Privacy Policy

This Privacy Policy explains how Maya Enterprises (trading as Tangry Spices, “we”, “us”, “our”) collects, uses, and protects information about you when you visit tangryspices.com or make a purchase from us.

1. What data we collect

2. How we use your data

• Order fulfilment — processing payments, packing, shipping, and sending order confirmation and tracking emails.
• Customer support — responding to your queries, returns, or complaints.
• Newsletter & marketing — sending product updates, recipes, and offers to subscribers who have opted in. You can opt out at any time.
• Site improvement — using aggregated, anonymised analytics to understand how visitors use the site and improve the experience.
• Legal obligations — retaining transaction records as required under the IT Act 2000 and applicable GST rules.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. Cookies & analytics

We use the following third-party services that may set cookies or collect usage data:

Most browsers allow you to refuse cookies or delete existing ones. Doing so may affect site functionality. Google Analytics data can be opted out of via the Google Analytics Opt-out Browser Add-on.

4. Who we share data with

We share personal data only with service providers necessary to run the business:

• Supabase — database hosting for orders, accounts, and product data.
• Razorpay — payment gateway. Subject to Razorpay's Privacy Policy.
• Courier partners — your name, phone number, and delivery address are shared with the shipping carrier to fulfil your order.
• Vercel — hosting infrastructure. No personal data is stored by Vercel beyond standard server logs.

We do not transfer personal data outside India except where required by the services listed above (e.g. Google Analytics servers). Where applicable, standard contractual protections apply.

5. How long we keep your data

• Order records — retained for 7 years to comply with GST and accounting requirements.
• Account data — retained while your account is active. You can request deletion at any time (see below).
• Newsletter subscriptions — retained until you unsubscribe.
• Analytics data — retained per the default retention settings of each platform (typically 14 months for GA4).

6. Your rights

Under applicable Indian law (IT Act 2000 & DPDP Act) you have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data (subject to legal retention requirements).
• Withdraw consent for newsletter communications at any time.
• Raise a grievance with our data officer.

To exercise any of these rights, email us at tangryspices@gmail.com with the subject line “Data Request”. We will respond within 30 days.

7. Security

We use HTTPS across the entire site. Passwords are hashed and never stored in plain text. Payment details are handled exclusively by Razorpay and never touch our servers. While we take reasonable precautions, no system is perfectly secure; please contact us immediately if you suspect unauthorised access to your account.

8. Children's privacy

Our site is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will always reflect the most recent version. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact & grievance officer