Privacy Policy ForMyFamily.in - formyfamily

1.Who we are and what this policy covers

This policy explains howformyfamily.in , a company operating the online store at www.formyfamily.in (“we”, “us”, “our”), collects, uses, shares, stores and erases your personal data.

It applies to our website, to orders placed through it, to the customer accounts we maintain, and to the messages we send you by email, SMS and WhatsApp. It does not apply to any third party website that we link to.

For the purposes of the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary in respect of your personal data. For the purposes of the Information Technology Act, 2000 and the rules made under it, we are the body corporate that collects and holds your information. If you do not agree with this policy, please do not use the site or place an order.

2. The personal data we collect

Category	What it includes	Why we collect it	How long we keep it
Identity and contact	Name, mobile number, email address, and any alternative recipient name you give us	To create your account, confirm your order and contact you about it	For as long as your account is open, then [24] months
Delivery	Shipping address, landmark, pincode, delivery instructions	To deliver your order and to hand it to our courier	Eight years from the end of the financial year, as part of the order record
Order and transaction	Items ordered, quantity, price, order and invoice numbers, delivery status, returns and refunds	To perform the contract, raise tax invoices and handle returns	Eight years, being the retention required under the GST and company law regimes
Payment	The fact and status of payment, the last four digits of the card, the payment method and the gateway reference	To take payment and to reconcile it	Eight years for the transaction record
Account credentials	Username and a hashed password	To let you log in securely	Until you close your account
Communications	Emails, WhatsApp and telephone conversations with our care team, and complaint records	To answer you and to evidence how a complaint was handled	[36] months
Technical and usage	IP address, device and browser type, operating system, pages viewed, referring page, cart and session identifiers	To keep the site working and secure, and, where you consent, to measure how it is used	[12] months
Marketing preferences	Your opt in and opt out choices for email, SMS and WhatsApp	To respect your choices and to evidence them	For as long as we hold your record

We do not ask you for, and you should not send us, your Aadhaar number, PAN, bank account credentials, card number, CVV, card expiry date, or any information about your health.

3. Sensitive personal data

Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, your password and your financial information are sensitive personal data. We collect your password in hashed form only, and we do not collect your financial information at all: it is captured directly by our payment gateway. By creating an account you give us your consent in electronic form to collect and hold your password in this manner for the purpose of authenticating you.

4. How we use your personal data, and on what basis

We process your personal data on the basis of the consent you give us when you create an account, place an order or subscribe to our messages, and, where the law permits, for the certain legitimate uses recognised by section 7 of the Digital Personal Data Protection Act, 2023, such as complying with a legal obligation or responding to an order of a court.

We use your personal data to: accept and fulfil your order; take and reconcile payment; deliver your order, including by giving your name, address and mobile number to our delivery partner; handle returns, refunds and complaints; maintain your account and wishlist; issue tax invoices and keep statutory records; keep the site secure and detect fraud; and, where you have separately opted in, send you offers and product news.

We do not sell your personal data. We do not make any decision about you by wholly automated means that produces a legal effect on you.

5. Consent and how to withdraw it

Where we rely on your consent, you give it by an affirmative action, such as ticking the consent box at checkout or subscribing to our messages. You can withdraw your consent at any time, and it will be as easy to withdraw as it was to give.

To withdraw consent, use the unsubscribe link in any marketing email, reply STOP to a marketing SMS or WhatsApp message, change the settings in your account, adjust your cookie preferences through the consent banner, or write to our Grievance Officer at the address in clause 15.

Withdrawal takes effect for the future only. It does not affect anything we lawfully did while your consent was in force, and it does not require us to delete records we must keep by law, such as tax invoices. If you withdraw the consent on which an order depends, we may not be able to complete that order.

When the Consent Manager regime under the Digital Personal Data Protection Rules, 2025 becomes operative, you will also be able to give, manage, review and withdraw your consent through a Consent Manager registered with the Data Protection Board of India.

6. Cookies and similar technologies

A cookie is a small file placed on your device. We use four categories, and our consent banner lets you accept or refuse each of the last three. Refusing them does not stop you from shopping.

Category	What it does	Set only with your consent?
Strictly necessary	Keeps you logged in, remembers your cart, protects the checkout and the site against fraud	No. The site cannot function without these
Functional	Remembers your language choice, your pincode and your display preferences	Yes
Analytical	Google Analytics 4. Tells us how many people visited, which pages they saw and where they left	Yes
Advertising	The Meta pixel and any similar tag. Measures our advertising and may be used to show you our products elsewhere	Yes

Analytical and advertising tags do not load until you accept that category. You can change or withdraw your choice at any time from the [Cookie preferences] link in the footer, and you can also block or delete cookies in your browser.

7. Marketing messages

We send promotional emails, SMS and WhatsApp messages only to people who have opted in. Every message carries a way out, and we act on an opt out within [seven] working days.

Messages about an order you have actually placed, such as an order confirmation, a dispatch note or a delivery update, are transactional. You will keep receiving those for as long as the order is live, whatever your marketing preferences are.

8. Who we share your personal data with

We share your personal data only with the categories of recipient listed below, only to the extent each of them needs it, and only under a written contract that requires them to protect it, to use it for no other purpose, and to return or delete it when their engagement ends.

Recipient	What they receive	Why
Payment gateway [name]	Your payment instruction, order amount and reference. They, not we, capture your card or UPI credentials	To take and reconcile payment
Delivery partners [names]	Recipient name, delivery address, mobile number, order reference	To deliver your order
Communication providers [names]	Mobile number or email address, and the message content	To send order and, where you opted in, marketing messages
Hosting and IT providers [names]	Whatever is on the systems they host or support, under access control	To run and maintain the site
Analytics and advertising [Google, Meta]	Pseudonymous usage and device data, only where you accepted that cookie category	To measure the site and our advertising
Professional advisers and auditors	Only what a specific engagement requires	Legal, tax and audit
Government and law enforcement	Only what a lawful demand requires	To comply with a legal obligation, an order of a court, or a lawful direction

We also share personal data in connection with a merger, restructuring or sale of our business, on terms that require the recipient to honour this policy.

9. Payments and card data

We do not store your card number, expiry date or CVV. Payment is processed by our gateway on its own infrastructure. If you choose to save a card for later, it is stored as a network token by the card network or issuer under the Reserve Bank of India tokenisation framework, and all we can see is the token and the last four digits.

10. Transfers outside India

Some of our service providers, in particular our analytics and advertising vendors, process personal data on servers outside India. Where that happens, we transfer only what the service requires, under a contract that carries our security and confidentiality obligations through to that provider, and subject to any restriction the Central Government notifies under section 16 of the Digital Personal Data Protection Act, 2023.

11. How long we keep your personal data, and when we erase it

We keep each category for the period stated in clause 2. Beyond that, we erase your personal data, or anonymise it so that it can no longer identify you, when the purpose for which it was collected is no longer being served, unless we are required by law to keep it. Invoices, tax records and books of account are kept for eight years because company and GST law requires it.

If you withdraw your consent, or close your account, we erase the personal data that depended on that consent, and instruct our processors to do the same, except for records we must keep by law and except for anything needed to establish, exercise or defend a legal claim.

12. Security

We maintain reasonable security safeguards appropriate to the personal data we hold. These include transport layer encryption on the whole site, hashing of passwords, role based access control with access limited to staff who need it, logging and monitoring of access, secured and tested backups, patching of our platform, and contractual security obligations on every processor we engage.

No system is perfectly secure. You are responsible for keeping your account password confidential, and for telling us at once if you think it has been compromised.

13. If there is a personal data breach

If a personal data breach affects your personal data, we will tell you without delay, in clear language, describing the nature and extent of the breach, when it happened, the likely consequences for you, what we have done to contain it, and what you can do to protect yourself. We will also report the breach to the Data Protection Board of India as required, and follow it with a detailed report within the period the Rules allow.

14. Your rights

Subject to the Digital Personal Data Protection Act, 2023 as it comes into force, you have the following rights.

The right to a summary of the personal data we hold about you, the processing we carry out, and the identities of everyone with whom we have shared it.
The right to have your personal data corrected, completed or updated where it is inaccurate or incomplete.
The right to have your personal data erased where we no longer need it and no law requires us to keep it.
The right to nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them yourself.
The right to a readily available means of grievance redressal, and, if we do not resolve your grievance, the right to complain to the Data Protection Board of India.

To exercise any of these rights, write to our Grievance Officer at the address in clause 15, using the email address or mobile number registered with your account, and tell us which right you wish to exercise. We may ask you for enough information to satisfy ourselves that the request really is yours. We will respond as quickly as we can, and in any event within ninety days.

You also have duties under section 15 of the Act. Please do not impersonate anyone else, do not suppress material information when giving us your details, and do not register a false or frivolous grievance. Furnishing verifiably false particulars is an offence for which the Board may impose a penalty of up to Rs 10,000.

15. Grievance Officer and how to complain

If you have a question or a complaint about how we handle your personal data, contact our Grievance Officer, who is also our grievance officer for the purposes of the Consumer Protection (E Commerce) Rules, 2020.

Grievance Officer	Details
Name	VK Krishna
Designation	Founder
Address	C510, Off BG Road , Bengalore -560076
Email	grievance@formyfamily.in
Telephone	9945351110

We acknowledge every complaint within forty eight hours of receiving it, and we aim to resolve it within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India, or use the National Consumer Helpline or the consumer commission having jurisdiction.

16. Children and persons with a guardian

Our site is intended for adults. We do not knowingly collect the personal data of anyone under eighteen without the verifiable consent of a parent or lawful guardian. We do not track children, do not carry out behavioural monitoring of children, and do not direct advertising at children.

If you are under eighteen, please ask a parent or guardian to place the order. If we learn that we hold a child’s personal data without verifiable parental consent, we will erase it. The same protections apply to a person with a disability who has a lawful guardian.

17. Research and measurement

[We are participating in an academic study on how the language of an advertisement affects online shopping in Karnataka. The study uses only aggregate, non identifying measurements of how visitors move through this site, drawn from the analytics you consent to in clause 6. No customer name, address, telephone number or order detail is given to any researcher. If we ever wish to invite you to take part in an interview, we will ask you separately, and only if you say yes will your contact details be shared.]

18. Links to other sites

Where we link to a third party site, including our pages on Facebook, Instagram and WhatsApp, that site is governed by its own privacy policy and not by ours. Please read it before you give it anything.

19. Changes to this policy

We may update this policy. The current version, with its effective date, is always on this page. If a change materially affects how we use your personal data, we will tell you by email or by a notice on the site before it takes effect, and where the law requires it we will ask for your consent again.