Privacy Policy

This Privacy Policy explains how we collect, use, share, store and protect your personal information when you visit, use or make a purchase on www.letsmillets.com (the “Website”). Our store is hosted on the Shopify platform. This Policy is framed in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

By using the Website and providing your information, you consent to the practices described in this Policy.

Depending on how you interact with us, we may collect:

• Contact details — your name, billing address, shipping address, phone number and email address;
• Payment information — payment method and transaction details. Card, UPI and bank details are processed directly by our secure payment partners; we do not store your full card or banking information;
• Account information — username, password and saved preferences, if you create an account;
• Transaction information — items you view, add to cart, purchase, return or cancel;
• Communications — information you share when you contact us for support or feedback;
• Device & usage information — IP address, browser and device details, and how you interact with the Website, collected through cookies and similar technologies.

We collect personal information: directly from you when you place an order, create an account or contact us; automatically through cookies and similar technologies when you use the Website; and from our service providers and partners, such as our hosting platform, payment gateways and logistics partners, who process information on our behalf.

We use your personal information to:

• Process, fulfil and deliver your orders, and handle payments, cancellations, replacements and refunds;
• Create and manage your account and remember your preferences;
• Provide customer support and respond to your queries;
• Send you service and transaction updates by email, SMS or WhatsApp;
• Send you marketing and promotional communications, where you have consented, which you can opt out of at any time;
• Detect and prevent fraud and secure the Website; and
• Comply with applicable legal and regulatory obligations.

We process your personal data on the basis of your consent and for the lawful purposes described in this Policy, as required under the Digital Personal Data Protection Act, 2023. You may withdraw your consent at any time by contacting us; please note that withdrawing consent may limit our ability to provide certain Services to you. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We and our platform providers use cookies and similar technologies to operate the Website, keep your cart working, analyse usage and support marketing. You can control or disable cookies through your browser settings, though some features of the Website may not function properly if you do so.

We do not sell your personal information. We share it only as needed with:

• Service providers — including our hosting platform (Shopify), payment gateways, courier and logistics partners, analytics and customer-support tools, who process it on our behalf;
• Legal and regulatory authorities — where required by law, court order or valid legal process; and
• Business transfers — in connection with a merger, acquisition or reorganisation, subject to this Policy.

Payments are processed through third-party gateways that follow industry-standard, PCI-DSS compliant security. We do not receive or store your complete card or banking details. Please keep your account credentials confidential and do not share them with anyone.

We retain your personal information only for as long as necessary to fulfil the purposes set out in this Policy, including to provide the Services, maintain your account, and meet our legal, tax, accounting or regulatory obligations. When it is no longer required, we securely delete or anonymise it.

We follow reasonable security practices and procedures to protect your personal information against unauthorised access, alteration, disclosure or destruction, as required under the applicable IT Rules. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid sharing sensitive information through unsecured channels.

Subject to applicable law, and in particular the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you;
• Correct, complete or update inaccurate or incomplete personal data;
• Erase your personal data where it is no longer required;
• Withdraw consent to processing;
• Nominate another individual to exercise your rights in the event of death or incapacity; and
• Grievance redressal — raise a complaint about how we handle your data.

To exercise any of these rights, please contact our Grievance Officer using the details below. We may need to verify your identity before acting on your request.

The Website is not intended for children under the age of 18, and we do not knowingly collect personal data of children without the verifiable consent of a parent or legal guardian, as required under the Digital Personal Data Protection Act, 2023. If you believe a child has provided us personal data, please contact us so we can delete it.

If you have opted in, we may send you promotional messages by email, SMS or WhatsApp. You can opt out at any time using the unsubscribe link in our emails or by contacting us. Even if you opt out of marketing, we may still send you essential service messages relating to your account or orders.

The Website may contain links to third-party websites or services that we do not operate or control. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

The Website is hosted on Shopify, and some of our service providers may process your information on servers located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it continues to be protected in accordance with applicable law. To learn how Shopify handles personal data, you may refer to Shopify’s Consumer Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. We will post the revised Policy on this page and update the “last updated” date above. Please review it periodically.

For any question, request or complaint regarding your personal data or this Policy, please contact our Grievance Officer (appointed under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023):

• Company: Providence Health & Lifestyle Pvt Ltd
• Registered office: 2-91/12/4/NR, Plot no: 4, Doc Bhavan, 4th & 5th floor, Kondapur, Hyderabad, Telangana, 500081, INDIA
• Email: hello@letsmillets.com
• Phone / WhatsApp: +91 863 937 6939

We will acknowledge your request or complaint within 48 hours and endeavour to resolve it within a reasonable time, and in any case within the timelines prescribed under applicable law.