Privacy Policy

1. Commitment to Privacy

At LeakMasti (https://leakmasti.shop), operated by Khushboo Living Retail Private Limited ("we", "our", or "us"), we value your trust and are committed to safeguarding your privacy. This Privacy Policy sets out how we collect, handle, store, use, and protect your personal data when you interact with our website or place orders for products.

This policy adheres strictly to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Personal Data We Collect

We collect only the data necessary to provide a smooth, secure shopping experience:

• Order & Identity Details: Full name, billing and shipping address, postal PIN code, contact mobile number, and active email address provided during checkout.
• Transactional & Order History: Details of items ordered, deal values, coupons redeemed, order numbers, invoice records, and delivery tracking statuses.
• Payment Data Protection: Online payments are conducted via secure redirect or inline modal mechanisms handled directly by RBI-authorized payment aggregators and banking partners. LeakMasti does not collect, record, or store debit/credit card numbers, expiry dates, CVVs, UPI PINs, or net banking passwords on our servers.
• Technical Device Information: Internet Protocol (IP) address, browser version, operating system, and session timestamps captured via essential performance cookies.

3. Purpose and Legal Basis for Processing

We process your personal information strictly for legitimate commercial and regulatory objectives:

• Processing, confirming, dispatching, and fulfilling orders placed on leakmasti.shop.
• Transmitting SMS, WhatsApp, or email updates concerning order dispatches, tracking IDs, and delivery alerts.
• Providing responsive post-sales support, answering inquiries, and managing returns or refunds.
• Preventing fraud, identity deception, and unlawful chargebacks.
• Fulfilling Indian statutory tax, invoicing, and corporate compliance requirements (e.g. GST records).

4. Data Sharing and Third-Party Disclosures

We strictly do not sell, lease, or monetize your personal details to third-party data brokers. Data sharing is limited to trusted enterprise service providers essential to completing your order:

• Logistics & Courier Networks: Courier companies (e.g. Delhivery, Blue Dart, Ecom Express) receive customer name, shipping destination, and recipient phone numbers solely for door-step physical package delivery.
• Payment Aggregators: Transactional amounts and order identifiers are securely transmitted to RBI-licensed payment aggregators to facilitate authorized settlements.
• Government & Legal Authorities: Disclosed only where mandatory under judicial subpoenas, statutory audits, or explicit law enforcement orders under Indian law.

5. Data Rights Under the DPDP Act, 2023

As a Data Principal under Indian law, you are entitled to exercise the following rights regarding your personal information:

• Right to Access: You may request a summary of the personal information stored in relation to your transactions.
• Right to Correction & Updating: You may request rectification of outdated or inaccurate personal details.
• Right to Erasure: You may request the deletion of your personal data, subject to statutory document retention requirements under the Indian Companies Act and GST regulations.
• Right to Grievance Redressal: You may file an objection or complaint directly with our designated Grievance Officer.
• Right to Nominate: You may nominate a representative to exercise your data rights in the event of unforeseen incapacity.

6. Data Security Measures

We enforce modern administrative, physical, and technical safeguards. All interactions with leakmasti.shop take place over 256-bit SSL/TLS encrypted sessions. Databases containing customer shipping records are protected by multi-factor authentication, perimeter firewalls, and strict access controls restricted to authorized fulfillment personnel.

7. Cookie Usage

Our website utilizes cookies and similar local storage tokens strictly for functional operations, such as keeping track of items in your active shopping cart, maintaining session continuity, and verifying coupon eligibility. You can manage or disable cookies through your browser settings, although certain shopping cart features may not function properly without cookies.

8. Data Retention Period

Order and customer contact logs are retained for a minimum of 8 years to fulfill mandatory corporate, financial, and tax auditing mandates governed by Indian accounting standards and the GST Act.

9. Grievance Redressal Officer Contact Details

If you have any questions, concerns, or requests regarding your personal data or this policy, please reach out to our Grievance Redressal Officer: