Privacy Policy
Last updated: October 2026 · Version 2.0
This Privacy Policy describes how MATILEO ENTERPRISES PRIVATE LIMITED ("we", "us", "our") collects, uses, discloses, and protects your personal data when you use MATILEO ("the Website"). This policy is framed in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Data Controller
MATILEO ENTERPRISES PRIVATE LIMITED is the data controller for the personal data collected through the Website. Our registered address is Shop at 12 & 13, KH No. 7/15 & 10/11, Kotla Vihar Phase-II, Nangloi, New Delhi, Delhi, India, 110041 GSTIN: 07AAUCM1273C1ZF. For any privacy-related queries, contact us at Pvtltd9631@yahoo.com.
2. Personal Data We Collect
We collect the following categories of personal data when you register an account, place an order, or contact us: (a) Identity data — full name; (b) Contact data — email address, phone number; (c) Delivery data — shipping address including house/flat number, street, area, city, state, pincode, and landmark; (d) Order data — order history, product preferences, cart contents; (e) Payment data — payment method type and last four digits of card (we do not store full card numbers); (f) Technical data — IP address, browser type and version, device information, and pages visited, collected through cookies and similar technologies; (g) Communication data — contents of emails, chat messages, or support tickets you send us.
3. How We Use Your Personal Data
We use your personal data for the following purposes: (a) to process and fulfil your orders, including delivery and returns; (b) to communicate with you about your orders, deliveries, payments, and returns; (c) to provide customer support and resolve grievances; (d) to verify payments and prevent fraud, chargebacks, and abuse; (e) to generate GST invoices and comply with tax obligations; (f) to improve the Website, products, and services; (g) with your explicit consent, to send marketing communications about new products, offers, and promotions. Marketing consent is optional and never a condition of purchase.
4. Legal Bases for Processing (DPDP Act)
Under the DPDP Act, 2023, we process your personal data on the following grounds: (a) your consent — for marketing communications and optional data collection; (b) for performance of a contract — to process and fulfil your orders; (c) for compliance with legal obligations — GST invoicing, tax records, and regulatory requirements; (d) for legitimate purposes — fraud prevention, security, and dispute resolution. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
5. Sharing of Personal Data
We share your personal data only with the following categories of recipients, and only to the extent necessary: (a) Payment gateways — Stripe, Razorpay, and PhonePe — to process your payments; (b) Courier and logistics partners — to deliver your orders and process returns; (c) Email and communication service providers — to send order confirmations, shipping updates, and support responses; (d) Cloud hosting and infrastructure providers — to host and operate the Website; (e) Government and regulatory authorities — when required by law, court order, or legitimate regulatory request. We do not sell, rent, or trade your personal data to any third party for commercial gain.
6. Data Security
We implement reasonable technical, organisational, and physical security measures to protect your personal data, including: (a) TLS/SSL encryption for all data in transit; (b) access controls limiting personal data access to authorised personnel only; (c) secure storage of payment data exclusively by PCI-DSS compliant payment gateways; (d) regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify you and the Data Protection Board of India as required by the DPDP Act, 2023.
7. Your Rights as a Data Principal
Under the DPDP Act, 2023, you have the following rights regarding your personal data: (a) Right to access — request a copy of the personal data we hold about you; (b) Right to correction and erasure — request correction of inaccurate data or erasure of your data, subject to legal retention obligations; (c) Right to grievance redressal — file a grievance with us regarding the processing of your data; (d) Right to nominate — nominate another individual to exercise your rights in the event of death or incapacity. To exercise any of these rights, contact us at Pvtltd9631@yahoo.com. We will respond within the timelines prescribed by the DPDP Act.
8. Data Retention
We retain your personal data only as long as necessary to provide our services and comply with legal, tax, and accounting requirements under Indian law. Order and transaction data is retained for a minimum of 7 years as required under the Income Tax Act, 1961 and the CGST Act, 2017. Account data is retained for the duration of your account and deleted or anonymised within a reasonable period after account closure, subject to legal retention obligations.
9. Children's Data
The Website is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at Pvtltd9631@yahoo.com and we will take steps to delete it.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the shopping cart, maintain your session, remember preferences, and understand site usage. See our Cookie & Tracking Notice for details. You can control cookies through your browser settings.
11. Third-Party Links
The Website may contain links to third-party websites (such as payment gateways and courier tracking). We are not responsible for the privacy practices of these external sites and encourage you to read their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We will notify you of material changes by email or a notice on the Website.
13. Contact & Grievance Officer
For any privacy-related query, request, or grievance, contact our Grievance Officer at Pvtltd9631@yahoo.com or at our registered address: Shop at 12 & 13, KH No. 7/15 & 10/11, Kotla Vihar Phase-II, Nangloi, New Delhi, Delhi, India, 110041 GSTIN: 07AAUCM1273C1ZF.
All Policies
MATILEO ENTERPRISES PRIVATE LIMITED · GSTIN: 07AAUCM1273C1ZF · Shop at 12 & 13, KH No. 7/15 & 10/11, Kotla Vihar Phase-II, Nangloi, New Delhi, Delhi, India, 110041 · Pvtltd9631@yahoo.com