Privacy policy
PRIVACY POLICY
Master
|
Legal Basis This Privacy Policy is drafted in compliance with the Information Technology Act, 2000; Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ('SPDI Rules'); Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; and the Digital Personal Data Protection Act, 2023 ('DPDP Act') as applicable. |
1. Introduction
Master ('We', 'Us', 'Our', or 'Company') is the operator of www.masterindia.in, an online store selling premium cookware, pressure cookers, gas stoves, and kitchen appliances. We are committed to protecting the privacy and security of your personal data.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights with respect to that information. By accessing or using our website, creating an account, or placing an order, you acknowledge that you have read and understood this Policy.
If you do not agree with this Policy, please do not use our website or services.
2. Definitions
For the purposes of this Policy:
• 'Personal Data' means any information that identifies or can identify you as an individual, including name, email address, phone number, and postal address.
• 'Sensitive Personal Data or Information (SPDI)' includes financial information such as bank account details, credit/debit card details, and payment instrument information, as defined under the SPDI Rules, 2011.
• 'Data Fiduciary' refers to Master, which determines the purpose and means of processing your personal data.
• 'Data Principal' refers to you, the individual whose personal data is being processed.
• 'Processing' means any operation performed on personal data, including collection, storage, use, sharing, or deletion.
3. What Personal Data We Collect
3.1 Information You Provide Directly
When you use our website, you may provide us with the following information:
|
Category |
Examples |
When Collected |
|
Identity Information |
Full name, date of birth (if provided) |
Account registration, checkout |
|
Contact Information |
Email address, mobile number, WhatsApp number |
Account registration, checkout, contact form |
|
Address Information |
Delivery address, billing address, pin code, city, state |
Checkout, account settings |
|
Payment Information |
UPI ID, card last 4 digits (we do not store full card numbers), bank name |
Checkout (processed via secure payment gateways) |
|
Account Credentials |
Username, encrypted password |
Account registration |
|
Communications |
Messages sent via contact form, support emails, WhatsApp |
When you contact us |
|
Warranty Registration |
Product serial number, purchase date, contact details |
Warranty registration form |
3.2 Information Collected Automatically
When you visit www.masterindia.in, we and our service providers automatically collect certain technical information:
• IP address and approximate geographic location (city/state level)
• Browser type, version, and operating system
• Device type (mobile, desktop, tablet)
• Pages visited, time spent, and navigation path on our website
• Referring website or search engine
• Cookies and similar tracking technologies (see Section 8)
3.3 Information from Third Parties
We may receive information about you from:
• Payment gateway providers (transaction status, payment method type)
• Logistics partners (delivery status, delivery confirmation)
• Social media platforms (if you log in or interact with our social media pages)
• Google Analytics and other analytics services (aggregated, anonymised usage data)
4. How We Use Your Personal Data
We use your personal data only for lawful purposes and on the basis of your consent, contractual necessity, legal obligation, or legitimate business interest. The specific purposes are:
|
Purpose |
Legal Basis |
Data Used |
|
Process and fulfil your orders |
Contractual necessity |
Name, address, contact, payment info |
|
Send order confirmations, invoices, and tracking updates |
Contractual necessity |
Email, phone, order details |
|
Manage your account and preferences |
Contractual necessity / Consent |
Account credentials, contact info |
|
Customer support and grievance resolution |
Legal obligation / Legitimate interest |
Name, contact, order details, communications |
|
Warranty registration and service |
Contractual necessity / Consent |
Name, contact, product info |
|
Send promotional emails, offers, and newsletters |
Consent (opt-in) |
Email address, purchase history |
|
Fraud prevention and security |
Legal obligation / Legitimate interest |
IP address, transaction data, device info |
|
Website improvement and analytics |
Legitimate interest |
Usage data, cookies |
|
Compliance with legal obligations |
Legal obligation |
All relevant data as required by law |
|
Marketing via WhatsApp / SMS |
Consent (opt-in at checkout) |
Phone number |
|
Your Consent: Where we rely on your consent to process personal data (e.g. for marketing communications), you have the right to withdraw consent at any time by unsubscribing from emails or contacting us. Withdrawal of consent does not affect the lawfulness of processing before withdrawal. |
5. Sharing of Personal Data
5.1 Third Parties We Share Data With
We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes. We share your data only in the following circumstances:
• Logistics & Delivery Partners: Your name, address, and phone number are shared with our courier and logistics partners solely for the purpose of delivering your order.
