Privacy Policy

1. Introduction

MorningStar (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases from us.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our site. By accessing and using this website, you accept and agree to be bound by and comply with this Privacy Policy.

2. Information We Collect

We collect information about you in a variety of ways:

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, password
• Billing Information: Billing address, payment card details (processed securely through Razorpay)
• Order Information: Shipping address, order details, product preferences
• Communication Information: Messages, inquiries, feedback, and customer support correspondence
• Survey and Form Data: Responses to surveys, newsletter signups, and other forms

2.2 Information Collected Automatically

• Browser Information: IP address, browser type, operating system, pages visited, time spent
• Cookies: Session cookies and persistent cookies to improve your experience
• Usage Analytics: How you interact with our website and services

3. How We Use Your Information

We use the information we collect for:

• Processing and fulfilling your orders
• Sending order updates and delivery notifications
• Providing customer support and responding to inquiries
• Improving our website, products, and services
• Preventing fraudulent transactions and ensuring security
• Complying with legal obligations and regulations

4. Data Security

We implement comprehensive security measures to protect your personal information:

• TLS 1.2 or Higher: All data transmission is encrypted using TLS 1.2 protocol
• PCI DSS Compliance: Our payment processing complies with PCI DSS v4.0.1 standards
• No Raw Card Storage: Payment card data is never stored on our servers. All card information is tokenized through Razorpay
• Data Localization: All transaction data is stored exclusively on servers located within India
• Regular Security Audits: We conduct periodic security assessments and audits
• Access Controls: Strict access controls limit who can view sensitive information

5. Payment Information Handling

All payment processing is handled by Razorpay, an RBI-authorized payment aggregator and PCI DSS Level 1 certified provider.

• We do not store, process, or have access to raw credit card numbers
• Payment information is encrypted and transmitted securely
• Razorpay maintains all payment security compliance
• Your payment data is never shared with us except for transaction confirmation

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information only:

• With payment processors (Razorpay) for payment processing
• With logistics partners for order delivery
• When required by law or legal process
• To protect our rights or the safety of our users
• With your explicit consent

7. Data Retention

We retain your personal information for as long as necessary to:

• Process and complete your transactions
• Maintain your account
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

You may request deletion of your personal information by contacting us, subject to legal retention requirements.

8. Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Unsubscribe from any communications
• Request information about our data practices

To exercise these rights, please contact us using the information in the Contact Us section below.

9. Cookies and Tracking Technologies

Our website uses minimal cookies for essential functionality only (such as maintaining your session when logged in). We do not use analytics cookies or tracking technologies to monitor your behavior. You can control cookies through your browser settings.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

11. Children's Privacy

Our website is not intended for children under 18. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Your continued use of our website following changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

14. Regulatory Compliance

This Privacy Policy complies with:

• India's Digital Personal Data Protection Act (DPDP Act)
• RBI Payment Aggregator Guidelines 2025
• PCI DSS v4.0.1 standards
• Consumer Protection (E-Commerce) Rules, 2020