Privacy Policy

Our website address is: https://www.madinamaktab.com

This Privacy Policy explains how we collect, use, store and protect your personal information. It is governed by the Information Technology Act, 2000 and applicable Indian data protection laws.

While browsing:

• Products you have viewed (for recently viewed feature)
• IP address, browser type and device information
• Location data (for shipping estimation)
• Pages visited and time spent on site (via Google Analytics)

When you place an order:

• Full name, billing and shipping address
• Email address and phone number
• Payment details (processed securely — we do NOT store full card details)
• Order history

When you create an account:

• Username and password (encrypted)
• Name, address, email and phone number

When you leave a comment or review:

• Name, email address and comment content
• IP address and browser user agent (for spam detection)

• To process and fulfill your orders
• To send order confirmations and shipping updates
• To respond to queries, refund requests and complaints
• To process payments and prevent fraud
• To manage your account on our store
• To improve our website and product offerings
• To analyze website traffic (via Google Analytics)
• To comply with legal obligations under Indian law
• To send marketing messages — only if you have opted in

• Cart cookies — to keep track of items in your shopping cart
• Login cookies — to remember your login for 2 days (or 2 weeks if “Remember Me” selected)
• Session cookies — temporary cookies deleted when you close your browser
• Analytics cookies — Google Analytics uses cookies to track usage (anonymized)
• Preference cookies — to save your display and language preferences

If you leave a comment, you may opt-in to saving your name and email in cookies for 1 year. You can disable cookies in your browser settings, but this may affect the shopping cart feature.

• Payment Gateways — Razorpay and CCAvenue (for secure payment processing)
• Courier Partners — to deliver your orders (name and address shared)
• Google Analytics — anonymized website traffic data
• Google Tag Manager — for managing website tracking tags
• Email/SMS Service Providers — to send order updates and notifications

We do not share your data with any other third parties without your explicit consent, except where required by Indian law or court order.

We do not store your full credit/debit card number, CVV, or expiry date. Only the first 6 and last 4 digits are stored for fraud detection purposes.

We use Google Analytics and Google Tag Manager to understand how visitors use our website. Google Analytics collects anonymized data including:

• Pages visited and time spent
• Device type, browser and operating system
• General geographic location (country/city level)
• Referral source (how you found our site)

This data is anonymized and does not personally identify you. You can opt out via the Google Analytics Opt-out Add-on.

• Order information — 7 years (required for accounting and legal compliance)
• Account information — until you delete your account
• Comments and reviews — indefinitely
• Cookie data — 1 day to 1 year depending on type
• Analytics data — 26 months (Google Analytics default)

After these periods, your data is securely deleted or anonymized.

• Right to Access — Request a copy of all personal data we hold about you
• Right to Correction — Update your personal information via My Account
• Right to Deletion — Request deletion of your personal data (except legally required data)
• Right to Opt-Out — Unsubscribe from marketing emails at any time
• Right to Data Portability — Request an exported file of your personal data

To exercise any of these rights, contact us at madinamaktab16@gmail.com

• SSL/TLS Encryption — All data transmitted is encrypted using 256-bit SSL
• Secure Payment Processing — PCI-DSS compliant gateways (Razorpay & CCAvenue)
• Password Encryption — All account passwords are stored encrypted
• Access Control — Only authorized team members can access customer data
• Wordfence Security — Our website is protected by Wordfence firewall

No method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

Articles on this site may include embedded content (videos, images, etc.) from other websites. This content behaves exactly as if you had visited those websites directly, and they may collect data about you and track your interactions.

Our website is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the “Last updated” date at the top of this page.

Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy.