Privacy Policy

Last updated 19 October 2026

This policy explains what personal data Maison Rivina (“we”, “us”) collects when you use this website, why we collect it, who we share it with and the choices you have. It is published in accordance with the Information Technology Act, 2000, its rules, and the Digital Personal Data Protection Act, 2023.

Who we are

This website is operated by [Registered business name], [Registered business address]. For any privacy question or request, write to support@maisonrivina.com.

Information we collect

  • Account details — your email address, and your name and mobile number if you add them. If you sign in with Google, we receive your name, email address and profile picture from Google.
  • Delivery details — the names, phone numbers and addresses you save or enter at checkout.
  • Orders and payments — the items you buy, order amounts, payment method and status, and references from our payment gateway. We never see or store your full card number, CVV, UPI PIN or net-banking password; those are handled entirely by Razorpay.
  • Returns and refunds — return reasons and, for Cash on Delivery refunds, the UPI ID or bank account details you give us for the refund.
  • Reviews — ratings, text, photos and videos you choose to publish about a product.
  • Wishlist and cart — products you save. Your cart is stored in your own browser.
  • Technical data — IP address, device and browser information and server logs, used to keep the site secure and working (for example, to prevent abuse of sign-in codes).

How we use your information

  • to create and secure your account, including one-time sign-in codes sent to your email;
  • to process, deliver and track your orders, and to handle cancellations, returns and refunds;
  • to send you transactional emails about your orders and account;
  • to answer your questions and provide customer support;
  • to publish reviews you submit, after moderation;
  • to prevent fraud and misuse, and to meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not send you marketing messages unless you have asked to receive them.

Who we share it with

We share only what each service provider needs to perform its work for us:

  • Razorpay — to process online payments and refunds.
  • Shiprocket and its courier partners — your name, phone number and delivery address, to deliver your order and collect returns.
  • Brevo — your email address and order details, to send sign-in codes and order emails.
  • Cloudinary — to store and serve product images and the photos or videos you add to reviews.
  • Google — only if you choose to sign in with your Google account.
  • Our hosting and database providers — which store the data needed to run this website.

We may also disclose information when required by law, a court order or a government authority, or to protect our rights and prevent fraud.

Cookies and local storage

We use a small number of essential cookies: a secure, http-only session cookie that keeps you signed in, and the cookies our payment gateway needs during checkout. Your shopping cart is kept in your browser's local storage so it survives a page refresh. We do not use advertising cookies. You can clear cookies and local storage in your browser settings at any time; you will then be signed out and your cart will be emptied.

How long we keep it

We keep your account data for as long as your account is active. Order, payment and invoice records are kept for as long as tax and accounting laws require, even if you delete your account. Sign-in codes expire within minutes and are stored only in hashed form.

How we protect it

Data is transmitted over encrypted (HTTPS) connections, access to our systems is restricted to people who need it, and payment data is handled only by our PCI-DSS compliant payment gateway. No method of transmission or storage is completely secure, but we work hard to protect your information.

Your rights and choices

  • You can view and update your profile and saved addresses at any time in your account.
  • You can ask us for a summary of the personal data we hold about you, ask us to correct it, or ask us to delete your account. Write to support@maisonrivina.com from your registered email address.
  • You can withdraw any consent you have given; this will not affect processing that has already happened.
  • You may nominate another person to exercise these rights on your behalf in case of death or incapacity.

We respond to requests within 30 days.

Children

This website is intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

Grievance Officer

If you have a concern about how your data is handled, you can contact our Grievance Officer, [Grievance Officer name], at support@maisonrivina.com or [Registered business address]. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed; significant changes will be highlighted on the website.