Privacy Policy

1. Scope & Principles

This Privacy Policy explains how MAAYA DIVINE SOLUTIONS PRIVATE LIMITED ("MAAYA", "we", "us", or "our") collects, uses, protects, and discloses personal information when you browse our website, interact with our 3D digital showroom, create a wishlist, or purchase sacred artifacts through our online store.

We adhere to the provisions of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act (DPDPA), 2023 of India, and internationally recognized data privacy standards including GDPR where applicable.

2. Information We Collect

We collect only the information necessary to fulfill your divine purchase experience and provide reliable delivery:

• Identity & Contact Information: Full name, billing address, shipping address, email address, and mobile phone number.
• Order & Transaction Records: Purchased products, deity selections, order value, transaction timestamps, and invoice records.
• Phone Verification Data (for COD): Contact logs, confirmation records, and delivery availability for Cash on Delivery orders in India.
• Technical & Telemetry Data: IP address, browser type, operating system, device screen resolution, 3D WebGL capability logs, and referral URLs.
• Local Browser Preferences: Wishlist selections and cart items stored securely in your local browser storage for a seamless showroom revisit.

3. Payment Data Security & Gateway Disclosure

MAAYA does not collect, record, or store your raw debit card, credit card numbers, CVV, or banking PINs. All financial transactions are directly handled by certified third-party payment gateways compliant with the Payment Card Industry Data Security Standard (PCI-DSS Level 1):

• Domestic Payments (India - INR): Handled securely by Razorpay, supporting UPI (Google Pay, PhonePe, Paytm), Net Banking across all major Indian banks, and RuPay/Visa/Mastercard.
• International Payments (Global Currencies): Handled securely via Stripe and PayPal, enabling seamless transactions in USD, EUR, GBP, AED, SGD, and other currencies with 256-bit SSL encryption.
• Cash on Delivery (COD): Payment is collected in physical cash by the courier representative upon delivery, following prior telephonic verification by our fulfillment team.

4. Analytics, Cookies & Tracking Disclosures

To continuously refine our virtual showroom, optimize model loading times, and showcase relevant sacred artifacts to devotees worldwide, we utilize verified analytic tools:

• Google Analytics: We use Google Analytics to examine aggregated, anonymized visitor traffic, session durations, and user journeys across our 3D collections. IP addresses are anonymized.
• Meta Pixel: We deploy the Meta Pixel to evaluate the effectiveness of our social storytelling, measure engagement, and present relevant cultural and divine announcements to interested audiences.
• Essential Cookies: Essential cookies are used solely to preserve your active shopping cart, retain showroom lighting settings, and prevent unauthorized site access.

You can disable non-essential cookies at any time via your browser settings without impacting your ability to browse our catalog.

5. How We Share Your Information

We strictly limit disclosure of your personal data to trusted third-party service providers essential for completing your order:

• Logistics & Freight Partners: We share your recipient name, address, phone number, and package specifications with vetted logistics partners (e.g., BlueDart, Delhivery, DHL Express, FedEx) solely to coordinate domestic and international delivery.
• Legal & Regulatory Compliance: We may disclose information if mandated by Indian law, judicial decree, or law enforcement authorities to safeguard against fraud or legal liability.

6. Data Retention & Your Rights

We retain order and tax records for the duration required by statutory commercial and GST accounting laws in India. For marketing communications, you may opt out at any time by clicking "unsubscribe" or emailing our support desk.

Depending on your jurisdiction, your rights include:

• The right to request access to the personal data we maintain about you;
• The right to request correction of outdated or inaccurate delivery information;
• The right to request deletion of your account and personal data, subject to statutory retention obligations;
• The right to withdraw previously granted consent for marketing communications.

7. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for data protection matters at MAAYA is: