At Mahi Blings Private Limited ("we", "us", "our"), operating the brand Mahi Blings, we understand that our patrons value their privacy and the security of their personal data. This comprehensive Privacy Policy outlines our strict practices regarding the collection, transmission, processing, encryption, and secure storage of your information when visiting our online boutique or purchasing from our collection.

1. Information We Collect & Source

We collect personal identifiers necessary to complete your retail journey:

• Identity & Contact Coordinates: Full legal name, billing address, shipping address, contact number, and email address.
• Transaction Metadata: Details about payments, order history, products viewed, cart additions, and invoice records.
• Technical & Usage Data: IP address, browser type, device information, operating system, and session navigation metrics.

Payment information (credit/debit cards, UPI handles, net banking credentials) is processed directly by PCI-DSS compliant third-party gateways (Razorpay, PayU, and Instamojo). Mahi Blings does not store, access, or archive your card numbers, CVV codes, or net banking credentials on our database servers.

2. How We Utilise Your Data

Your data is processed under strict administrative control for the following purposes:

• To authenticate your identity, process transactions, and ship your ordered jewellery.
• To dispatch real-time shipping updates and logistic tracking indices via SMS, Email, and WhatsApp.
• To provide responsive concierge support and handle return/exchange registries.
• To detect, prevent, and mitigate fraudulent transactions or unauthorized account activity.
• To send tailored lookbooks, collection announcements, and promotional campaign materials (only with your explicit opt-in consent).

3. Data Sharing & Third-Party Custody

We do not rent, sell, or trade your personal credentials to third-party brokers. We share limited patron data only with vetted service providers essential to our business operations:

• Logistic Partners: Secure shipping agents like Sequel Logistics and Blue Dart to execute doorstep delivery.
• Payment Gateways: Encrypted networks (Razorpay, PayU, Instamojo) to handle transaction routing.
• Communications Engines: Notification platforms to handle transactional SMS and email dispatches.
• Legal Authorities: When required by the laws of India to comply with statutory audits, judicial orders, or to protect the safety and rights of Mahi Blings and its patrons.

4. SSL Encryption & Security Architecture

To ensure high-grade data protection, our entire digital boutique is protected by 256-bit Secure Socket Layer (SSL) transmission encryption. All database backups are tokenized, encrypted at rest, and guarded by advanced hardware firewalls. Identity access is restricted to verified administrators who require access to process order dispatches.

5. Cookies & Tracking Technologies

We use session cookies and web beacons to improve page load times, persist your shopping cart bag across sessions, analyze site traffic, and deliver personalized recommendations. You can choose to disable cookies in your browser settings, though it may disable certain checkout features.

6. Your Statutory Rights

Under applicable data privacy laws, you possess the right to access, rectify, or demand the deletion of your personal records from our databases. To initiate a data retrieval or deletion request, please contact our designated Data Protection Officer at legal@mahiblings.com. We will respond and process all verified requests within 30 business days.