Privacy Policy

When you use mithilafoods.com, we collect:

• Contact details: name, shipping/billing address, phone number, email.
• Order information: products purchased, order value, payment status. Card/UPI details are processed by our payment gateway — we never see or store your full payment credentials.
• Account information: login details and order history if you create an account.
• Support communication: messages you send us by email, phone, or WhatsApp.
• Device and usage data: IP address, browser type, pages viewed — collected automatically via cookies.

• Process and deliver your orders, and send order/delivery updates by SMS, email, or WhatsApp.
• Provide customer support and handle refunds and grievances.
• Improve our website, products, and shopping experience.
• Send offers and newsletters — only if you opt in, and you can unsubscribe any time.
• Prevent fraud and comply with legal obligations.

We process personal data only for these stated purposes, in line with the Digital Personal Data Protection Act, 2023 (India).

We use cookies and similar technologies to:

• Essential: keep your cart and checkout working (cannot be switched off).
• Analytics: understand how visitors use the site (for example Shopify analytics, Google Analytics) so we can improve it.
• Marketing: show relevant offers on platforms like Google, Facebook, and Instagram.

You can block or delete cookies in your browser settings. Blocking essential cookies may break checkout.

We never sell your personal data. We share it only with partners needed to run the store:

• Shopify: hosts our store and processes orders (see Shopify's Consumer Privacy Policy).
• Payment gateways: to securely process payments.
• Courier partners: name, address, and phone number — required for delivery.
• Marketing and analytics tools: in aggregated or pseudonymous form where possible.
• Authorities: if required by law or valid legal process.

• Order and invoice data: kept up to 8 years for tax and accounting law compliance.
• Account data: kept until you delete your account or ask us to erase it.
• Marketing preferences: until you unsubscribe.
• Support conversations: up to 2 years after resolution.

Our store runs on Shopify's PCI-DSS compliant infrastructure with HTTPS encryption on every page. Access to customer data inside our team is limited to staff who need it for order fulfilment and support. No system is 100% secure, but we take commercially reasonable measures to protect your data and will notify you and the authorities of any breach as required by law.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data, where we are not legally required to keep it.
• Withdraw consent for marketing at any time.
• Grievance redressal — complain to our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.

To exercise any right, email care@mithilafoods.com. We respond within 30 days.

Our store is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has shared data with us, contact us and we will delete it.

As required under Indian law, our Grievance Officer for privacy matters is reachable at:

• Email: care@mithilafoods.com (subject: "Privacy Grievance")
• Phone: +91 78700 34414
• Address: F2D TECH PVT LTD (Mithila Foods), C/O Dinesh Prasad Sah, Near Dadi Shyam Mandir, Tata Showroom, Dumka, Jharkhand - 814101, India

Acknowledgement within 48 hours; resolution within 30 days.

We may update this policy as our business or the law changes. The "Last updated" date at the top always shows the current version. Material changes will be announced on the website.