling your Diwali orders and delivery tracking.
- Sending transactional updates via SMS, WhatsApp, and Email.
- Facilitating secure refunds and customer support inquiries.
- Detecting fraud and preventing unauthorized account activities.
3. Information Sharing & Third Parties
We never sell or rent your personal data to third parties. We share limited delivery information (name, address, phone number) with verified delivery partners exclusively for package dispatch, and transaction data with PCI-DSS compliant payment gateways (Razorpay).
4. Security & Encryption
All data transmission is encrypted using Industry-Standard TLS/SSL encryption. Authentication tokens are secured with rotating refresh tokens, and passwords are cryptographically hashed.
5. Contact Data Protection Officer
If you have questions about your personal data or wish to request data deletion, contact our Data Protection Officer at privacy@diwalimela.com.