Privacy Policy

Last updated: 2026-07-16

This Privacy Policy explains how Madambi Group ("we", "us", "our"), operating the website madambigroup.com, collects, uses, and protects your personal data when you place an order. We are committed to handling your information responsibly and in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.

1. Information we collect

• Contact & delivery details you provide at checkout: full name, mobile number, email address (optional), and complete shipping address (including PIN code).
• Order details: the product, quantity, amount, and payment method you choose.
• Payment information for online payments is collected and processed directly by our payment gateway (Razorpay). We do not receive or store your card number, UPI PIN, CVV, or bank credentials on our servers.

2. Why we collect it

• To process, pack, ship, and deliver your order.
• To contact you to confirm the order and provide delivery updates.
• To process payments and, where applicable, refunds.
• To meet legal, tax, and accounting obligations.

3. How your data is stored

Order data is stored securely in Google Cloud Firestore (region: asia-south1, Mumbai, India). Access is restricted to authorised personnel using secure credentials. We retain order records only as long as needed to fulfil the order and comply with legal/tax requirements, after which they are deleted or anonymised.

4. Who we share it with

• Courier / logistics partners — to deliver your order (name, address, phone).
• Payment gateway (Razorpay) — to process online payments securely.
• Government authorities — only where required by law.

We do not sell or rent your personal data to any third party for marketing.

5. Cookies

Our store uses minimal browser storage only to remember your session while ordering. We do not use third-party advertising or tracking cookies. Our payment gateway may set cookies necessary to complete a secure transaction.

6. Your rights

Under the DPDP Act you may request access to, correction of, or deletion of your personal data, and withdraw consent. To exercise any right, contact us using the details below.

7. Contact