Commitment to Customer Privacy: At Mithaas and More, we value your trust. We collect only the information required to process and deliver your orders freshly and securely. We never sell or rent your personal data to third parties.
1. Information We Collect
When you interact with our website or place an order, we may collect the following information:
- Contact Details: Your name, phone number, and delivery address to facilitate packaging and courier delivery.
- Order Data: Selected items, pack weights, order total, delivery notes, and timestamp.
- Payment Details: Orders are fulfilled strictly via Cash on Delivery (COD). We do not collect, process, or store sensitive financial details such as credit/debit card numbers, CVVs, or bank net banking credentials.
- Technical Data: IP address, device type, and standard server logs used solely for security monitoring, fraud prevention, and rate limiting.
2. Purpose of Data Processing
We process your personal information strictly for legitimate business purposes:
- Fulfilling, dispatching, and delivering your food orders.
- Providing live order status updates via our order tracking system and SMS/WhatsApp notifications.
- Customer support and resolving inquiries or feedback.
- Protecting our website against automated attacks, credential stuffing, and brute-force abuse.
3. Data Protection & Security Standards
We employ enterprise-grade security protocols to protect your personal information:
- All communication is encrypted using 256-bit Transport Layer Security (TLS/HTTPS).
- Order lookups mask customer telephone numbers and full physical addresses to protect your privacy from unauthorized discovery.
- Access to customer records is strictly restricted to authorized administrative personnel.
4. Third-Party Disclosures
We do not sell, trade, or transfer your personal data. Data is shared exclusively with necessary service partners for operations:
- Logistics & Courier Partners: Delivery address and recipient contact number strictly to complete doorstep delivery.
- Payment Processors: Transaction parameters for payment verification under strict PCI-DSS compliance.
- Legal Authorities: Only when strictly mandated by applicable laws or judicial orders of the Republic of India.
5. Customer Rights
Under the Digital Personal Data Protection Act (DPDPA) and applicable regulations, you have the right to:
- Request a copy of the personal data held about you.
- Request correction or deletion of your customer information from our active records.
- Withdraw consent for marketing communications at any time.
6. Contact Our Grievance Officer
If you have any questions or grievances regarding this Privacy Policy, please contact our designated Data Grievance Officer:
Mithaas and More
Email: support@mithaasnmore.com
WhatsApp Support: +91 99993 19515
Location: New Delhi, India