2.1 Introduction

This Privacy Policy explains how [Legal Entity Name], operating under the brand name Mango Dairy, collects, uses, stores, shares, and protects personal data when you access our Platform, create an account, place orders, subscribe to deliveries, contact customer care, participate in promotions, or otherwise interact with us.

By using the Platform or providing your personal data, you acknowledge that you have read this Privacy Policy.

2.2 Scope

This Privacy Policy applies to personal data collected through:

• our website and mobile site;

• online order forms and subscription forms;

• customer care channels including phone, email, WhatsApp, SMS, and chat;

• delivery and payment interactions;

• marketing campaigns, surveys, referrals, and loyalty programs;

• social media or advertising interactions, where applicable.

This Policy does not apply to third-party websites or services that we do not own or control.

2.3 Personal Data We Collect

Account and Identity Data

Name, username, customer ID, date of birth or age information where required, gender where voluntarily provided, and login credentials.

Contact Data

Mobile number, email address, billing address, delivery address, landmark, society/building details, location pin, and alternate contact details.

Order and Subscription Data

Products ordered, quantities, order history, delivery frequency, subscription plan, wallet balance, pauses, cancellations, refunds, complaints, preferences, and customer support history.

Payment Data

Payment method, transaction ID, payment status, refund status, invoice details, GST details where applicable, and limited payment-related information received from payment service providers. We do not store complete card numbers, CVV, UPI PINs, or net-banking passwords.

Delivery Data

Delivery address, delivery instructions, proof of delivery, delivery status, route information, assigned delivery partner, and communication regarding delivery.

Device and Usage Data

IP address, browser type, device type, operating system, referring URLs, pages visited, time spent, clicks, cookies, analytics identifiers, and similar technical data.

Marketing and Communication Data

Communication preferences, campaign interactions, feedback, reviews, survey responses, referral details, and consent records.

Sensitive or Special Data

We do not intentionally collect sensitive personal data such as health records, biometric data, financial passwords, or precise medical information. If you voluntarily disclose allergy, dietary, or health-related information to customer support, we will use it only for the purpose for which it was provided.

2.4 How We Collect Personal Data

We collect personal data when you:

• visit or use the Platform;

• create or update an account;

• place, modify, cancel, or return an order;

• subscribe to recurring deliveries;

• make payments or request refunds;

• contact customer care;

• submit reviews, feedback, complaints, or survey responses;

• participate in offers, referrals, or loyalty programs;

• interact with our social media pages or advertisements;

• allow cookies or similar technologies.

We may also receive data from payment gateways, delivery partners, analytics providers, marketing platforms, fraud prevention tools, and other service providers.

2.5 Purpose of Processing

We process personal data for the following purposes:

• creating and managing customer accounts;

• accepting, processing, fulfilling, and delivering orders;

• managing subscriptions, wallet balances, invoices, payments, refunds, and cancellations;

• sending order updates, delivery updates, service messages, invoices, and support communications;

• responding to queries, complaints, feedback, and grievances;

• improving products, delivery routes, customer experience, website performance, and service quality;

• detecting, preventing, and investigating fraud, misuse, payment issues, unauthorized activity, and security incidents;

• complying with food safety, taxation, accounting, consumer protection, legal, and regulatory obligations;

• sending marketing communications, offers, product updates, surveys, and promotional content where permitted by law or based on your consent/preferences;

• maintaining business records, analytics, and internal reporting.

2.6 Legal Basis and Consent

Where required by applicable law, we process your personal data based on your consent, legitimate use, contractual necessity, legal compliance, or other lawful grounds available under applicable data protection laws.

You may withdraw consent for optional processing, such as marketing communications or non-essential cookies, by using the unsubscribe option, cookie settings, account settings, or by contacting us. Withdrawal of consent will not affect processing already completed before withdrawal. Some services may not be available if the required data is not provided or if consent necessary for that service is withdrawn.

2.7 Cookies and Tracking Technologies

We use cookies and similar technologies for essential website functionality, security, analytics, preference management, and marketing, as described in our Cookie Policy.

You can manage non-essential cookies through our cookie banner, cookie settings, or browser controls.

2.8 Sharing of Personal Data

We may share personal data with:

• payment gateways, banks, and financial service providers;

• delivery partners, logistics partners, and route management providers;

• technology vendors, hosting providers, cloud service providers, CRM tools, analytics providers, and customer support tools;

• marketing, advertising, SMS, email, WhatsApp, and notification service providers;

• auditors, accountants, lawyers, insurers, consultants, and professional advisers;

• regulators, government authorities, law enforcement agencies, courts, tribunals, or other entities where required by law;

• business transferees in case of merger, acquisition, restructuring, asset sale, or similar transaction.

We require service providers to process personal data only for authorized purposes and to apply appropriate safeguards.

2.9 International Transfers

Some service providers may process or store data outside India. Where personal data is transferred internationally, we will take steps required under applicable law to ensure appropriate protection.

2.10 Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including order fulfilment, customer support, accounting, tax, legal, regulatory, fraud prevention, dispute resolution, and business record purposes.

When data is no longer required, we will delete, anonymize, or securely archive it in accordance with applicable law and internal retention practices.

2.11 Security Measures

We use reasonable technical, organizational, and administrative safeguards to protect personal data from unauthorized access, loss, misuse, alteration, disclosure, or destruction. These may include access controls, encryption where appropriate, secure hosting, audit logs, staff training, and vendor controls.

No method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and promptly informing us of suspected unauthorized use.

2.12 Your Rights

Subject to applicable law, you may have the right to:

• access a summary of your personal data processed by us;

• request correction, completion, or updating of inaccurate or incomplete data;

• request deletion of personal data where applicable;

• withdraw consent for optional processing;

• opt out of marketing communications;

• raise a grievance regarding processing of your personal data;

• nominate another person to exercise rights on your behalf, where applicable.

To exercise these rights, contact us at [Privacy Email Address]. We may verify your identity before processing the request.

2.13 Children’s Privacy

Our Platform is not intended for children to independently place orders or create accounts. If we are required to process personal data of a child, we will do so only in accordance with applicable law, including obtaining verifiable parental or guardian consent where required.

2.14 Marketing Communications

We may send promotional messages, offers, and product updates through SMS, email, WhatsApp, phone, app notifications, or other channels where permitted. You may opt out of marketing communications through unsubscribe links, account settings, communication preferences, or by contacting customer care.

Even after opting out of marketing, you may still receive transactional or service-related messages such as order confirmations, delivery updates, payment alerts, invoices, subscription reminders, and policy notices.

2.15 Data Breach Notification

If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps to notify affected individuals and relevant authorities in accordance with legal requirements.

2.16 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised “Last updated” date. Material changes may be notified through the Platform, email, SMS, or other appropriate channels.

2.17 Contact Us

Privacy Contact: Gaurav Chaudhary

Email: [Privacy Email Address]

Address: Khasra Number 29, Village Tanda Vijaisi, Mustakil, P.O. Neoria, Tehsil Amaria, Pilibhit, Pilibhit, Uttar Pradesh, India, 262305