Privacy Policy

How My Store collects, uses, stores, shares and deletes personal information.

1. What we collect

• Orders on this website: your name, phone number, email, delivery address and what you ordered. If you make an account, your login details.
• Orders placed on marketplaces (Amazon, Flipkart, Meesho): the order details the marketplace sends us so we can pack and ship it — the items, the delivery details and the shipping label, which shows the buyer's name and delivery address.
• We do not collect card or bank details — online payments are handled by our payment gateway.

2. How we use it

Only to process, pack, ship and deliver orders, handle returns, refunds and customer support, and keep the accounts and tax records the law requires. We do not sell personal information, use marketplace buyers' information for marketing, or contact marketplace buyers outside the marketplace.

3. Who we share it with

• Courier companies — the name, address and phone needed to deliver the parcel.
• Our payment gateway — for online payments on this website.
• Our web hosting and website-security providers, who store or protect the data for us and may not use it for anything else.
• Authorities, when the law requires it.

4. How we keep it safe

• The website and all its connections use HTTPS (encrypted in transit). Shipping labels are stored encrypted (AES-256).
• Only our staff who need it can see order information. Each person has their own login, with a strong password and a one-time code from an authenticator app (two-factor authentication), and access limited to what their job needs.
• Sign-ins and access to labels are logged and the logs are reviewed regularly.

5. How long we keep it

• Shipping labels (they show the buyer's name and address) are deleted automatically 30 days after the order is shipped.
• Amazon buyers: apart from the label, we keep only the delivery city, state and PIN code with the order — not the buyer's name, phone or street address.
• Flipkart and Meesho buyers: the delivery details the marketplace gives us are kept with the order record for returns, refunds and claims, and for as long as Indian tax law requires.
• Website customers: account details while the account is open; order and invoice records for as long as Indian tax law requires us to keep them.
• When data is no longer needed it is deleted from our systems.

6. Your choices

You can ask to see, correct or delete the personal information we hold about you. We will reply within 30 days. Some order records must be kept for tax purposes even after a deletion request.

7. Changes

We will update this page when our practices change.