Privacy Policy

1. Introduction

Welcome to Mumbai Bazar ("we," "our," or "us"). We respect your privacy and are firmly committed to protecting your personal information. This Privacy Policy describes how we collect, process, store, and safeguard your data when you visit our website https://mumbaibazar.com, interact with our customer care representatives, or place an order for delivery across India.

This policy is formulated in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act (DPDP), 2023.

2. Information We Collect

When you browse or purchase from Mumbai Bazar, we may collect the following categories of information:

• Contact & Identity Details: Full name, phone/mobile number, email address, billing address, and physical shipping address (including state, city, and pin code).
• Transactional Data: Items purchased, order history, invoice details, payment status, and preferred payment mode. Note: We do not store credit card numbers, debit card PINs, or CVVs on our servers. All financial transactions are processed through certified, PCI-DSS compliant third-party payment gateways (Razorpay / Shopify Payments).
• Device & Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and interaction telemetry to optimize site responsiveness.
• Customer Care Inquiries: Transcripts of conversations via WhatsApp, email, or phone to address sizing, styling, shipment tracking, and return requests.

3. How We Use Your Personal Information

We utilize your data solely for legitimate commercial purposes, including:

• Processing, fulfilling, and dispatching your saree and bridal wear orders.
• Sending automated order confirmations, AWB tracking numbers, and delivery updates via SMS, WhatsApp, and email.
• Facilitating doorstep reverse pickups for returns or exchanges.
• Processing authorized refunds directly to your bank account or payment card.
• Preventing fraudulent orders and enhancing site security.
• Providing tailored weave suggestions, festive edits, and invitations to private styling events (which you may opt out of at any time).

4. Sharing Information With Trusted Third Parties

We do not sell, rent, or monetize your personal information to advertisers or data brokers. We share limited data strictly with trusted service partners required to deliver our services:

• Logistics & Courier Partners: Delhivery, BlueDart, Xpressbees, Ekart, and India Post to physically deliver packages to your doorstep.
• Payment Processors: RBI-licensed payment aggregators (Razorpay, Cashfree, Shopify Payments) to securely handle payment authorization.
• Communication Platforms: Verified WhatsApp Business API and transactional SMS gateways to deliver real-time dispatch alerts.
• Legal Authorities: When required by lawful court orders, statutory regulations, or law enforcement inquiries.

5. Cookies and Web Analytics

Our website uses standard session and persistent cookies. Cookies assist us in keeping track of items placed in your shopping bag, maintaining your session, and understanding which saree categories (e.g., Banarasi, Kanjivaram) resonate most with our shoppers. You can disable cookies through your browser settings, though some interactive features (such as the cart drawer) may experience limited functionality.

6. Data Retention & Security Standards

We retain your personal order records only for as long as necessary to fulfill statutory tax, accounting, and warranty compliance obligations under Indian commercial law. We employ robust technical safeguards including firewalls, TLS/SSL cryptographic protocols, and restricted internal data access to prevent unauthorized disclosure.

7. Your Rights Under DPDP Act 2023

You are entitled to the following rights regarding your personal information:

• The right to access and review personal data held by us.
• The right to request correction or updating of incomplete or inaccurate records.
• The right to withdraw consent for marketing SMS/WhatsApp communications.
• The right to request erasure/deletion of your account and personal history.

To exercise any of these rights, simply email us at care@mumbaibazar.com.

8. Grievance Redressal Officer

In accordance with Rule 3(2) of the Information Technology Rules, 2011, the name and contact details of our Grievance Officer are set out below: