Privacy policy

Blue Pankh Ecom Private Limited (“Blue Pankh Ecom Private Limited”, “merekrishna.in”, “we”, “us” or “our”) operates www.merekrishna.in.

IMPORTANT INFORMATION ABOUT OUR TECHNOLOGY AND DATA-STORAGE ROLE

Our online store is built and hosted on Shopify. We do not own or operate a separate customer-data storage server, and we do not maintain a self-hosted customer database for merekrishna.in. When you visit our website, create an account, place an order, make a payment, request a return or use other website features, personal data is collected automatically through Shopify and the relevant third-party service providers used to operate the store.

Blue Pankh Ecom Private Limited may access and use the personal data made available through the Shopify merchant dashboard and connected service-provider dashboards only to operate the store, fulfil orders, provide support, comply with law and perform the other purposes explained in this Policy. We do not independently alter customer-provided personal data except when a correction, update, order-related action, legal requirement or customer request makes this necessary.

Although we do not host the data on our own server, Blue Pankh Ecom Private Limited determines the business purposes for which customer personal data is processed in connection with merekrishna.in. Blue Pankh Ecom Private Limited is therefore the Data Fiduciary. Shopify and other vendors generally process such data as Data Processors on our behalf, although a provider may act as an independent Data Fiduciary for processing it determines for its own purposes.

1. SCOPE

This Policy applies when you:

  • visit or browse merekrishna.in;
  • create or use a customer account;
  • place or attempt to place an order;
  • make or attempt a payment;
  • contact customer support;
  • request a cancellation, return, exchange, replacement or refund;
  • submit photographs, videos or other return evidence;
  • subscribe to email, SMS, WhatsApp or other marketing; or
  • participate in a review, offer, survey, loyalty programme or promotion.

This Policy does not govern independent websites, apps or services that are not controlled by Blue Pankh Ecom Private Limited.

2. HOW DATA IS COLLECTED AND STORED

Data may be collected:

  • directly from you when you enter information on the website, at checkout, in a customer account, in a form, or in a message to us;
  • automatically by Shopify, cookies and connected technologies when you use the website; and
  • from payment providers, logistics partners, order-verification providers, returns providers, customer-support services, communication platforms, analytics services, advertising platforms and installed Shopify applications.

The website and its principal commerce database are hosted by Shopify. Payment credentials are handled by the payment gateway or payment-service provider selected at checkout. Other information may be stored in the systems of the service provider performing the relevant function, such as a courier, returns platform, email service or WhatsApp service provider.

We do not operate a separate data-storage server for customer data. However, authorised Blue Pankh Ecom Private Limited personnel may view, use, correct or delete information through service-provider dashboards when necessary. Limited records may also exist in ordinary business systems such as company email, customer-support messages, invoices, accounting records or legally required records. This Policy covers those records to the extent they contain data processed by or on behalf of Blue Pankh Ecom Private Limited.

3. DATA THAT MAY BE PROCESSED

Depending on your interaction with the website, the following data may be processed:

A. Identity and contact data

  • name;
  • email address;
  • mobile number;
  • billing and shipping address;
  • city, state, country and PIN code; and
  • customer-account details.

B. Order and transaction data

  • products ordered or placed in a cart;
  • order number, value, discounts and coupons;
  • payment method, payment status and refund status;
  • partial-COD or advance-payment status;
  • invoice information;
  • delivery, cancellation, return, replacement and exchange information; and
  • store-credit, reward or loyalty information, where offered.

Blue Pankh Ecom Private Limited does not receive or store complete card numbers, CVV numbers, UPI PINs, banking passwords or OTPs. These credentials are processed by the relevant payment provider. We may receive limited transaction information, such as the payment method, status, reference number and payment details.

C. Customer-support and return data

  • emails, chats and support requests;
  • return reasons and pickup details;
  • photographs or videos voluntarily submitted as product, damage or unpacking evidence; and
  • replacement, refund and complaint records.

Do not include faces, identity documents, financial credentials or another person’s personal data in return photographs or videos unless strictly necessary and specifically requested.

D. Website, device and cookie data

  • IP address;
  • browser, device and operating-system information;
  • approximate location derived from the IP address;
  • cookie and similar identifiers;
  • pages and products viewed;
  • date and time of visits;
  • referring source;
  • cart and checkout activity; and
  • security, diagnostic and error information.

E. Marketing and preference data

  • marketing subscription and opt-out status;
  • communication preferences;
  • consent and withdrawal records; and
  • responses to offers, advertisements, reviews, surveys or promotions.

4. PURPOSES OF PROCESSING

Personal data is processed only for lawful and specified purposes, including:

  • providing the website and shopping-cart functions;
  • creating and maintaining customer accounts;
  • accepting, verifying, processing and delivering orders;
  • processing payments, invoices, cancellations, returns, exchanges, replacements and refunds;
  • sending essential order, payment, dispatch, tracking and support communications;
  • arranging delivery and return pickup;
  • responding to enquiries, complaints and rights requests;
  • verifying damage, shortage, an incorrect product or return eligibility;
  • detecting and preventing fraud, abuse, unauthorised access and security incidents;
  • maintaining tax, accounting and other records required by law;
  • operating, securing, troubleshooting and improving the website;
  • measuring website and campaign performance, subject to applicable consent requirements;
  • sending marketing communications where you have consented or where otherwise permitted by law; and
  • establishing, exercising or defending legal claims.

We will not process personal data for a new, unrelated purpose without giving an appropriate notice and obtaining consent where required.

5. CONSENT AND OTHER PERMITTED PROCESSING

Where consent is required, it will be sought through clear language and affirmative action. Consent is intended to be free, specific, informed, unconditional and unambiguous, and limited to the data necessary for the stated purpose.

You may withdraw consent using the method described at the time of collection, through available privacy or marketing controls, or by contacting us. Withdrawal will be as easy as reasonably possible and will not affect processing lawfully completed before withdrawal. If the data is necessary to fulfil an order or provide a requested service, withdrawal may prevent us from completing that service.

Data may also be processed without separate consent where permitted by applicable law, including when you voluntarily provide it for a requested purpose, when processing is necessary to comply with law or a court order, or for another recognised legitimate use.

Purchasing a product does not by itself subscribe you to promotional marketing.

6. ESSENTIAL AND MARKETING COMMUNICATIONS

We or our service providers may send essential communications about order confirmation, payment status, verification, invoice, dispatch, tracking, delivery, cancellation, return, replacement, refund or customer support. These are service communications and may continue even if you opt out of marketing.

Marketing messages may be sent only where the required permission exists. You may opt out by using the unsubscribe or opt-out instruction in the message, replying “STOP” where supported, changing available preferences, or emailing info@merekrishna.in. We or the relevant provider may retain a minimal suppression record so that your opt-out is honoured.

7. COOKIES AND SIMILAR TECHNOLOGIES

Shopify and connected service providers may place cookies, pixels, tags and similar technologies on the website.

  • Essential cookies support the cart, checkout, login, security, fraud prevention and privacy settings. The website may not function correctly without them.
  • Functional cookies remember choices or enable enhanced features.
  • Analytics cookies help measure traffic and website performance.
  • Advertising cookies help measure campaigns and may support interest-based advertising.

Where consent is required, non-essential cookies will be used only after your choice. You can use the website’s cookie-preference tool to accept, reject or manage available categories. You may also manage cookies through your browser, although doing so can affect website functions.

