Privacy Policy
1. Introduction
Vibhog is a brand owned and operated by MDLN Edibles Pvt. Ltd. (“MDLN”, “Vibhog”, “we”, “us” or “our”).
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit or use our website, https://mdln.co.in/, purchase our products, contact us, or interact with our services.
We are committed to handling your personal information responsibly and in accordance with applicable Indian data protection and consumer protection laws.
By using our website or providing personal information, you acknowledge the practices described in this Privacy Policy. Where consent is legally required, we will seek your consent before processing the relevant information. You may withdraw consent in accordance with this policy and applicable law.
2. Personal Information We Collect
Depending on how you interact with us, we may collect the following categories of information:
A. Personal and Contact Information
Full name.
Mobile number and email address.
Billing and shipping address, including PIN code.
Information provided when contacting customer support or submitting an enquiry.
B. Order and Transaction Information
Products purchased, quantities and order history.
Order confirmation, invoice and delivery status.
Payment status, transaction references and refund information.
Information required to process cancellations, returns, replacements and refunds.
Payment card details and other sensitive payment credentials are generally processed by our payment service providers. We do not intentionally store complete card details or payment authentication credentials on our own systems.
C. Account and Authentication Information
If you create an account or use OTP-based authentication, we may process your mobile number, authentication status and related account information to verify your identity and help secure your account.
D. Technical and Usage Information
Depending on the website features and technologies enabled, we may collect:
IP address and approximate location derived from it.
Browser type, device type and operating system.
Pages visited, referring pages and interactions with our website.
Session information, diagnostic data and website performance information.
Cookie identifiers and similar technical information.
E. Communications and Feedback
We may retain information you voluntarily provide through emails, forms, customer support interactions, product reviews, feedback, surveys or social media interactions with our official accounts.
Please do not submit unnecessary sensitive personal information through public comments or general enquiry forms.
3. How We Collect Information
We collect information:
Directly from you when you place an order, create an account, complete a form or contact us.
Automatically through our website, cookies and similar technologies, where enabled.
From payment providers, delivery partners and service providers when necessary to complete your transaction or provide customer support.
From other sources where permitted by applicable law.
We will endeavour to collect only information that is reasonably necessary for the relevant purpose.
4. How We Use Your Information
We may use your personal information for the following purposes:
To process and fulfil orders placed on our website.
To arrange shipping, delivery, tracking, cancellations, returns, replacements and refunds.
To verify mobile numbers and authenticate customer accounts.
To communicate order confirmations, payment updates, delivery notifications and customer support responses.
To respond to enquiries, complaints and requests.
To maintain, secure and improve our website and services.
To analyse website usage and understand customer preferences, where permitted.
To send promotional communications where we have the required consent or other lawful basis.
To detect fraud, prevent abuse and protect our business, customers and systems.
To maintain business, accounting and transaction records.
To comply with legal obligations and respond to lawful requests from competent authorities.
We will not use personal information for purposes incompatible with those disclosed to you, unless permitted by applicable law.
5. Promotional Communications and Consent
We may offer customers product updates, special offers, discounts and other marketing communications through email, SMS, WhatsApp or other channels.
Where required, we will obtain consent before sending promotional communications.
You may opt out of promotional communications by using the unsubscribe facility where available or contacting us at the email address provided below.
Opting out of promotional messages will not prevent us from sending essential transactional communications relating to your orders, account security or legal obligations.
We will respect applicable telecommunications, commercial communication and consent requirements. Providing a mobile number for order delivery does not automatically constitute consent to receive promotional messages.
6. Cookies and Similar Technologies
Our website may use cookies, pixels, tags and similar technologies to support essential website functionality, maintain sessions, improve performance and understand how visitors use the website.
Depending on the tools enabled, these technologies may be used for:
Essential website functions.
Analytics and performance measurement.
Remembering preferences.
Marketing and advertising measurement.
Where required, non-essential cookies or tracking technologies will be used only after obtaining the appropriate consent.
