Privacy Policy

This Privacy Policy explains how Pal Enterprises (trading as "Pal Multi Store", "we", "us", or "our") collects, uses, stores, and shares your personal information when you use our website, mobile app, or physical shops. We are committed to protecting your privacy in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable Indian consumer law.

1. Information we collect

We collect the following categories of information:

• Identity & contact: name, email, phone number, shipping and billing address.
• Account: login credentials (passwords are stored as salted hashes — we never see your plain-text password).
• Order & transaction: items purchased, order history, payment method (we do not store your full card number — payments are handled by Razorpay).
• Device & usage: IP address, browser type, pages visited, referral source, and cookies used to personalise your experience.
• Communication: emails, SMS, or chat messages you send to our support team.

2. How we use your information

• To process your orders, arrange delivery, and handle returns/refunds.
• To send order confirmations, shipping updates, and customer support responses.
• To personalise product recommendations and improve the shopping experience.
• To prevent fraud, abuse, and unauthorised access to accounts.
• To comply with legal obligations (tax, GST invoicing, court orders, etc.).
• With your consent, to send marketing emails or SMS about offers — you can unsubscribe any time.

3. How we share your information

We share your data only with trusted third parties who help us run the business:

• Payment processor (Razorpay): to process card, UPI, netbanking, and wallet payments.
• Shipping partners: your name, address, and phone for delivery.
• Email/SMS providers: to send order notifications.
• Cloud hosting: for secure data storage.
• Government authorities: only when legally required (e.g. court order, tax authority request).

We do not sell your personal information to anyone.

4. Cookies

We use cookies and similar technologies to keep you logged in, remember your cart, and understand which products are popular. You can disable cookies in your browser settings, though some parts of the site may stop working correctly.

5. Data retention

We retain your account and order data as long as your account is active, and for up to 7 years after that to meet tax and legal obligations under Indian law. You can request deletion earlier (see "Your rights" below), except where we are legally required to retain records.

6. Data security

We use industry-standard measures to protect your data: HTTPS everywhere, password hashing, access controls, and encrypted backups. However, no system is 100% secure; please use a strong, unique password and keep your login details confidential.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for marketing communications at any time.
• File a complaint with us or with the appropriate Indian data-protection authority.

To exercise any of these rights, email privacy@palmultistore.com from the email address associated with your account.

8. Children's privacy

Pal Multi Store is not directed at children under 18. We do not knowingly collect data from minors. If you believe a child has provided us information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified on this page and, where appropriate, by email. The "Last updated" date above shows when the policy was last revised.

10. Grievance officer

In accordance with the Information Technology Act, 2000 and Rules made thereunder, the name and contact details of the Grievance Officer are:

We will acknowledge your grievance within 48 hours and resolve it within 15 days of receipt.