8. SERVICE PROVIDERS AND DISCLOSURES

Data may be made available only as reasonably necessary to:

  • Shopify, which hosts and operates the commerce platform;
  • payment gateways, payment-service providers, banks and financial institutions;
  • courier, shipping, logistics and delivery providers;
  • order-verification and fraud-prevention providers;
  • cancellation, return, exchange and refund providers;
  • email, SMS, WhatsApp and other communication providers;
  • customer-support, review, loyalty and store-credit providers;
  • analytics, performance and advertising providers, subject to applicable consent requirements;
  • auditors, accountants, insurers, advocates and other professional advisers;
  • government authorities, regulators, courts or law-enforcement bodies when legally required; and
  • a genuine purchaser or successor in a lawful merger, restructuring or transfer of the business.

These organisations may be Data Processors acting on Blue Pankh Ecom Private Limited instructions or independent Data Fiduciaries for their own processing, depending on their role. We require processors acting on our behalf to process personal data only for authorised purposes and under an appropriate contract. Independent providers are responsible for the processing purposes they determine and may provide their own privacy notice.

We do not sell or rent customer personal data in exchange for money.

9. SHOPIFY’S ROLE

Shopify supplies the hosting, database, checkout, security and other technical services used by merekrishna.in. Customer data submitted through the store is therefore transmitted to and processed on Shopify’s infrastructure rather than on a server owned or operated by Blue Pankh Ecom Private Limited.

For customer data processed to provide the Shopify services to our store, Shopify generally acts as a Data Processor or service provider on our behalf. Shopify may act independently for certain Shopify-controlled services or purposes, including services such as Shop or Shop Pay, in accordance with Shopify’s own privacy notices and contractual terms.

10. RETENTION AND ERASURE

Because Blue Pankh Ecom Private does not operate the underlying storage infrastructure, technical storage and deletion are generally carried out within Shopify or the relevant provider’s system. Blue Pankh Ecom Private Limited determines or communicates the required business retention period for processing performed on its behalf and uses the provider’s available controls or support process to request correction, restriction or deletion.

Data will be kept only for as long as necessary for the stated purpose or as required or permitted by law. Relevant factors include:

  • whether an order, delivery, return, refund, support request or dispute is open;
  • whether a customer account remains active;
  • tax, accounting, consumer-protection and other legal recordkeeping requirements;
  • fraud prevention, security and legal-claim requirements;
  • the provider’s contractual retention and backup cycles; and
  • a customer’s valid correction, erasure or consent-withdrawal request.

When retention is no longer necessary, we will use available controls or instruct the processor to erase the data, anonymise it or make it inaccessible, subject to legal requirements and reasonable backup cycles. A deletion request does not require deletion of invoices, transaction records or other information that must be retained under law.

Third parties acting as independent Data Fiduciaries may apply their own lawful retention periods. Requests concerning their independent processing may need to be made directly to them.

11. SECURITY

Blue Pankh Ecom Private Limited does not control Shopify’s physical servers or independently operate website-hosting security. Shopify and other relevant providers are responsible for the security of the infrastructure they operate under their contracts and applicable law.

Blue Pankh Ecom Private Limited remains responsible for taking reasonable safeguards within its control and for requiring appropriate safeguards from processors. Measures may include:

  • restricting access to authorised personnel;
  • using strong passwords and multi-factor authentication where available;
  • limiting staff and application permissions;
  • reviewing installed applications and access;
  • using secure and reputable service providers;
  • maintaining contractual data-protection obligations; and
  • following incident-response and breach-notification procedures.

No online system can guarantee absolute security. Keep your account credentials, OTPs and payment credentials confidential and notify us if you suspect unauthorized use.

12. DATA BREACHES

If Shopify or another processor informs us of a personal-data breach affecting merekrishna.in customer data, or if we otherwise become aware of such a breach, we will coordinate with the relevant provider to contain and investigate it, reduce possible harm, restore security and preserve necessary records.

Blue Pankh Ecom Private Limited will give the affected individuals and the Data Protection Board of India any notice required from the Data Fiduciary, in the manner and within the period prescribed by applicable law. The fact that the affected data is stored on a service provider’s infrastructure does not remove this responsibility.

