PRIVACY POLICY

1 Commitment to Your Privacy

At Morfuel India Pvt Ltd ("Morfuel", "we", "us", or "our"), we respect your personal integrity and are committed to safeguarding the personal data you entrust to us.

This Privacy Policy describes how your personal information is collected, used, stored, and shared when you visit or make a purchase from our website (morfuel.com, its subdomains, and our Shopify online storefront).

This document is prepared and published in full compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP) of India.

2 Personal Information We Collect

When you interact with MORFUEL, we collect the following categories of information:

• Contact & Delivery Information: Your full name, delivery shipping address, billing address, contact phone number, WhatsApp number, and email address.
• Transaction & Order Details: Information regarding the products you view, add to cart, and purchase, order values, date of purchase, and fulfillment status.
• Payment Information: All payments are processed securely via RBI-authorized, PCI-DSS compliant third-party payment gateways (including Razorpay and Shopify Payments). Morfuel does not collect, view, or store raw credit/debit card numbers or CVVs on our servers.
• Device & Usage Information: IP address, device model, browser type, operating system, pages visited, time spent on site, and referrer URLs collected via cookies and tracking pixels.
• Customer Reviews, Photos & User Content: Where you provide consent or voluntarily submit customer reviews, photographs, videos, or social reels featuring MORFUEL products.

3 How We Use Your Personal Information

We use the personal information we collect strictly for legitimate, declared commercial purposes:

• Order Fulfillment: Processing transactions, packing your products, generating GST tax invoices, and coordinating delivery with logistics couriers.
• Shipping & Order Updates: Delivering transactional notifications, dispatch updates, and live courier tracking links via SMS, WhatsApp, and Email.
• Customer Support & Claims: Addressing customer service inquiries, verifying damage/wrong item claims, and executing replacements or refunds.
• Fraud Detection & Security: Screening orders for potential risk, invalid addresses, or fraudulent payment attempts.
• Promotional Communications: Providing information about new flavour releases, discounts, and high-protein nutrition insights (only where you have opted in; you may unsubscribe at any time).
• Marketing & Social Proof: Using customer reviews, photos, videos, and reels for promotional purposes where the customer has provided the required consent or permission.

4 Data Sharing & Third-Party Service Providers

We never sell, rent, or trade your personal data to third parties for monetary gain.

We share your personal information only with verified third-party partners who are essential to running our business operations:

• Logistics & Courier Partners: Third-party carriers (e.g. Shiprocket, Delhivery, BlueDart, India Post) receive your name, address, and phone number solely to transport and deliver your parcel.
• Payment Gateways: PCI-DSS compliant gateways (e.g. Razorpay, Shopify Payments) to safely process your payment transactions.
• E-Commerce Platform: Shopify, which hosts our online store infrastructure.
• Communication Platforms: SMS, WhatsApp, and email service providers to transmit order tracking and customer support updates.
• Legal & Regulatory Compliance: We may disclose information if required by applicable Indian law, court order, or official governmental request.

5 Cookies, Tracking & Data Security

Cookies: We use cookies to remember items in your shopping cart, preserve your login session, and analyze aggregated store traffic. You can modify your browser settings to decline cookies, though certain site features (such as the shopping cart) may not function properly.

Data Security: We maintain strict physical, administrative, and electronic safeguards to protect your personal data. All data transmission across our website is secured with 256-bit SSL/TLS encryption. Internal access to customer data is strictly restricted to authorized staff on a need-to-know basis.

6 Your Privacy Rights & Data Retention

Under applicable Indian data protection regulations:

• Right to Access & Rectification: You have the right to request a copy of the personal data we hold about you and request corrections to inaccurate or incomplete information.
• Right to Erasure: You may request the deletion of your account and personal data, subject to our statutory record retention obligations under Indian tax and accounting laws.
• Opt-Out of Marketing: You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in our emails or messaging "STOP" on promotional SMS.

To exercise any of these rights, please submit your request to connect@morfuel.com.