You may manage cookies through your browser settings and, where available, our website's cookie preference controls. Disabling certain cookies may affect some website features.
If Google Analytics or other third-party analytics tools are enabled, relevant information may be processed by those providers under their applicable terms and privacy policies.
7. Payment Information
Payments made through our website may be processed by third-party payment gateways or other payment service providers.
Such providers may collect and process payment information according to their own privacy and security practices.
We may receive transaction confirmations, payment status, transaction references and information necessary to reconcile payments, process orders or issue refunds.
We do not intentionally store complete debit or credit card details or payment authentication credentials on our own systems.
8. When We Share Personal Information
We do not sell personal information to third parties.
We may share relevant information with the following categories of recipients when necessary and permitted by applicable law:
A. Delivery and Logistics Partners
We may share your name, contact number, delivery address and relevant order details with courier companies, delivery personnel and fulfilment partners so that your order can be delivered.
B. Payment Service Providers
We may share relevant order and transaction information with payment gateways and financial service providers to process payments, reconcile transactions and handle refunds.
C. Technology and Website Service Providers
We may use hosting providers, website developers, cloud service providers, authentication services, analytics providers, customer support tools and other vendors to operate and maintain our business.
D. Marketing and Communication Providers
Where appropriately authorised, we may use email, SMS, WhatsApp or marketing service providers to communicate with customers and manage promotional campaigns.
E. Professional Advisers and Authorities
We may disclose relevant information to our legal, accounting or professional advisers, regulators, law enforcement agencies or courts where required or permitted by law.
F. Business Transfers
If our business undergoes a merger, restructuring, acquisition or transfer of assets, relevant information may be transferred subject to appropriate safeguards and applicable law.
Service providers receiving personal information are expected to process it only for authorised purposes and to maintain appropriate confidentiality and security measures.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, customer support, accounting, dispute resolution, fraud prevention and legal compliance.
Certain transaction and business records may need to be retained for periods prescribed by law.
When personal information is no longer required, we will take reasonable steps to delete it or anonymise it, subject to applicable legal requirements, legitimate record-retention needs and technical limitations.
10. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
These measures may include access controls, authentication safeguards, secure connections and appropriate security practices implemented by our service providers.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure. We cannot promise absolute security, but we will take reasonable measures to prevent, identify and respond to security incidents in accordance with applicable law.
If you suspect unauthorised use of your account or personal information, please contact us promptly.
11. Your Privacy Rights
Subject to applicable law, you may have the right to:
Request information about the personal data we process about you.
Request correction or updating of inaccurate or incomplete information.
Request erasure of personal information where legally applicable.
Withdraw consent where processing is based on consent.
Raise a grievance concerning our handling of personal information.
Exercise any other rights available under applicable data protection law.
Certain information may need to be retained where required by law or for legitimate legal and accounting purposes.
We may request reasonable information to verify your identity before processing a privacy request.
To exercise your rights, contact us using the details in the “Contact and Grievance Redressal” section below.
12. Children's Privacy
Our website and online purchasing services are not intended to encourage children to make independent purchases or provide personal information without appropriate authorisation.
Where applicable law requires parental or guardian consent for processing a child's personal information, we will follow the relevant legal requirements.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action in accordance with applicable law.
13. Third-Party Websites
Our website may contain links to third-party websites, applications or payment services.
We do not control the privacy practices of independent third parties. When you access their services, their own privacy policies and terms may apply.
We encourage you to review those policies before providing personal information to third parties.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website features, service providers or applicable laws.
The updated version will be published on this page with a revised “Last Updated” date. Where legally required, we will provide additional notice or obtain fresh consent.
15. Contact and Grievance Redressal
For privacy-related questions, requests, consent withdrawal or complaints, please contact:
Grievance Email: connectwithus@gmail.com
We will acknowledge and address requests or grievances within the timelines prescribed by applicable law.
This Privacy Policy is governed by the laws of India, subject to applicable data protection and consumer protection requirements. Nothing in this policy limits any right or remedy that cannot lawfully be excluded.