1. Introduction
Girija Trading, the parent company and proprietor of Sumit Mukhwas, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://sumitmukhwas.in (the "Site") and make purchases from us.
This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
2. Information We Collect
2.1 Information You Provide
- Identity Data: First name, last name
- Contact Data: Email address, phone number
- Address Data: Delivery address, city, state, pincode
- Payment Data: Payment method selected (COD or online). Online payment details are processed directly by Razorpay and are never stored on our servers.
- Order Data: Products ordered, quantities, order history
- Feedback Data: Reviews, ratings, and contact form submissions
2.2 Information Collected Automatically
- Device Data: Browser type, operating system, device type
- Usage Data: Pages visited, time spent, click patterns, referral source
- Cookie Data: Session cookies, preference cookies, analytics cookies
- Location Data: Approximate location based on IP address (not GPS)
2.3 Information from Third Parties
- Razorpay: Payment confirmation status (success/failure). Razorpay processes your card/bank details directly — we only receive a transaction ID and status.
- Google Analytics: Aggregated and anonymized usage statistics.
3. How We Use Your Information
We use your personal data for the following purposes:
- Order Processing: To process and fulfill your orders, including shipping and delivery.
- Communication: To send order confirmations, shipping updates, and delivery notifications via WhatsApp/SMS/email.
- Payment Processing: To facilitate secure online payments through Razorpay.
- Customer Support: To respond to your queries, complaints, and refund requests.
- Site Improvement: To analyze usage patterns and improve our website experience.
- Marketing: To send promotional offers and updates (only with your explicit consent, and you can opt out at any time).
- Legal Compliance: To comply with applicable Indian laws and regulations.
4. Legal Basis for Processing (DPDP Act)
Under the Digital Personal Data Protection Act, 2023, we process your data based on:
- Consent: When you explicitly agree to data processing (e.g., marketing communications).
- Contractual Necessity: To fulfill your order and provide the services you requested.
- Legal Obligation: To comply with applicable laws, including tax and consumer protection regulations.
- Legitimate Interest: For fraud prevention, site security, and business improvement.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties. We may share your data only with:
- Courier Partners: Your name, phone number, and delivery address for order fulfillment.
- Razorpay: Transaction-related data for payment processing. Razorpay is PCI DSS Level 1 certified and handles your card/bank data securely.
- Google Analytics: Anonymized, aggregated usage data for site analytics.
- Law Enforcement: If required by law or to protect our rights, safety, or property.
6. Data Security
- All online transactions are encrypted using SSL/TLS technology.
- Payment data is processed through Razorpay, which is PCI DSS Level 1 compliant — the highest security standard in the payments industry.
- We do not store credit card numbers, CVV, or bank account details on our servers.
- Personal data is stored on secure servers with restricted access.
- We implement reasonable security practices as required under the IT Act, 2000 and DPDP Act, 2023.
7. Cookies
We use cookies to enhance your browsing experience:
| Cookie Type |
Purpose |
Duration |
| Essential | Session management, cart, login | Session / 30 days |
| Functional | Remember preferences, popup frequency | Session / 1 year |
| Analytics | Site usage statistics (anonymized) | 2 years |
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.
8. Data Retention
- Order Data: Retained for a minimum of 7 years as required under Indian tax and accounting regulations.
- Account Data: Retained as long as your account is active. You may request deletion at any time.
- Marketing Data: Retained until you withdraw consent or opt out.
- Analytics Data: Anonymized and aggregated; retained for up to 26 months.
9. Your Rights (DPDP Act)
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Withdrawal of Consent: Withdraw consent for processing data that relies on consent (e.g., marketing).
- Grievance Redressal: Lodge a complaint with our Data Protection Officer or the Data Protection Board of India.
To exercise any of these rights, contact us via the details in Section 12 below.
10. Children's Privacy
Our Site and products are not directed at children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
11. Third-Party Links
Our Site may contain links to third-party websites (e.g., Razorpay, social media). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before sharing any personal data.
12. Data Protection Officer / Contact
For privacy-related queries, data access requests, or to lodge a grievance:
- Business Name: Girija Trading
- Brand: Sumit Mukhwas
- WhatsApp: +91 7302445583
- Website: https://sumitmukhwas.in
We will acknowledge your request within 7 days and resolve it within 30 days as required under the DPDP Act, 2023.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified via email or a notice on our Site. Continued use of the Site after changes constitutes acceptance of the revised policy.
14. Governing Law
This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra.