Privacy Policy

Incendia Pvt Ltd ("we", "us") respects your privacy. This policy explains what personal information we collect, why we collect it, and how we protect it.

Information We Collect

• Identity & contact details: name, email, phone, billing/shipping address.
• Order details: items purchased, amounts, fulfilment data.
• Technical data: IP address, browser type, device identifiers, cookies.

Card / payment data: we do not collect, see or store your full card number, CVV or PIN. Payment data is entered on our payment partner's secure (PCI-DSS) hosted page and is transmitted directly between you and the payment provider.

How We Use It

• To process orders, deliveries and refunds.
• To provide customer support and order updates.
• To comply with legal, tax and accounting obligations.
• To improve our store and prevent fraud.

How We Protect It

All data is transmitted over TLS 1.2+ encrypted connections. Access to personal data is restricted to authorised personnel and is protected by role-based access control and audit logging. Sensitive credentials are encrypted at rest. We do not sell your personal data.

Sharing

We share personal data only with trusted service providers required to fulfil your order (payment gateway, shipping carriers) and where required by law.

Your Rights

You may request access, correction or deletion of your personal data by contacting us at hello@incendia.mv.

Retention

We retain order records for the period required by applicable tax and accounting law (typically 5–7 years).