Privacy policy

PRIVACY POLICY

Master

Legal Basis

This Privacy Policy is drafted in compliance with the Information Technology Act, 2000; Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ('SPDI Rules'); Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; and the Digital Personal Data Protection Act, 2023 ('DPDP Act') as applicable.

 

1. Introduction

Master ('We', 'Us', 'Our', or 'Company') is the operator of www.masterindia.in, an online store selling premium cookware, pressure cookers, gas stoves, and kitchen appliances. We are committed to protecting the privacy and security of your personal data.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights with respect to that information. By accessing or using our website, creating an account, or placing an order, you acknowledge that you have read and understood this Policy.

If you do not agree with this Policy, please do not use our website or services.

 

2. Definitions

For the purposes of this Policy:

       'Personal Data' means any information that identifies or can identify you as an individual, including name, email address, phone number, and postal address.

       'Sensitive Personal Data or Information (SPDI)' includes financial information such as bank account details, credit/debit card details, and payment instrument information, as defined under the SPDI Rules, 2011.

       'Data Fiduciary' refers to Master, which determines the purpose and means of processing your personal data.

       'Data Principal' refers to you, the individual whose personal data is being processed.

       'Processing' means any operation performed on personal data, including collection, storage, use, sharing, or deletion.

 

3. What Personal Data We Collect

3.1 Information You Provide Directly

When you use our website, you may provide us with the following information:

 

Category

Examples

When Collected

Identity Information

Full name, date of birth (if provided)

Account registration, checkout

Contact Information

Email address, mobile number, WhatsApp number

Account registration, checkout, contact form

Address Information

Delivery address, billing address, pin code, city, state

Checkout, account settings

Payment Information

UPI ID, card last 4 digits (we do not store full card numbers), bank name

Checkout (processed via secure payment gateways)

Account Credentials

Username, encrypted password

Account registration

Communications

Messages sent via contact form, support emails, WhatsApp

When you contact us

Warranty Registration

Product serial number, purchase date, contact details

Warranty registration form

 

3.2 Information Collected Automatically

When you visit www.masterindia.in, we and our service providers automatically collect certain technical information:

       IP address and approximate geographic location (city/state level)

       Browser type, version, and operating system

       Device type (mobile, desktop, tablet)

       Pages visited, time spent, and navigation path on our website

       Referring website or search engine

       Cookies and similar tracking technologies (see Section 8)

3.3 Information from Third Parties

We may receive information about you from:

       Payment gateway providers (transaction status, payment method type)

       Logistics partners (delivery status, delivery confirmation)

       Social media platforms (if you log in or interact with our social media pages)

       Google Analytics and other analytics services (aggregated, anonymised usage data)

 

4. How We Use Your Personal Data

We use your personal data only for lawful purposes and on the basis of your consent, contractual necessity, legal obligation, or legitimate business interest. The specific purposes are:

 

Purpose

Legal Basis

Data Used

Process and fulfil your orders

Contractual necessity

Name, address, contact, payment info

Send order confirmations, invoices, and tracking updates

Contractual necessity

Email, phone, order details

Manage your account and preferences

Contractual necessity / Consent

Account credentials, contact info

Customer support and grievance resolution

Legal obligation / Legitimate interest

Name, contact, order details, communications

Warranty registration and service

Contractual necessity / Consent

Name, contact, product info

Send promotional emails, offers, and newsletters

Consent (opt-in)

Email address, purchase history

Fraud prevention and security

Legal obligation / Legitimate interest

IP address, transaction data, device info

Website improvement and analytics

Legitimate interest

Usage data, cookies

Compliance with legal obligations

Legal obligation

All relevant data as required by law

Marketing via WhatsApp / SMS

Consent (opt-in at checkout)

Phone number

 

Your Consent:

Where we rely on your consent to process personal data (e.g. for marketing communications), you have the right to withdraw consent at any time by unsubscribing from emails or contacting us. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

 

5. Sharing of Personal Data

5.1 Third Parties We Share Data With

We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes. We share your data only in the following circumstances:

       Logistics & Delivery Partners: Your name, address, and phone number are shared with our courier and logistics partners solely for the purpose of delivering your order.

