Privacy Policy
This page explains what we collect, why, and what you can do about it. We have tried to write it in plain language rather than in the form that discourages reading.
What we collect
- Account details — your name and email address. Your password is never stored; we keep only a scrypt hash of it, which cannot be reversed back into the password you chose.
- Delivery details — the addresses and phone numbers you save, so that you do not retype them on every order.
- Order history — what you bought, when, at what price, and where it went. We are required to retain this for tax and accounting purposes.
- Technical records — sign-in attempts and rate-limit counters, kept so that we can detect someone trying to break into your account.
We do not collect anything we have no use for. There is no advertising tracker, no third-party analytics script, and no data broker anywhere in this site.
Cookies
We set two cookies, both strictly necessary to keep you signed in: a short-lived access token and a longer-lived refresh token. They are HTTP-only, so page scripts cannot read them, and they are sent only over HTTPS.
We do not set advertising or tracking cookies, which is why this site has no cookie consent banner — there is nothing to consent to. Signing out clears both.
Signing in with Google
If you use the Google sign-in button, Google tells us your name, email address, and whether that address is verified. We receive nothing else, and we never receive your Google password. You can create an account with an email address instead if you prefer.
Who else sees your data
- Our couriers — the name, address, and phone number needed to deliver the parcel. Nothing about what is inside it beyond the invoice.
- Our email provider — your email address, to send verification, password-reset, and order messages.
- Our hosting and database providers — who store the data on our behalf and are contractually bound not to use it for anything else.
We do not sell your data, rent it, or share it for anyone else's marketing. We disclose it to authorities only where the law actually requires it.
How long we keep it
Order records are kept for as long as tax law requires. Account details are kept while your account is open. Sign-in and rate-limit records are short-lived and expire on their own.
Your rights
You can see and correct most of what we hold from your account. Beyond that you can ask us to correct something you cannot edit yourself, to send you a copy of your data, or to delete your account.
Deleting an account removes your name, email address, and saved addresses, and replaces them with an anonymised placeholder. Past orders survive in a form that can no longer be traced back to you, because we are not permitted to erase accounting records on request.
Security
The site is served over HTTPS only. Passwords are hashed, sessions expire, sensitive actions are rate-limited, and staff areas are gated on an explicit role rather than on an unlisted address. No system is perfect; if you find a weakness, please tell us before you tell anyone else.
Children
This shop is intended for adults. We do not knowingly collect data from children, and we will delete any we discover.
Changes
If this policy changes in a way that affects you, we will say so on the site rather than quietly replacing the page.
Contact
For anything on this page, including a request to access or delete your data, write to privacy@millets.in.