Privacy Policy

Who We Are

Mokshita Enterprises ("we", "us", or "our") is a handicrafts and cultural travel business based in Agra, Uttar Pradesh, India. We operate the website mokshitaenterprises.com (the "Site") and sell authentic Indian handicrafts and curated travel experiences.

We are committed to protecting your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over it.

Information We Collect

We collect information in three ways: directly from you, automatically when you use our Site, and from third-party services.

Information you provide directly:

• Name, email address, and phone number when you contact us or create an account
• Shipping address and billing details when you place an order
• Payment information (processed securely by Razorpay — we never store your full card details)
• Messages, preferences, and custom commission details you share with us
• Travel enquiry details including travel dates, group size, and destination preferences

Information collected automatically:

• IP address, browser type, and device information
• Pages visited, time spent, and navigation patterns (via cookies)
• Referring website URL

How We Use Your Information

We use your personal information for the following purposes:

• Order fulfilment: Processing your handicraft purchases, dispatching products, and providing shipping updates
• Travel bookings: Confirming, managing, and delivering your travel packages
• Customer support: Responding to enquiries, complaints, and custom commission requests
• Account management: Maintaining your user account and purchase history
• Marketing (with consent): Sending newsletters, offers, and updates about new products or experiences — you can unsubscribe at any time
• Legal compliance: Meeting our obligations under applicable Indian law, including the Information Technology Act, 2000
• Site improvement: Analysing usage patterns to improve our website and services

Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data with:

• Payment processors: Razorpay Payment Solutions Private Limited, to securely process transactions
• Shipping partners: India Post, DTDC, Delhivery, DHL Express — to fulfil deliveries
• Cloud & hosting: Supabase (database) and Vercel (hosting) for operational purposes
• Legal authorities: When required by law, court order, or government directive

All our third-party partners are required to handle your data securely and only for the purposes we specify.

Cookies & Tracking

We use cookies — small text files stored on your browser — to improve your experience. These include:

• Essential cookies: Required for login sessions and shopping cart functionality
• Analytics cookies: Help us understand how visitors use our Site (anonymised data)
• Preference cookies: Remember your language and display preferences

You can control cookies through your browser settings. Disabling essential cookies may affect Site functionality.

Payment Data & Security

All online payments are processed by Razorpay Payment Solutions Private Limited, a PCI-DSS Level 1 compliant payment gateway. We do not store your credit/debit card numbers, CVV, or full banking credentials on our servers.

Razorpay's privacy policy governs the handling of your payment data. We store only your order reference number and payment status for record-keeping purposes.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

• Account data: Retained for the duration of your account and 2 years after deletion
• Order records: Retained for 7 years (legal and tax compliance)
• Marketing data: Until you unsubscribe or withdraw consent
• Contact enquiries: Retained for 1 year from date of last correspondence

Your Rights

Under the Digital Personal Data Protection Act, 2023 (India) and other applicable laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Withdraw consent: Opt out of marketing communications at any time
• Data portability: Request your data in a structured, commonly-used format

To exercise any of these rights, contact us at mokshitaenterprises2024@gmail.com. We will respond within 30 days.

Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of our website after any changes constitutes your acceptance of the updated policy.

Questions About This Policy?

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out.