Privacy Policy

Privacy Policy – ISKCON Mayapur Online Store (mayapur.store)

Last updated: 22 October 2026

This Privacy Policy explains how the ISKCON Mayapur Online Store (“Mayapur Store”, “we”, “us”), operated from Sri Mayapur Dham, ISKCON Campus, Nadia District, West Bengal, India, collects, uses, shares and protects your personal information when you visit mayapur.store, create an account or place an order. We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

By using our website, creating an account or placing an order, you agree to the collection and use of your information as described here. If you do not agree, please do not use the website.

1. Information we collect

Information you give us

  • Account details: name, email address, password (stored only in encrypted, hashed form) and, if you choose, date of birth and title.
  • Order and delivery details: billing and shipping addresses, phone number, products ordered, order notes and, for business customers, company name and GSTIN for GST invoices.
  • Messages: what you send us through the contact form, email, phone or WhatsApp, including order numbers and any photos you share for returns.
  • Reviews and wishlists: product reviews you post (your name is shown with the review) and products you save to a wishlist.
  • Newsletter: your email address, if you subscribe.

Information collected automatically

  • IP address, browser and device type, pages visited, search terms used on our site, the referring website, and the date and time of your visit.
  • Your shopping cart contents and, if you are logged in, your customer account number.
  • Information stored in cookies and similar technologies (see section 5).

Information from third parties

  • Sign in with Google: if you choose to sign in with your Google account, Google shares your name, email address and Google account identifier with us. We never receive your Google password.
  • Payment providers: confirmation of whether your payment succeeded, the transaction reference and amount. We do not receive or store your full card number, CVV, UPI PIN or net-banking password.
  • Courier partners: delivery status and tracking updates for your shipment.

2. How we use your information

  • To process, pack, ship and deliver your orders, and to send order confirmations, invoices and delivery updates.
  • To create and manage your customer account and let you sign in, including with Google.
  • To process payments, refunds, returns and exchanges, and to prevent fraud and misuse.
  • To answer your questions and provide customer support by email, phone or WhatsApp.
  • To issue GST-compliant invoices and meet our legal, tax and accounting obligations.
  • To send you our newsletter and offers, only if you have subscribed, and reminders about items left in your cart or follow-up messages about your orders. You can unsubscribe at any time.
  • To understand how visitors use our website so we can improve products, content and performance.
  • To keep our website secure and to investigate and respond to errors, abuse or security incidents.

3. Payments

Online payments are handled by secure, encrypted payment gateways, such as Paytm and the payment gateway operated for ISKCON Mayapur. Your card, UPI or net-banking details are entered on, or processed by, the payment provider and are subject to its own privacy policy. We only receive the payment status and transaction reference needed to confirm your order. If you pay by bank transfer, we use the transfer details only to match your payment to your order.

4. Who we share your information with

We do not sell or rent your personal information. We share it only as needed to run the store, with:

  • Courier and logistics partners (currently Delhivery and our Mayapur Express delivery service): your name, delivery address and phone number, so they can deliver your order.
  • Payment gateways: the order amount and the details needed to complete your payment.
  • Email delivery: Amazon Web Services (Amazon SES) sends our order and account emails.
  • Website analytics: Google Analytics (Google LLC), described in section 5.
  • Website hosting, security and performance: Cloudflare, Inc., through whose network all website traffic passes to protect the site from attacks and make it faster.
  • Customer contact tools: the contact button on our site is provided by Smartarget. If you choose to message us on WhatsApp, your messages are also handled by WhatsApp (Meta) under its own privacy policy.
  • Our e-commerce platform provider (PrestaShop), for technical services connected to the software that runs this store.
  • Authorities, when required by law, court order or a lawful request from a government agency, or when necessary to protect our rights, our customers or the public against fraud or harm.

These providers may only use your information to provide their services to us and are expected to protect it appropriately.

5. Cookies and similar technologies

Cookies are small text files stored on your device. We use:

  • Essential cookies, needed for the website to work: they keep your shopping cart, keep you signed in, remember your language and currency, and protect forms against misuse. Our main shop cookie expires after about 20 days.
  • Analytics cookies: Google Analytics records how visitors use our website (pages viewed, time spent, approximate location and device type). When you are logged in, we also send Google an internal, pseudonymous customer number (never your name or email address) so we can understand repeat visits. Google may process this data outside India. You can opt out with the Google Analytics opt-out browser add-on.
  • Third-party features: the Google sign-in button and our contact button load content from Google and Smartarget, which may set their own cookies under their own policies.

You can block or delete cookies in your browser settings. If you block essential cookies, the cart, checkout and sign-in will not work properly.

6. Transfers outside India

Some of our service providers, including Google, Amazon Web Services and Cloudflare, may store or process your information on servers outside India. We use these providers only to run the store as described above. Any such transfer is made in line with applicable Indian law.

7. How long we keep your information

  • Orders and invoices: for as long as required by GST, income-tax and accounting laws (generally at least six years), even if you close your account.
  • Customer account: until you ask us to delete it or it has been inactive for a long period. Order records we must keep by law are retained as stated above.
  • Newsletter subscription: until you unsubscribe.
  • Customer support messages: as long as needed to resolve your request and for a reasonable period afterwards.
  • Website server logs (IP address and pages requested): normally deleted after 90 days, unless needed to investigate a security incident.

8. Your rights

Subject to applicable law, you have the right to:

  • Access a summary of the personal data we hold about you and how we use it.
  • Correct or update inaccurate or incomplete information.
  • Delete your personal data, except information we must keep by law (for example, invoices).
  • Withdraw consent at any time, for example by unsubscribing from emails. This does not affect processing already carried out.
  • Nominate another person to exercise your rights in the event of your death or incapacity.
  • Raise a grievance with us, and, if you are not satisfied with our response, complain to the Data Protection Board of India.

How to use your rights: sign in and go to My account, where you can edit your personal information and addresses, and use “GDPR – Personal data” to download your data or request its deletion. You can also email us at mayapuronlinestore@gmail.com. We may ask you to confirm your identity before acting on a request.

9. Marketing communications

We send newsletters and promotional offers only to people who have subscribed. You can unsubscribe at any time using the link in our marketing emails, from My account (Information), or by emailing us. Order, delivery and account emails are part of our service and are sent even if you are not subscribed.

10. Security

We use reasonable security practices to protect your information. Our website is served only over encrypted HTTPS connections, passwords are stored only as secure hashes, payments are handled by specialised payment providers, and access to customer data is limited to people who need it to serve you. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will inform you and the authorities as required by law.

11. Children

Our website is intended for adults. You must be at least 18 years old to create an account or place an order. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

12. Links to other websites

Our website contains links to other websites and social networks, for example the Facebook, X (Twitter) and Pinterest share buttons on product pages. We are not responsible for their privacy practices. Please read their privacy policies before sharing information with them.

13. Changes to this policy

We may update this Privacy Policy from time to time, for example when we add new services or when the law changes. The updated version will be posted on this page with a new “Last updated” date. For significant changes, we will also notify registered customers by email or with a notice on the website.

14. Grievance Officer and contact

If you have any question, concern or complaint about this Privacy Policy or about how we handle your personal data, please contact our Grievance Officer:

Grievance Officer – ISKCON Mayapur Online Store
Sri Mayapur Dham, ISKCON Campus, Nadia District, West Bengal, India
Email: mayapuronlinestore@gmail.com
Phone / WhatsApp: +91 98833 44020, +91 94342 13333
Working hours: Monday to Saturday, 10 AM – 6 PM IST

We will acknowledge your grievance promptly and aim to resolve it within one month of receiving it.