• Payment Gateway Providers: Payment information is processed by our PCI-DSS compliant payment gateway partners (such as Razorpay, PayU, or equivalent). We do not store full card or bank account details.
• Technology & Platform Providers: We use Shopify as our e-commerce platform. Shopify processes order and customer data on our behalf under a data processing agreement. Shopify's privacy policy is available at shopify.com/legal/privacy.
• Analytics Providers: We use Google Analytics for aggregated, anonymised website usage analytics. No personally identifiable information is shared with Google for analytics purposes.
• Legal & Regulatory Authorities: We may disclose your data to courts, law enforcement agencies, or government authorities when required by law, court order, or to protect our legal rights.
5.2 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:
|
Data Type |
Retention Period |
Reason |
|
Order and transaction records |
7 years |
GST / Income Tax compliance (as per Indian tax laws) |
|
Account information |
Duration of account + 2 years after deletion |
Legal claims, customer service |
|
Communication records (email/chat) |
3 years |
Dispute resolution, grievance records |
|
Payment transaction logs |
7 years |
RBI regulations, financial audit |
|
Website usage / analytics data |
26 months (Google Analytics default) |
Website improvement |
|
Marketing consent records |
Until consent is withdrawn + 1 year |
Proof of consent |
After the applicable retention period, your data will be securely deleted or anonymised.
7. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023 and the IT (SPDI) Rules, 2011, you have the following rights with respect to your personal data:
• Right to Access: You may request a summary of the personal data we hold about you and how it is being processed.
• Right to Correction: You may request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations. Deletion of your account will result in the loss of order history and warranty records.
• Right to Grievance Redressal: You have the right to have your privacy complaints addressed by our Grievance Officer (see Section 12).
• Right to Nominate: Under the DPDP Act, 2023, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
• Right to Withdraw Consent: For processing based on consent (e.g. marketing), you may withdraw consent at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us at the details in Section 12. We will respond within 30 days of receiving your request.
8. Cookies & Tracking Technologies
8.1 What Are Cookies
Cookies are small text files placed on your device when you visit our website. They help us recognise your browser, remember your preferences, and improve your experience.
8.2 Types of Cookies We Use
|
Cookie Type |
Purpose |
Can Be Disabled? |
|
Strictly Necessary |
Session management, cart functionality, login authentication |
No — essential for website operation |
|
Performance / Analytics |
Google Analytics — tracks page views, user journeys (anonymised) |
Yes — via browser settings |
|
Functional |
Remembers language, region, and preferences |
Yes — may affect experience |
|
Marketing / Targeting |
Retargeting ads, Facebook Pixel, Google Ads conversion tracking |
Yes — via browser or opt-out tools |
8.3 Managing Cookies
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website (e.g. your cart may not be saved). For more information on managing cookies, visit www.allaboutcookies.org.
9. Security of Your Personal Data
We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:
• SSL/TLS encryption for all data transmitted between your browser and our website (HTTPS).
• Secure, PCI-DSS compliant payment processing via our payment gateway partners.
• Access controls — personal data is accessible only to authorised personnel on a need-to-know basis.
• Regular security reviews of our systems and third-party service providers.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and interests, we will notify you as required under applicable law.
10. Children's Privacy
Our website and services are not directed at individuals under the age of 18 years. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately. We will delete such data upon verification.
11. Links to Third-Party Websites
Our website may contain links to third-party websites, including social media platforms (Instagram, Facebook, YouTube), logistics tracking portals, and payment gateways. These third-party websites have their own privacy policies, which we do not control and are not responsible for. We encourage you to review the privacy policies of any third-party website you visit.
12. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000, IT (Intermediary Guidelines) Rules, 2021, and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer for privacy-related complaints:
|
Detail |
Information |
|
Grievance Officer |
Mr.Karthick Murali |
|
Designation |
Sales & Marketing Manager |
|
|
|
|
Postal Address |
MPee Kitchenette (P) Ltd |
|
Response Time |
Acknowledgement within 48 hours; Resolution within 30 days |
If you are not satisfied with our response, you may approach the Data Protection Board of India (once constituted under the DPDP Act, 2023) or file a complaint with the National Consumer Helpline at 1800-11-4000.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
• Update the 'Last Updated' date at the top of this page.
• Display a prominent notice on our website or send you an email notification (for registered users).
Your continued use of our website after any changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.
14. Governing Law & Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising out of this Policy shall be subject to the jurisdiction of the competent courts or the Data Protection Board of India as applicable.
© 2026 Master. All Rights Reserved. | www.masterindia.in

