HIMSHAIL

Privacy Policy

Last updated 25 August 2026

HIMSHAIL (“we”, “us”, “our”) operates himshail.com and sells packaged foods and botanicals — including roasted makhana (fox nuts), herbal / flower teas, and related superfoods — for personal consumption. This policy explains how we handle personal information when you browse, create an account, check out, contact us, or join our mailing list.

We process personal data in line with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and rules, and food-business duties under the Food Safety and Standards Act, 2006 (including FSSAI labelling and recall notices). Using the site or placing an order means you have read this policy.

Registered business name, GSTIN, FSSAI licence and registered office appear on invoices and packaging. For a copy, email support@himshail.com.

1. Who this applies to

Customers, account holders, gift recipients whose details you give at checkout, newsletter subscribers, and visitors in India. We do not knowingly collect data from children under 18. Do not create an account or check out if you are under 18 without a parent or guardian.

2. Information we collect

You provide

Name, email, mobile number
Delivery and billing addresses, gift messages
Account password (stored hashed)
Support emails, chats and reviews you send us
Marketing opt-in / opt-out

Orders and payments

Cart, quantities, coupons, GST invoice data
Payment status, Razorpay payment / order IDs, method type (UPI, card, net banking, wallet)
We do not store full card numbers, CVV, UPI PINs or net-banking passwords. Those are entered on Razorpay’s PCI-DSS checkout

Collected automatically

IP address, browser, device, approximate location from IP
Pages viewed and diagnostics needed to run the shop
Cookies as described below

3. Why we use it

Take, pack and deliver food orders and send dispatch / OTP messages
Process payments through Razorpay and refund to the original method
Issue GST invoices and keep tax records
Contact you for batch recall, mislabel or allergen notices
Support, damaged-goods review, and fraud / chargeback handling
Improve catalogue, stock and site performance
Marketing only if you opt in — unsubscribe anytime
Comply with courts, tax authorities or FSSAI

4. Payments (Razorpay)

Checkout is processed by Razorpay Software Private Limited and its banks. You should also read Razorpay’s Privacy Policy. We receive success/failure, a payment reference, amount and limited method metadata — not your full card PAN. Refunds follow the original method; your bank or UPI app decides when the credit appears.

5. Sharing

We do not sell personal information. We share it only with:

Razorpay and payment networks
Warehouse and courier partners
Email / SMS / WhatsApp providers for order notices
Hosting, analytics and security vendors under contract
Advisers under confidentiality, and authorities when Indian law requires

Some processors may access data outside India, with safeguards consistent with the DPDP Act.

6. Cookies

Essential cookies keep you signed in, remember your cart and complete Razorpay checkout. Analytics cookies may be used to see which products people view. Blocking essential cookies can break checkout.

7. Retention

Account data lasts while the account is open and a reasonable time after. Orders, invoices and payment references are kept for tax and company-law periods (often eight years in India, or longer during a dispute). Marketing lists last until you unsubscribe.

8. Security

We use HTTPS, access control and hashed passwords. Never send card numbers or UPI PINs by email. Report suspected account misuse immediately.

9. Your rights

Subject to the DPDP Act and records we must keep, you may ask us to access, correct or erase data, or withdraw marketing consent. Email support@himshail.com with subject “Privacy request”. We may verify it is you.

10. Grievance officer

Write to support@himshail.com with “Grievance — Privacy”. We aim to acknowledge within 48 hours on business days.

11. Changes

We may update this policy when checkout, logistics or the law changes. The date above will change. Continued use after an update means you accept the revised policy.