Privacy Policy

Information We Collect

We collect information you provide directly to us, information collected automatically, and information from third parties.

Information you provide:

• Name, email address, phone number when you place an order or create an account
• Billing and shipping address for order fulfilment
• Payment details (processed securely by our payment partners — we do not store card numbers)
• Messages you send us via contact forms, email, or WhatsApp
• Reviews, feedback, or survey responses you submit

Information collected automatically:

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Cookie Policy below)

How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfil your orders, and send order confirmations and shipping updates
• To respond to your queries, complaints, or support requests
• To send you marketing communications if you have opted in (you can unsubscribe at any time)
• To improve our website, products, and customer experience
• To comply with legal obligations including tax, accounting, and regulatory requirements under Indian law
• To detect and prevent fraud, unauthorised access, or other illegal activities
• To personalise content and product recommendations

Sharing Your Information

We may share your personal data with the following categories of third parties, solely to operate our business and serve you:

• Payment processors (e.g. Razorpay, Cashfree, PayU) to securely handle transactions
• Logistics and courier partners (e.g. Shiprocket, Delhivery, India Post) to deliver your orders
• Cloud and hosting services that store our website data under confidentiality agreements
• Email and communication tools used to send order updates and newsletters
• Analytics providers such as Google Analytics to understand website usage (anonymised where possible)
• Legal authorities if required by law, court order, or to protect the rights and safety of MORIVA or others

All third-party service providers are contractually obligated to keep your data secure and use it only for the purposes we specify.

Cookies & Tracking

We use cookies — small text files stored on your device — to make our website work properly and to improve your experience.

• Essential cookies: Required for the website to function (e.g. shopping cart, login sessions)
• Analytics cookies: Help us understand how visitors use the site (e.g. Google Analytics)
• Marketing cookies: Used to show you relevant ads on other platforms (only with your consent)

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. By continuing to use our website, you consent to our use of cookies as described.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Indian law:

• Order and transaction records: 7 years (as required under GST and tax regulations)
• Account information: Until you request deletion or close your account
• Marketing data: Until you unsubscribe or request removal
• Customer support communications: 3 years from last interaction

After the applicable retention period, we securely delete or anonymise your data.

Your Rights

Under applicable Indian data protection law (including the Digital Personal Data Protection Act, 2023), you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Ask us to correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to withdraw consent: Opt out of marketing communications at any time
• Right to grievance redressal: Lodge a complaint with our Data Protection Officer

To exercise any of these rights, please contact us at the details provided at the end of this policy. We will respond within 30 days.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted via our website
• PCI-DSS compliant payment processing through certified third-party gateways
• Regular security audits and access controls on our internal systems
• Limited employee access to personal data on a need-to-know basis

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with their information, please contact us immediately and we will delete it.

Third-Party Links

Our website may contain links to third-party websites (such as Amazon, Flipkart, Instagram, or payment portals). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting a notice on our website or by email. The "Last Updated" date at the top of this page indicates when it was last revised. Continued use of our website after changes constitutes your acceptance of the updated policy.