Privacy policy

Gifts By Mosami, trading as Gifts By Mosami, is responsible for deciding how the information described here is used. Our contact and grievance details are listed on the Business & grievance page.

• Orders: your name, email, phone number, delivery address, PIN code, order contents, colour or personalisation choices, gift note and payment status. We use these to accept payment, make and deliver the order, provide updates, prevent fraud and support you afterwards.
• Messages and custom requests: your name, contact details, message, budget, requested date and any optional reference photo. We use these to answer you and prepare a quote or piece.
• Restock alerts: your WhatsApp number and the product requested. We use it only to send the requested availability message.
• Technical and security data: IP address, request time, device/browser details and diagnostic logs may be processed by our hosting provider and used to keep the store secure, rate-limit abuse and diagnose failures.
• Your bag: product IDs, quantities, colours and optional personalisation notes are saved in your browser’s local storage so the bag remains there when you return.

Please do not include identity documents, financial information or other sensitive personal details in a message, gift note, personalisation field or reference photo.

Online payments are processed by PayU. Card, bank and UPI credentials are entered on PayU’s payment flow and are not stored by Gifts By Mosami. We receive limited payment information such as the transaction reference, payment method, amount and status so we can confirm or refund an order.

Cash-on-delivery orders do not require online payment details. If a COD refund is approved, we will ask you privately for the minimum UPI or bank details needed to send it.

We share only what is reasonably needed with service providers that help operate the store:

• Vercel for website hosting, server logs and product/reference image storage;
• Turso for the store database;
• PayU for online payment processing;
• Shiprocket and the selected courier for rates, labels, tracking and delivery;
• Brevo when transactional order or support emails are enabled; and
• professional advisers, regulators or law-enforcement bodies where disclosure is required by law or necessary to protect rights and prevent harm.

We do not sell or rent personal information, and we do not use customer details for third-party advertising. Service providers may process data outside your state or outside India under their own infrastructure and safeguards.

The customer-facing store does not currently use advertising cookies. It uses browser local storage for the shopping bag. Hosting and security services may use essential technical storage or logs needed to deliver and protect the site. If privacy-friendly traffic analytics is enabled, it is used to understand aggregate visits and site performance, not to build advertising profiles.

You can clear the saved bag through your browser’s site-data controls. Blocking essential storage may prevent the bag or checkout from working as expected.

Order and payment records are retained for fulfilment, customer support, accounting, tax, fraud-prevention and other legal record-keeping needs. Messages, custom requests and restock details are retained only while reasonably useful for the request, support history, security or a legal obligation. You may ask us to delete information that we no longer need and are not required to keep.

We use access controls, protected administrator authentication, encrypted connections and reputable infrastructure providers. No internet service can promise absolute security. Optional custom-order reference images are stored at unlisted public-asset URLs so Maa can view them; do not upload a photo that you would consider highly sensitive.

Subject to applicable law, you may ask us to:

• tell you what personal information we hold about you;
• correct inaccurate or incomplete information;
• erase information that is no longer required;
• stop an optional use or withdraw consent, such as a restock request; or
• review a privacy grievance.

To protect you, we may verify that a request comes from the person concerned. Withdrawing an optional consent does not affect processing already completed, and some information may still need to be retained under law or to resolve a dispute.

The store is intended for purchases by adults. We do not knowingly ask a child to place an order or submit personal data without a parent or lawful guardian. Contact us if you believe a child has submitted information improperly.

We may update this notice when the store or applicable requirements change. The latest version and update date will always appear on this page. Material changes will apply prospectively.

Email or message us to exercise a privacy right or raise a concern. Please write “Privacy request” and include enough information for us to identify the relevant order or message.