       Payment Gateway Providers: Payment information is processed by our PCI-DSS compliant payment gateway partners (such as Razorpay, PayU, or equivalent). We do not store full card or bank account details.

       Technology & Platform Providers: We use Shopify as our e-commerce platform. Shopify processes order and customer data on our behalf under a data processing agreement. Shopify's privacy policy is available at shopify.com/legal/privacy.

       Analytics Providers: We use Google Analytics for aggregated, anonymised website usage analytics. No personally identifiable information is shared with Google for analytics purposes.

       Legal & Regulatory Authorities: We may disclose your data to courts, law enforcement agencies, or government authorities when required by law, court order, or to protect our legal rights.

5.2 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

 

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

 

Data Type

Retention Period

Reason

Order and transaction records

7 years

GST / Income Tax compliance (as per Indian tax laws)

Account information

Duration of account + 2 years after deletion

Legal claims, customer service

Communication records (email/chat)

3 years

Dispute resolution, grievance records

Payment transaction logs

7 years

RBI regulations, financial audit

Website usage / analytics data

26 months (Google Analytics default)

Website improvement

Marketing consent records

Until consent is withdrawn + 1 year

Proof of consent

 

After the applicable retention period, your data will be securely deleted or anonymised.

 

7. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and the IT (SPDI) Rules, 2011, you have the following rights with respect to your personal data:

       Right to Access: You may request a summary of the personal data we hold about you and how it is being processed.

       Right to Correction: You may request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings.

       Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations. Deletion of your account will result in the loss of order history and warranty records.

       Right to Grievance Redressal: You have the right to have your privacy complaints addressed by our Grievance Officer (see Section 12).

       Right to Nominate: Under the DPDP Act, 2023, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.

       Right to Withdraw Consent: For processing based on consent (e.g. marketing), you may withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at the details in Section 12. We will respond within 30 days of receiving your request.

 

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us recognise your browser, remember your preferences, and improve your experience.

8.2 Types of Cookies We Use

 

Cookie Type

Purpose

Can Be Disabled?

Strictly Necessary

Session management, cart functionality, login authentication

No — essential for website operation

Performance / Analytics

Google Analytics — tracks page views, user journeys (anonymised)

Yes — via browser settings

Functional

Remembers language, region, and preferences

Yes — may affect experience

Marketing / Targeting

Retargeting ads, Facebook Pixel, Google Ads conversion tracking

Yes — via browser or opt-out tools

 

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website (e.g. your cart may not be saved). For more information on managing cookies, visit www.allaboutcookies.org.

 

9. Security of Your Personal Data

We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

       SSL/TLS encryption for all data transmitted between your browser and our website (HTTPS).

       Secure, PCI-DSS compliant payment processing via our payment gateway partners.

       Access controls — personal data is accessible only to authorised personnel on a need-to-know basis.

       Regular security reviews of our systems and third-party service providers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and interests, we will notify you as required under applicable law.

 

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18 years. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately. We will delete such data upon verification.

 

11. Links to Third-Party Websites

Our website may contain links to third-party websites, including social media platforms (Instagram, Facebook, YouTube), logistics tracking portals, and payment gateways. These third-party websites have their own privacy policies, which we do not control and are not responsible for. We encourage you to review the privacy policies of any third-party website you visit.

 

12. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000, IT (Intermediary Guidelines) Rules, 2021, and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer for privacy-related complaints:

 

Detail

Information

Grievance Officer

Mr.Karthick Murali

Designation

Sales & Marketing Manager

Email

karthick@masterindia.in

Postal Address

MPee Kitchenette (P) Ltd
Sy 54/1, 4th Cross, Attibele, Bengaluru, Karnataka 562107 , India

Response Time

Acknowledgement within 48 hours; Resolution within 30 days

 

If you are not satisfied with our response, you may approach the Data Protection Board of India (once constituted under the DPDP Act, 2023) or file a complaint with the National Consumer Helpline at 1800-11-4000.

 

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

       Update the 'Last Updated' date at the top of this page.

       Display a prominent notice on our website or send you an email notification (for registered users).

Your continued use of our website after any changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

 

14. Governing Law & Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising out of this Policy shall be subject to the jurisdiction of the competent courts or the Data Protection Board of India as applicable.

 

© 2026 Master. All Rights Reserved. | www.masterindia.in