Privacy Policy

The Makhana ("we", "us", "our") is a direct-to-consumer brand based in Delhi, India, selling roasted and raw makhana (foxnuts) through our website at themakhana.in. This Privacy Policy explains what personal information we collect when you visit our website, create an account or place an order, how we use it, who we share it with, and the rights you have. We handle personal data in line with applicable Indian law, including the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 (DPDP Act). By using our website, you agree to the practices described here.

Information We Collect

We collect only the information we need to process your orders and run our business. This may include:

• Account details — if you create an account, your email address and a password. Passwords are stored in securely hashed form by our authentication provider (Supabase); we never see or store your password in plain text.
• Profile and delivery details — your name, phone number, and shipping address (including city, state and pincode), plus the name and address of anyone you are shipping to.
• Order information — the products you buy, order amounts, order status and your order history, which we record on our servers to fulfil and support your orders.
• Payment confirmation data — a payment reference ID and payment status returned by our payment gateway, Razorpay, so we can match your payment to your order.
• Usage and device data — basic technical details such as device type, browser, approximate location and pages visited, collected through cookies and the analytics tools described below.

We do not collect or store your debit card, credit card, UPI or net-banking credentials. All payments are handled directly by Razorpay, an RBI-regulated payment gateway, on its own secure systems. Your card and banking details are entered on Razorpay's payment interface and never reach our servers.

Details You Enter in Our Forms

When you type your name, phone number or email into a form on our website — for example the checkout, contact or newsletter form — we may record those details so we can follow up about your enquiry or help you finish an order, even if you do not press submit. This is stored securely, is never sold or rented, and you can ask us to delete it at any time by emailing themakhana.official@gmail.com. We never capture passwords or payment details in this way.

How We Use It

We use your information to:

• Process, pack and deliver your orders, and record them so we can support you later.
• Send order confirmations and order-related emails (sent through our email provider, Resend).
• Respond to your questions and provide customer support.
• Send you offers and updates, but only if you have chosen to receive them.
• Understand how the website is used so we can improve it, our products and our service.
• Prevent fraud and misuse, and meet our legal, tax and accounting obligations.

Cookies & Analytics

Our website uses cookies, local storage and similar technologies to remember your cart, keep you signed in, and understand how visitors use the site. Specifically, we use:

• Google Analytics 4 (GA4) — to measure traffic and understand how visitors move through the site (pages visited, approximate location, device and browser information).
• Microsoft Clarity — to generate heatmaps and session recordings of how visitors interact with our pages (clicks, scrolls and mouse movement). Clarity is configured by Microsoft to mask sensitive input; we do not use it to capture your passwords or payment details, which are entered on Razorpay's systems, not on our pages.

These tools set their own cookies and process data under their providers' privacy policies. You can control or disable cookies through your browser settings, use browser extensions such as the Google Analytics opt-out add-on, or browse in private mode. Some parts of the website (such as the cart and sign-in) may not work as expected if cookies and local storage are turned off.

Where Your Data Is Stored

Account, profile and order data are stored with Supabase, our database and authentication provider, on secured infrastructure. Payment data is held by Razorpay. Transactional emails are sent through Resend. Each of these providers acts as a processor for us and is bound by its own security and privacy commitments.

Sharing With Third Parties

We do not sell or rent your personal information to anyone. We share it only with trusted service providers who help us run our business, and only to the extent needed:

• Courier and logistics partners — your name, address and phone number, to deliver your order.
• Razorpay — to securely process your payment and any refunds.
• Supabase — to store account and order data.
• Resend — to send order confirmation and support emails.
• Google (GA4) and Microsoft (Clarity) — usage analytics as described above.

We may also disclose information if required to do so by law, by a court order, or by a valid request from a public authority.

Data Retention

We keep your account and order information for as long as you have an account with us and thereafter for as long as needed to handle returns, refunds and disputes and to meet legal, tax and accounting requirements. When data is no longer needed, we delete it or anonymise it.

Data Security

We take reasonable security safeguards to protect your information using appropriate technical and organisational measures. The website is served over HTTPS, payments are processed on Razorpay's encrypted systems, and access to stored data is restricted. While no method of transmission over the internet is completely secure, we work to keep your data safe and limit access to it, and we will inform you and the relevant authorities of any data breach as required by applicable law.

Your Rights

Under applicable Indian law, including the DPDP Act, 2023, you have the right to:

• Access — ask for a summary of the personal information we hold about you.
• Correction — ask us to correct or update inaccurate or incomplete information (you can also edit your saved details from your account page).
• Deletion — ask us to delete your account and personal information where we no longer need to keep it for orders in progress or legal requirements.
• Withdraw consent — opt out of promotional messages at any time; order-related emails will still be sent because they are needed to fulfil your purchase.
• Grievance redressal — raise a complaint about how your data is handled, and escalate to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, email us at themakhana.official@gmail.com from the email address linked to your account, with the subject line "Privacy Request".

Grievance Contact

For privacy questions, complaints or data requests, contact our grievance contact: The Makhana — Privacy & Grievance Desk, Delhi, India; email themakhana.official@gmail.com; phone +91 82871 24651. We acknowledge privacy complaints within 48 hours and aim to resolve them within 30 days of receipt, in line with applicable Indian IT rules and the DPDP Act.

Children's Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with their details, please contact us so we can remove it.

Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, providers or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Contact

If you have any questions about this Privacy Policy or how we handle your information, please email us at themakhana.official@gmail.com or call +91 82871 24651 or +91 98100 05956. The Makhana is based in Delhi, India.