Privacy Policy
Last updated: 25 September 2026
This policy explains what personal data Malenadu Specials collects when you use malenaduspecials.com, buy from us or contact us, why we use it, who we share it with, and the rights you have. It is written with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025 in mind. Under that law, we are the “Data Fiduciary” for your data.
1. Who we are
Malenadu Specials, No. 160/3, Near Annapoorneshwari Deluxe Lodge, Horanadu, Chikkamagaluru District, Karnataka 577181, India. Email hello@malenaduspecials.com, phone +91 75009 00959.
2. What we collect
- Details you give us: name, phone number, email, delivery and billing address, GSTIN if you ask for a business invoice, and anything you write to us (messages, reviews, bulk-order enquiries).
- Order details: what you bought, amounts, and delivery and return records.
- Payment status: whether a payment succeeded. Card, UPI and bank details are handled by our payment partners (Razorpay and PhonePe); we do not see or store them.
- Device and usage data: IP address, browser and device type, pages viewed and how you reached us. Analytics and marketing tools collect this only if you allow it in the cookie banner. See our Cookie Policy.
3. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Process, pack, ship and deliver your order; send order and dispatch updates by email, SMS or WhatsApp | Contact, address and order details | You provide these to place the order (a legitimate use under Section 7 of the DPDP Act) |
| Handle payments, refunds, returns and complaints | Order and payment status, messages | Legitimate use; legal obligation |
| Keep tax invoices and accounts | Invoice details | Legal obligation under GST and income-tax law |
| Send newsletters and offers | Email or phone | Your consent, which you can withdraw at any time |
| Understand site use and measure ads | Device and usage data | Your consent through the cookie banner |
| Prevent fraud and keep the site secure | Device data, order details | Legitimate use; legal obligation |
4. Who we share it with
We share only what each partner needs to do its job:
- Shopify, which runs our online store and checkout
- Razorpay and PhonePe, for payments and refunds
- Courier and logistics partners, to deliver your order
- WhatsApp (Meta), when we send order updates on WhatsApp
- Google and Meta, for analytics and advertising, only if you consent to those cookies
- Judge.me, if you leave a product review
- Government authorities, when the law requires it
We do not sell your personal data.
5. Data stored outside India
Some partners, including Shopify, Google and Meta, may store or process data on servers outside India. Such transfers are allowed under the DPDP Act, except to countries the Government of India restricts.
6. How long we keep it
We keep order and invoice records for as long as GST and income-tax laws require. We keep marketing contact details until you unsubscribe or withdraw consent. Other data is deleted once it is no longer needed for the purpose it was collected for, unless the law requires us to keep it longer.
7. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and who we have shared it with;
- ask us to correct, complete or update your data;
- ask us to erase your data, unless the law requires us to keep it;
- withdraw consent you have given (for example, to marketing or cookies) as easily as you gave it;
- nominate another person to exercise your rights if you die or become incapable;
- make a complaint to us, and then to the Data Protection Board of India if you are not satisfied.
To use any of these rights, email hello@malenaduspecials.com with the subject “Privacy request”. We may ask you to confirm your identity. We will respond as soon as we can, and within the time the law allows.
8. Marketing
We send marketing emails or messages only if you sign up for them. Every marketing email has an unsubscribe link. You can also tell us by email or WhatsApp to stop marketing messages. Order and delivery updates are not marketing, so they will continue while you have an active order.
9. Children
Our shop is meant for adults. Under the DPDP Act a child is anyone under 18. We do not knowingly collect a child’s personal data without a parent’s or lawful guardian’s consent. If you think a child has given us data, contact us and we will delete it.
10. Security
We use Shopify’s secure, encrypted (HTTPS) platform and limit staff access to the data they need for their work. If a personal data breach affects you, we will inform you and the Data Protection Board as the law requires.
11. Changes
We will post any changes to this policy on this page and update the date at the top.
12. Grievance Officer and contact
Name: Avinash
Designation: Grievance Officer
Email: hello@malenaduspecials.com
Phone: +91 75009 00959 (Mon–Sat, 9:00 AM – 6:00 PM IST)
Address: Malenadu Specials, No. 160/3, Near Annapoorneshwari Deluxe Lodge, Horanadu, Chikkamagaluru District, Karnataka 577181, India