Privacy Policy

1. Who We Are

Mangal & Mangal (operated by Mangal & Mangal Thanga Maligai, CIN: U52390TN2008PTC012345, registered in Chennai, Tamil Nadu) is the data controller for personal information collected through this website and our stores.

2. Data We Collect

We collect the following categories of personal data:

• Identity data: first name, last name, date of birth (for personalised offers)
• Contact data: email address, phone number, billing and delivery addresses
• Transaction data: purchase history, payment method type (not card numbers — we do not store raw card data)
• Technical data: IP address, browser type, device identifiers, cookies
• Usage data: pages visited, search terms, wishlist items

3. How We Use Your Data

• To fulfil orders and manage returns
• To send order confirmations and shipping updates
• To provide customer support
• To personalise your shopping experience
• To send marketing communications (only with your consent)
• To improve our website and services via analytics
• To comply with legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases:

• Contract: to fulfil your purchase orders
• Legitimate interests: for fraud prevention, analytics, and service improvement
• Consent: for marketing emails and personalisation
• Legal obligation: GST records and anti-money laundering checks

5. Data Sharing

We share your data only with:

• Payment processors: Razorpay (PCI-DSS compliant)
• Logistics partners: Blue Dart, Delhivery, DTDC, FedEx (for delivery fulfilment)
• Analytics tools: Google Analytics (anonymised), Meilisearch (on-premise)
• Cloud hosting: AWS (Mumbai region) for data residency in India

We do not sell your personal data to third parties.

6. Cookies

We use essential cookies (for cart and session management), analytical cookies (to understand site usage), and marketing cookies (for retargeting ads, only with consent). You can manage your preferences via the cookie banner shown on your first visit.

7. Data Retention

We retain transaction records for 8 years as required by Indian tax law. Account data is retained as long as your account is active or as needed to provide services. Marketing data is deleted within 30 days of consent withdrawal.

8. Your Rights

Under applicable Indian data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent for marketing at any time
• Lodge a complaint with the Data Protection Board of India

To exercise any right, email info@mangalandmangal.com.

9. Security

We implement industry-standard security measures including TLS 1.3 encryption, bcrypt password hashing, and regular penetration testing. Access to customer data is restricted to authorised personnel on a need-to-know basis.

10. Contact

For privacy-related queries, contact our Data Protection Officer at info@mangalandmangal.com.