Privacy policy

Last updated: 18 October 2026

This policy explains what personal data Mahadev Foods & Spices Pvt. Ltd. ("MD Masala", "we") collects when you visit this website or order from us, why we use it, and the rights you have. We follow the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Who is responsible for your data

Mahadev Foods & Spices Pvt. Ltd. (CIN U10795MH2023PTC400807), Sur. No. 28/1, Plot No. 1, 2, 3, Vimal Industrial Estate, Patonda Road, At Post Patonda, Tal. & Dist. Nandurbar, Maharashtra 425412, India. Email: mahadevmasala1229@gmail.com.

What we collect

Details you give us: your name, phone number, email, delivery and billing address, and what you write to us in forms, emails or WhatsApp messages.
Order details: what you bought, when, the amount and how you paid (for example "UPI" or "card"). Payments are handled by our payment partners on Shopify's checkout; we never see or store your full card number, CVV or UPI PIN.
Website data: your device, browser, pages viewed and items in your cart, collected through cookies and similar tools so the store works.

Why we use it

To take, pack, deliver and track your order, and to send order and delivery updates.
To answer your questions and handle replacements, cancellations and refunds.
To keep the store safe and prevent fraud.
To keep the records that tax and other laws require.
To send offers and news, but only if you have agreed. You can stop them at any time.

We use your data only for these purposes, and only as much as we need.

Who we share it with

We do not sell your personal data. We share only what is needed with:

Shopify, which runs this store and its checkout;
payment partners, to take your payment and send refunds;
courier partners, to deliver your parcel (name, address, phone);
email and messaging services we use to reply to you, such as WhatsApp when you message us;
government authorities, when the law requires it.

Some of these services may store data on servers outside India. They are bound to keep it safe.

How long we keep it

We keep order records for as long as tax and accounting laws require, and other data only while we need it for the purposes above. After that we delete it or make it anonymous. To confirm: how long order records and messages are kept.

How we keep it safe

We follow reasonable security practices: access only for the people who need it, secure (HTTPS) pages, and trusted service providers. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

Your rights

Under the DPDP Act you can:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete or update it;
ask us to erase it, unless the law requires us to keep it (for example tax records of your orders);
withdraw your consent, for example to offers and news;
nominate someone to use these rights for you in case of death or incapacity;
raise a complaint with our grievance officer and, if you are not satisfied, with the Data Protection Board of India.

To use any of these rights, fill in the data request form at the end of our privacy page or email mahadevmasala1229@gmail.com. We may ask you to confirm that the request is really from you. To confirm: reply time for data requests (we suggest within 30 days).

Cookies

The store uses Shopify's cookies to keep your cart, run the checkout and remember your choices. Where we use cookies for analytics or ads, we ask first, and you can change your choice at any time.

Children

This store is meant for adults. If you are under 18, please order with the consent of a parent or guardian.

Grievance officer

Kishor Marathe, Manager, Mahadev Foods & Spices Pvt. Ltd., at the address above. Email: mahadevmasala1229@gmail.com. See Grievance officer for how complaints are handled.

Changes to this policy

When we change this policy, we update the date at the top of this page. Big changes are also shown on the website.