Privacy Policy

Who we are

Misaaya is a women's ethnic wear brand based in Vijapur, Gujarat, India. For anything in this policy, write to info@misaaya.com.

What we collect

Information you give us

• Account details — your name, email address and mobile number. If you sign in with Google, we receive your name, email address and profile picture from Google; we never receive your Google password.
• Delivery and billing addresses — including pin code and phone number, so the courier can reach you.
• Order history — what you bought, when, at what price, and its delivery and returns status.
• Reviews — the rating, text and any photographs you choose to publish, with your first name shown alongside them.
• Messages — anything you send us by email, WhatsApp or the contact form.

Information collected automatically

• One session cookie. Signing in sets a single cookie holding your session token, which is how the site knows you are logged in. Clearing it signs you out. We set no advertising or analytics cookies.
• Your cart and wishlistare stored in your own browser's local storage, not on our servers, so they survive a page reload without needing an account. They stay on your device until you clear them.
• Server logs — IP address, browser type and pages requested, kept transiently for security and debugging.

What we never collect

Card and UPI details.Payments run through Razorpay, and you enter those details inside Razorpay's own secure window. They never pass through, and are never stored by, this website. We see only whether a payment succeeded and a reference number.

We also run no analytics, advertising or tracking scripts — no Google Analytics, no Tag Manager, no Meta pixel, no session recording.

Why we use it

• To take, pack, ship and track your order, and to handle returns and refunds.
• To sign you in and keep your account secure.
• To answer your questions and provide support.
• To send you order updates by email and SMS. These are transactional — you cannot opt out of them while an order is in progress, because they are how you learn where your parcel is.
• To send you occasional news about new collections, only if you subscribed to the newsletter. Every one of those has an unsubscribe link.
• To meet our legal obligations, including tax and accounting records.

We do not sell your personal information, and we do not share it with anyone for their own marketing.

Who we share it with

Only the service providers needed to actually run the shop:

• Razorpay — payment processing.
• Courier partners — your name, address and phone number, to deliver and to collect returns.
• Cloudinary — hosting for product and review photographs.
• Email and SMS providers — to send order updates and one-time passwords.
• OpenStreetMap / Nominatim— if you use the “find my location” button on the address form, the coordinates are sent to their geocoding service to turn into an address. Skip that button and nothing is sent.

We may also disclose information where the law requires it, or to protect our rights or someone's safety.

How long we keep it

• Order and invoice records — for as long as tax and accounting law requires (currently 8 years in India).
• Account details — until you ask us to delete your account.
• Reviews — until you delete them or ask us to.
• Support messages — up to 3 years.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to show you the personal data we hold about you, correct anything inaccurate, delete your account and its data (except records we must keep by law), or withdraw consent for marketing. You can also nominate someone to exercise these rights on your behalf.

Email info@misaaya.com and we will respond within 30 days. Much of it you can do yourself: your addresses and profile are editable under Account settings.

Security

The site is served entirely over HTTPS with HSTS, a strict content security policy, and security headers that forbid framing and content-type sniffing. Passwords are stored only as salted hashes. Payment data never touches our servers. No system is perfect, but if we ever become aware of a breach affecting your data we will tell you and the Data Protection Board as the law requires.

Children

The shop is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us information, write to us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page, and tell account holders by email where the change is significant.

Grievances

If you are unhappy with how we have handled your data, contact our grievance officer at info@misaaya.com or +91 91735 13520. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. You may also complain to the Data Protection Board of India.