Last updated: January 2026
1. Introduction
Mothers Gold & Diamonds LLP ("we", "our", "us") operates the Mint a Milli platform. This Privacy Policy explains how we collect, use, and protect your personal information.
2. Information We Collect
- Phone Number: Required for account creation and OTP verification.
- Name & Email: Optional, used for communication and receipts.
- Aadhaar Number: Required for KYC verification, stored securely.
- Address: Required for KYC and delivery of vouchers.
- Bank Details: Required for processing refunds (see Section 2.1).
- Transaction History: Records of all bookings, refunds, and redemptions.
2.1 Bank Account Information (DPDP Compliance)
In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), we collect the following bank details:
- Bank Account Number: Encrypted using AES-256 encryption at rest.
- IFSC Code: Used to identify your bank branch.
- Bank Name: For display and verification purposes.
Purpose Limitation: Your bank details are collected and used exclusively for processing refunds and withdrawals. We do not share this information with third parties except as required to complete the transaction (e.g., with our banking partner).
Consent: Bank details are only collected after you provide explicit consent. You can withdraw this consent at any time by deleting your bank details from your profile.
3. How We Use Your Information
- To provide and maintain our services.
- To process transactions and send receipts.
- To verify your identity (KYC compliance).
- To communicate updates and promotional offers.
- To improve our platform based on usage patterns.
- To comply with legal obligations.
4. Data Security
We implement industry-standard security measures including:
- Encryption in Transit: All data is transmitted using TLS/HTTPS.
- Encryption at Rest: Sensitive data (bank account numbers) is encrypted using AES-256.
- Access Controls: Strict role-based access to user data.
- Audit Logging: All access to sensitive data is logged for security and compliance.
- PCI-DSS Compliance: Payment processing via Razorpay meets PCI-DSS standards.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Payment processors (Razorpay) for transaction processing.
- SMS providers (VEUP) for OTP delivery.
- Government authorities if required by law.
6. Your Rights (DPDP Act Compliance)
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access: View all personal data we hold about you.
- Right to Correction: Update inaccurate or incomplete information.
- Right to Erasure: Request deletion of your data (e.g., bank details) when no longer needed.
- Right to Withdraw Consent: Revoke consent for data processing at any time.
- Right to Grievance Redressal: Lodge complaints about data handling.
- Right to Nominate: Designate a nominee to exercise your rights.
To exercise any of these rights, please contact us at privacy@mothersgold.in or use the in-app settings.
7. Cookies
We use cookies and similar technologies to maintain your session and improve user experience. You can manage cookie preferences in your browser settings.
8. Data Retention
We retain your data according to the following schedule:
- Account Data: Retained while your account is active.
- Bank Details: Retained until you delete them or close your account.
- Transaction Records: Retained for 8 years as per Indian financial regulations.
- KYC Documents: Retained as required by RBI/SEBI guidelines.
- Audit Logs: Retained for 3 years for security and compliance purposes.
Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
9. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated via the app or email.
10. Contact Us
For privacy-related queries:
Email: privacy@mothersgold.in
Phone: +91 8137 830 916
Address: Mothers Gold & Diamonds LLP, Kerala, India