Privacy Policy

Last updated: August 22, 2026

Maulikta ("Maulikta", "we", "us") respects your privacy. This policy explains what personal data we collect, why, and the rights you have over it under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA, India's Digital Personal Data Protection Act (DPDPA), and similar laws.

1. Data we collect

Account data (name, email, hashed password), order and shipping data, payment tokens (never raw card numbers — see Section 5), device/usage data, and, where you consent, analytics and marketing identifiers.

2. Legal basis for processing

We process order-related data under contract necessity, security/fraud data under legitimate interest, and analytics/marketing data only with your consent, which you can withdraw anytime from Privacy Settings.

3. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability (a machine-readable export), and objection to processing of your personal data. Submit requests from your Privacy Settings or by emailing support@maulikta.com. We respond within the statutory timeframe (typically 30 days under GDPR, 45 days under CCPA).

4. Data retention

We retain order records for the period required by tax and accounting law (typically 7 years), account data until you request deletion, and marketing consent records for audit purposes.

5. Payments

Card payments are processed by PCI-DSS Level 1 certified payment processors. Maulikta's servers never store full card numbers or CVC codes.

6. International transfers

Where personal data is transferred outside your jurisdiction, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

7. Children's privacy

Maulikta is not directed at children under 16 and we do not knowingly collect their personal data.

8. Contact

Data Protection queries: support@maulikta.com. EU/UK users may also lodge a complaint with their local supervisory authority.

This is placeholder legal text for a prototype and must be reviewed by qualified legal counsel before production use.