Privacy Policy

1. Introduction

At Nanmayil (“we,” “us,” or “our”), your privacy and the security of your personal data are central to our commitment as an Indian small business specializing in customized gifts, including laser-cutting, engraving, personalization, and custom T-shirts. This Privacy Policy (“Policy”) explains how we collect, use, share, and safeguard your personal information when you access our website or make purchases from us. By using our website or services, you consent to the practices described below.

Nanmayil operates exclusively in India and is committed to compliance with the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”); and the Consumer Protection (E-Commerce) Rules, 2020. Please read this Policy carefully to understand our practices. If you do not agree with any part of it, please do not use our site or services.

2. Data We Collect

2.1 Personal Information

We collect data needed to process orders, fulfill shipments and personalize products, including:

• Full Name
• Contact Details (mobile number, email address)
• Shipping & Billing Address
• Payment Information (processed via secure gateways – we do not store card / bank details)
• Customer‑Uploaded Content (photos, text, designs for personalization)

2.2 Automatically Collected Data

Certain data may be collected automatically when you visit our website, such as:

• Device identifiers (IP address, browser type, device info)
• Log data (pages viewed, time spent, transaction history)
• Cookies & similar technologies (see Section 6)

2.3 Sensitive Personal Data

Except for payment information (processed through encrypted gateways), we do not deliberately collect sensitive personal data as defined under Indian law (religion, biometrics, medical data, etc.). Please avoid sharing such details with us.

3. How We Use Your Data

We use your personal information for the following business purposes:

1. Order Processing & Fulfillment: Managing and processing orders, including production, packaging, and shipping Communicating order confirmations, updates, and notifications
2. Payments: Facilitating secure payment processing via trusted third-party gateways (e.g., UPI, debit/credit cards, net banking)
3. Personalization: Creating and delivering customized gifts using customer-uploaded content Providing previews or design confirmations where applicable
4. Customer Support and Communication: Addressing queries, complaints, feedback, or support requests Sending service notifications, delivery updates, or essential business communications
5. Compliance and Legal Obligations: Fulfilling obligations under applicable laws and regulations Responding to law enforcement or court orders as required
6. Site Functionality & Analytics: Improving website layout, performance, security, and user experience Conducting analytics using aggregated, anonymized data (see Section 6)

4. Data Sharing & Disclosure

4.1 Trusted Service Providers We share your information only as needed with trusted third parties to facilitate: Payment processing (e.g., Razorpay, PayU) Courier and logistics partners (e.g., DTDC, BlueDart, Delhivery, India Post, Professional Couriers) IT and web hosting service providers, strictly for operational needs All such partners are contractually obliged to implement reasonable security measures and use your data only for the intended purpose.

4.2 Legal Compliance We may disclose your information in response to valid legal requests, subpoenas, law enforcement, or regulatory investigations as required by Indian law.

4.3 No Sale to Third Parties We never sell, rent, or trade your personal data to third parties for marketing or commercial gain.

5. Data Security Measures

5.1 Protections Implemented:

We adopt industry-standard security practices to protect your information, including:

• Secure Sockets Layer (SSL) encryption for all website transactions
• PCI DSS-compliant payment gateways for payment processing
• Firewalls, access controls, and regular vulnerability assessments
• Restricted employee access to customer data on a need-to-know basis

5.2 Disclaimer While we strive to protect your data, no method of transmission or storage is 100% secure. Accordingly, we cannot guarantee absolute security and disclaim liability for any unauthorized access beyond our reasonable control.

6. Cookies & Analytics

6.1 Cookies

Our website uses cookies and similar technologies to:

• Enable core website functionality (shopping cart, login, session management)
• Enhance user experience and site performance Conduct internal analytics (page visits, time on site, etc.)
• Cookies used are non-intrusive; personally identifiable browsing is not tracked for marketing purposes.

6.2 Managing Cookies You can control cookie settings through your browser preferences. Disabling certain cookies may affect site features.

6.3 Analytics Tools We may use tools such as Google Analytics to gather aggregated, anonymized statistics for improving our website. No personally identifiable data is collected or shared for advertising.

7. Customer Rights

You have the right to:

• Access & Correction: Access personal data we hold about you Request correction/rectification of inaccurate or incomplete data
• Data Deletion (Right to Erasure): You may request deletion of your personal data, subject to legal or regulatory retention requirements (see Section 8).
• Objection and Restriction: You may object to certain uses or request temporary restriction of data processing if you believe it is inaccurate or being processed unlawfully.
• How to Exercise Rights: To exercise these rights, contact us using the details provided in Section 11. We may require proof of identity to process your request.

8. Data Retention

8.1 Retention Policy We retain your personal data as long as necessary to fulfill business, legal, and regulatory requirements (e.g., for accounting, tax, order fulfillment, or dispute resolution). Uploaded design/content files are retained only as long as needed for production and customer support. Payment information is never stored on our servers; only transactional references are retained for records.

8.2 Data Disposal Upon expiry of the retention period or at your request (where legally permissible), we securely delete or anonymize personal data.

9. Governing Law & Jurisdiction

9.1 This Policy shall be governed by and construed in accordance with the laws of India, including but not limited to: The Information Technology Act, 2000 The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) The Consumer Protection (E-Commerce) Rules, 2020

9.2 Any disputes arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts in Erode, Tamil Nadu, India.

10. Updates to Privacy Policy

10.1. Nanmayil reserves the right to amend or update this Policy at any time to reflect changes in business practices, technology, applicable law, or for other reasons.

10.2. Updates will be posted on this web page with the “Effective Date” noted above. Material changes will, where practical, be communicated to registered users via email or website notification.

10.3. Continued use of our site or services after any change constitutes acceptance of the updated Policy.

11. Contact Information

For questions, requests or complaints regarding this Policy or your data:

Nanmayil
204/12/3, Tamil Nagar, 4th Street, Slater Nagar, Perunduari, India – 638053.
Email: contact@nanmayil.com
Phone: +91 88381 19556
WhatsApp: +91 95008 32380