Majestic Gifting is a corporate gifting platform operated from New Delhi, India. This policy explains what personal data we collect when you use www.majesticgifting.com, why we collect it, how it is stored, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
1. Who we are
Majestic Gifting (“we”, “us”, “Majestic Gifting”) is a corporate gifting platform. For the purposes of the DPDP Act, Majestic Gifting is the Data Fiduciary in respect of personal data collected through this platform.
2. What we collect
We collect only what we need to take and fulfil a corporate gifting order.
Account information
- Name, work email, mobile number, company name, and role.
- Password (stored as a one-way hash, never in plain text).
Order information
- Shipping address (company and recipient), GSTIN, and PAN where required for invoicing.
- Order contents, quantities, branding artwork and customisation instructions.
- Communication you exchange with us about an order.
Payment information
- Card and UPI details are entered directly with our payment gateway and are not stored on Majestic Gifting servers. We retain only the transaction identifier, amount, status, and a masked reference.
Usage information
- IP address, device, browser, referrer, and pages viewed.
- Cookies and similar technologies. See our Cookie Policy for details.
3. Why we collect it
- To run your account — signup, login, password reset.
- To process and ship orders — including GST-compliant invoicing, manufacturing, courier handover, and after-sales support.
- To put together your kits — the details you share (team, occasion, budget) help us pick products from our catalog.
- To improve the platform — aggregated, de-identified analytics on browsing and conversion.
- To meet legal obligations — tax filings, fraud checks, and responding to lawful requests from government authorities.
We process personal data only for the purposes listed above, in line with Section 4 of the DPDP Act (consent or legitimate uses).
4. Who we share it with
We share personal data only with parties who help us deliver your order or measure our own advertising. We do not sell personal data, and we do not share it with third parties for their own advertising.
- Payment gateways — for processing payment securely.
- Logistics partners — name, address, and phone of the recipient, for delivery only.
- Manufacturing and print partners — product specs and branding artwork required to produce the kit.
- Cloud infrastructure — Amazon Web Services in the Mumbai region (ap-south-1).
- Analytics and error monitoring — PostHog (product analytics and session recording), Microsoft Clarity (session recording and heatmaps) and Sentry (error monitoring), so we can understand how the site is used and fix what breaks.
- Advertising measurement — Google and Meta receive limited technical data, such as a cookie identifier and the pages you viewed, so we can measure how our own advertising performs. They do not receive your name, email, phone number, or order contents from us.
- Government or law enforcement — only in response to a valid written request, and only to the extent required by Indian law.
5. Where your data lives
Your account data and order data are stored on AWS infrastructure in the Mumbai (ap-south-1) region. Order contents and payment details do not leave India, except where a logistics or compliance partner requires it for fulfilment, and never to a country restricted under the DPDP Act.
Some technical and usage data is processed by service providers outside India: PostHog (product analytics and session recording, servers in the European Union), Microsoft Clarity (session recording and heatmaps), Sentry (error monitoring, servers in Germany), and Google and Meta (advertising measurement). This covers things like the pages you viewed, your device and browser, and a cookie identifier.
Session recording. On some pages we record a reconstruction of your visit: pages viewed, mouse movement, clicks, and scrolling. Text you type into forms, including passwords, payment details, and addresses, is masked in your browser before the recording is sent and is never visible to us. We do not record the gift redemption pages at all. Write to us at the address in section 11 to opt out.
6. How long we keep it
- Account data — while your account is active, plus three years after closure.
- Order and invoice data — eight years, to meet tax and GST record-keeping requirements.
- Logs and analytics — up to twelve months, in de-identified form thereafter.
7. Your rights
Under the DPDP Act, you can ask us to:
- Confirm what personal data we hold about you and provide a copy.
- Correct or update inaccurate or incomplete data.
- Erase personal data we no longer need (subject to legal retention rules).
- Nominate someone to exercise these rights on your behalf if you cannot.
- Withdraw consent at any time, where consent is the basis of processing.
To exercise any right, write to our Grievance Officer (see Section 11). We respond within thirty days. If you are not satisfied, you can complain to the Data Protection Board of India.
8. Security
We use TLS in transit, encryption at rest for sensitive fields, signed access tokens, audit logs, and role-based access for our team. No system is perfectly secure; please use a strong, unique password and contact us immediately if you suspect unauthorised access to your account.
9. Children
Majestic Gifting is a B2B service intended for adults purchasing on behalf of a company. We do not knowingly collect personal data of anyone under 18. If you believe a minor has provided us data, write to us and we will delete it.
10. Changes to this policy
We may update this policy as the platform or the law evolves. Material changes will be notified by email and on this page. The date at the top of this policy reflects the current version.
11. Grievance Officer
In line with the DPDP Act and the Information Technology Act, 2000, you can contact our Grievance Officer for any privacy concern:
Grievance Officer
Majestic Gifting
Email: hello@majesticgifting.com