Privacy Policy

Last updated: 5 October 2026

This policy explains what personal data Mitti Melt Candle Co. ("Mitti Melt", "we", "us") collects when you visit mittimelt.com or buy from us, why we collect it, and the choices you have. We follow the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

1. What we collect

When you order: your name, email address, mobile number, delivery and billing address, the products you buy and the order and payment status. When you create an account: the details above plus a password. We store only a scrambled (hashed) version of your password, never the password itself. When you write to us, request a custom order or leave a review: what you send us. A published review shows the name you give with it. When you join our newsletter: your email address. When you browse: basic technical data such as your IP address and browser type, kept in security and server logs.

We do not collect card numbers, UPI PINs or bank passwords. Online payments are handled by our payment partner (Razorpay), and those details go directly to them.

2. Why we use it

To take, pack, ship and track your order, issue GST invoices and handle returns and refunds. To run your account, saved addresses and wishlist. To reply to your messages and custom-order requests. To send newsletters, only if you have opted in. Every email has an unsubscribe link. To keep the site secure, prevent fraud and misuse (for example limiting repeated login attempts), and meet our legal and tax obligations.

We do not sell, rent or trade your personal data.

3. Who we share it with

Only with the service providers needed to run the shop, and only what they need: our payment partner to process payments, courier partners to deliver your parcel, our hosting provider to run the website, and an email service to send order and account emails. We may also disclose data where the law requires it, for example to tax authorities or in response to a lawful request.

4. Cookies

We use only the cookies the shop needs to work: one to keep you signed in, one to remember your bag, and one that lets you open an order you placed as a guest. We do not use advertising or tracking cookies.

5. How long we keep it

Account data is kept while your account is open. Order and invoice records are kept for as long as Indian tax and accounting law requires, even if you close your account. Newsletter data is kept until you unsubscribe. Security logs are kept for a short period and then deleted.

6. How we protect it

The site is served only over an encrypted (HTTPS) connection, passwords are hashed, and access to customer data is limited to the people who need it to fulfil orders. No system is perfectly secure, but if a breach affects your data we will inform you and the authorities as the law requires.

7. Your rights

You can ask us to: tell you what personal data we hold about you; correct or update it; delete it (except records we must keep by law); or stop sending you marketing emails. You may also nominate someone to exercise these rights on your behalf. Most account details can be changed yourself under My Account; for anything else, email us.

8. Children

Our products are not intended for children. If you are under 18, please shop with the involvement of a parent or guardian.

9. Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted on the site.

10. Contact and grievances

For any question, request or complaint about your personal data, write to our Grievance Officer at mittimelt@gmail.com with the subject "Privacy". We will acknowledge your message within 48 hours and aim to resolve it within 30 days.

Mitti Melt Candle Co., Pune, Maharashtra, India.