Privacy policy

Last updated: 25 August 2026.

Mridhu By Elsa runs this store. We decide what personal information the store collects and what happens to it, and we are the people responsible for it. Our address is 1A, Divine, Divine Providence, Cochin, Kerala 682030, India, and you can write to us at mridhubyelsa@gmail.com.

This policy explains in plain words what we keep when you order, why we keep it, who else sees it, how long it stays with us, and what you can ask us to do about it. If anything here is unclear, write to us and we will explain it.

What we keep when you order

We keep only what is needed to deliver your order and support it afterwards. This is the whole list:

• Your delivery name, so that we can address the parcel and know whose order it is.
• Your phone number, so that we or the courier can reach you about delivery or a problem with the order.
• Your delivery address, so that the parcel reaches you and we can check that we deliver to your area.
• Your email address, only if you choose to give one, so that we can write to you about your order or a refund.
• Your order number and the time the order was placed, so that payment and support stay tied to one order.
• The items, sizes, quantities and rupee amounts you bought, so that there is a record of what was ordered and paid for.
• Payment references from our payment provider, so that we can confirm your payment and make a refund if one is due.
• The facts about your order and payment, and a record of every change to them, so that we can tell you where your order stands and correct it if something goes wrong.
• The times at which order, payment, delivery, return, support and deletion steps happened.

We do not keep card numbers, UPI IDs, bank details, passwords or any other payment or login secret. There is no customer account and no marketing list. We do not keep your IP address, device details or browsing behaviour alongside your order, and we do not build a profile of you.

Order records are used only to run and support your order.

Your shopping bag

The bag you fill while browsing is stored by your own browser on your own device. We do not see it until you place an order, and clearing your browser storage clears it.

Advertising and tracking

This store runs no advertising or analytics trackers and sets no cookies that follow you to other websites. We do not sell, rent or share your information for advertising, and nobody pays us for access to it.

Who else sees your information

A small number of companies help us run the store. Each one receives only what it needs:

• Razorpay processes payments. You enter your card, UPI or bank details on Razorpay's own payment screen and those details never reach us. We send Razorpay only the amount in rupees and a reference for your order.
• Supabase stores your order records. The database is in Mumbai, in India, and it holds the delivery name, phone number, address and email described above along with the rest of your order.
• Cloudflare hosts this website and our product photographs, and holds the nightly copy we keep of the order records in case the database is ever lost. That copy is stored in the Asia-Pacific region.
• Resend sends the emails about your order, if you gave us an email address. It receives your email address and the message itself, which is why we can tell you that your payment arrived and that your parcel is on its way. It is never used to send you anything else, and there is no list to be on.
• The courier that delivers your parcel receives your delivery name, phone number and address so that it can be delivered. Ask us and we will tell you which courier carried your order.

Nobody else receives your personal information. We would disclose it outside this list only where the law requires that of us, and we would keep any such disclosure to what is asked for.

Your order records are held in India, in Mumbai. The nightly copy of them is held in the Asia-Pacific region, which may be outside India. Razorpay and Resend both work internationally and keep their own records under their own terms, so payment information and the emails we send you may be handled outside India.

Keeping your information safe

This site is served over an encrypted connection. No system is perfectly secure, so please never send card numbers, passwords, one-time passcodes or identity documents to us by email or message. We never need them.

How long we keep your information

We keep the record of an order for eight years from the end of the financial year in which you placed it, because Indian tax and accounting rules require sales records to be kept for a period of this kind. If a legal proceeding about an order is open when that deadline arrives, we keep that record until one year after the proceeding ends, if that is later. There is no case in which we keep your details for ever.

Your name, phone number, address and email stay with the order for that time, so that we can answer you about it later. Ask us to delete them and we will, unless the tax rules above still require us to hold that record — and even then we keep only what those rules ask for.

Ask us to delete your details and we will. Your name, phone number, address and email are overwritten and cannot be recovered from the record. The order number, the items and amounts, the payment references and the record of what happened when are kept, so that our accounts stay complete and we meet the tax rules above. A deletion reaches our backups within thirty days, because that is how long a backup is kept. Payment records held by Razorpay stay with Razorpay under its own terms and are outside our control.

What you can ask us to do

Write to us at mridhubyelsa@gmail.com and we will:

• tell you what we hold about your order, in plain words;
• correct anything that is wrong, such as a misspelt name or a changed address;
• remove your personal details from an order earlier than the deadlines above, where the law does not require us to keep them, although we must still keep the record of the sale itself for the eight years described above;
• tell you who has received your information and why.

Please include your order number and one detail that matches the order, so that we do not hand your information to somebody else. We will answer as quickly as we can and within any period the law sets for us, and we will not treat you differently for asking.

Complaints

If you are unhappy with how we have handled your information, write to the store owner at mridhubyelsa@gmail.com with the word Privacy in the subject line, or post to 1A, Divine, Divine Providence, Cochin, Kerala 682030, India. We read and answer complaints ourselves rather than passing them on. If our answer does not satisfy you, you may take the complaint to the data protection authority for your country.

Children

This store is meant for adults. We do not knowingly collect information about children. If you believe a child has given us their details, write to us and we will remove them.

Changes to this policy

If the way we handle your information changes, we will update this page and change the date at the top. If a change matters for orders already placed, we will say so here in plain words.

Contact

Mridhu By Elsa, 1A, Divine, Divine Providence, Cochin, Kerala 682030, India. Email mridhubyelsa@gmail.com.