13. CHILDREN’S DATA

The store is intended for persons aged 18 years or older. A person under 18 should use the website or provide data only through a parent or lawful guardian.

We do not knowingly track or behaviourally monitor children, direct targeted advertising to children, or undertake processing likely to harm a child’s well-being. Where we knowingly process a child’s personal data, we will obtain verifiable consent from the parent or lawful guardian where required by applicable law.

If you believe a child submitted personal data without appropriate parental involvement, contact info@merekrishna.in.

14. YOUR RIGHTS

Subject to applicable law, you may request:

  • access to a summary of your personal data being processed and the relevant processing activities;
  • information about other Data Fiduciaries and Data Processors with whom the data has been shared, where required;
  • correction of inaccurate or misleading data;
  • completion of incomplete data;
  • updating of outdated data;
  • erasure of personal data that is no longer needed, unless retention is required by law or for the stated purpose;
  • withdrawal of consent;
  • grievance redressal; and
  • nomination of another individual to exercise your rights in the event of death or incapacity, in the manner prescribed by law.

Because the data is mainly held within Shopify and connected providers, Blue Pankh Ecom Private Limited may use their privacy tools or send them an instruction to complete your verified request. This does not require you to contact Shopify first for processing carried out on our behalf. If Shopify or another provider is an independent Data Fiduciary for the processing concerned, we may direct you to that provider’s own request process.

15. HOW TO MAKE A REQUEST OR COMPLAINT

Send an email to info@merekrishna.in with the subject “Privacy Request – merekrishna.in”. Include:

  • your name;
  • the email address or mobile number used for the account or order;
  • the relevant order number, where applicable;
  • the right or action requested; and
  • a clear description of your request or complaint.

We may request limited additional information to verify identity and prevent unauthorised disclosure, correction or deletion. Do not send passwords, OTPs, full card information, CVV numbers, UPI PINs or unnecessary identity documents.

We will acknowledge and resolve valid requests within the period required by applicable law. We presently aim to respond within 30 days. A request may be limited or refused where permitted by law, including where identity cannot be verified or the information must be retained for a legal obligation, fraud prevention or a legal claim. Where appropriate, we will explain our decision.

16. YOUR DUTIES

When providing personal data or exercising your rights, you should:

  • provide authentic and accurate information;
  • not impersonate another person;
  • not conceal material information when providing a government-issued identifier or proof;
  • not submit a false or frivolous grievance or complaint;
  • provide only information you are authorised to provide; and
  • update important account, contact or delivery information when it changes.

17. THIRD-PARTY WEBSITES AND SERVICES

The website may link to third-party websites, social-media platforms or services. Blue Pankh Ecom Private Limited does not control their independent privacy practices. Review their privacy notices before submitting personal data to them.

18. CHANGES TO THIS POLICY

We may update this Policy when our services, providers, processing practices or legal obligations change. The revised version will show a new “Last updated” date. If a change materially affects a purpose based on consent, we will provide an appropriate notice and obtain fresh consent where required.

19. LANGUAGE AND ACCESSIBILITY

This Policy is presently available in English. Where required by applicable law, you may request a relevant notice or consent request in Hindi or another language specified under the Eighth Schedule to the Constitution of India, subject to reasonable availability. For help understanding this Policy, contact info@merekrishna.in.

Blue Pankh Ecom Private Limited (“Blue Pankh”, “merekrishna.in”, “we”, “us” or “our”) operates www.merekrishna.in.

20. DATA FIDUCIARY AND PRIVACY CONTACT

Legal entity: Blue Pankh Ecom Private Limited

GST: 23AALCB8254B1ZW

Website: www.merekrishna.in

Address: 129 C-Block, Sawariya Complex, Vidisha – 464001, Madhya Pradesh, India

Email: info@merekrishna.in

Phone: +91 9039092042

Support hours: 10:00 AM to 5:00 PM (IST)

 

Effective date: 21 July 2026

Last updated:  23 July 2026