Privacy & Data Collection Policy

Last Updated: 5 July 2026

At Masuto (operated under the parent corporate entity HDM Enterprises), we consider the privacy and protection of our customers’ personal information to be a core operational value. In strict compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable data safety frameworks, this policy explicitly details how your data is collected, processed, utilized, and protected within our secure digital infrastructure.

By accessing, browsing, or completing a purchase on this Platform, you consent to the data collection and processing methods outlined in this policy.

1. Personal Information We Collect

To operate a fully automated e-commerce portal and process liquidation transactions accurately, we collect only the essential data points you provide during checkout, account registration, or customer care interactions:

  • Identity Details: Full Name.
  • Contact & Fulfillment Details: Physical Shipping Address, landmarks, accurate Pin Code, primary Mobile Phone Number, and active Email Address.
  • Transaction Records: Details of products browsed, items added to cart, invoice totals, chosen payment modes, and order timestamps.
  • Financial Information for Refunds: For Cash on Delivery (COD) transactions requiring a refund, you will securely enter your active UPI ID or Bank Account Details directly into our online return interface.
  • Technical Metadata: Device identifiers, browser types, Internet Protocol (IP) addresses, and diagnostic cookies used to secure our checkout flow and monitor for automated bot activity.

2. How Your Information is Used

Your personal details are strictly utilized to execute the core backend automations of our store. We enforce a zero-marketing-broker policy: we do not sell, rent, lease, or trade your personal information to third-party data aggregators. Your data is processed exclusively to:

  • Validate the authenticity of orders and execute our mandatory pre-dispatch verification gateway (including automated IVR voice calls and interactive WhatsApp loops).
  • Generate Air Waybills (AWBs), shipping manifests, and coordinate with our integrated logistics and courier fulfillment partners to deliver your packages.
  • Dispatch automated real-time tracking links, order confirmations, return ticket status updates, and refund notifications via WhatsApp, Email, or SMS.
  • Process secure digital refunds and reverse payouts via our checkout engine directly back to your original payment source or provided UPI/banking destination.
  • Detect, prevent, and mitigate cyber threats, fraud networks, duplicate profile abuse, or malicious server activity.

3. Data Retention, Purging & Cloud Sandbox Security

  • Encrypted Storage: All customer identity and delivery address records are hosted behind secure, firewalled server layers using industry-standard encryption protocols.
  • Isolation of Core Payment Data: Raw payment credentials (such as credit/debit card numbers, CVV codes, or net banking passwords) are processed directly inside a secure sandbox framework managed entirely by our verified digital payment processors. Masuto and HDM Enterprises never view, intercept, store, or retain your private banking passwords or card signatures.
  • Purging of Return Data: Submitted UPI IDs or bank details collected exclusively to settle a COD return payout are retained in our secure operational log only for the duration required to clear the transaction through our banking remittance framework, after which the database entries are archived.

4. Third-Party Disclosures & Sub-Processors

To run a high-efficiency store, we share specific segments of your data only with trusted, industry-standard operational service providers. These third parties are contractually bound to maintain data confidentiality:

  • Fulfillment Partners: Sharing your name, delivery coordinates, and phone number to execute physical parcel shipping and doorstep reverse quality checks (QC).
  • Communication Gateways: Sharing contact numbers and email routing paths to trigger automated IVR verification phone calls, transactional text templates, and tracking alerts.
  • Banking & Payout Nodes: Sharing transaction values and payment IDs to process secure gateway reversals and UPI digital transfers.

5. Cookies and Analytical Tracking

Our Platform utilizes basic cookies and operational browser tracking tokens to enhance site loading speeds, save shopping cart states across sessions, and prevent malicious automated scripts. You can choose to disable cookies through your personal browser settings; however, doing so may restrict access to certain interactive layers or disable our checkout engine.

6. User Rights & Account Data Erasure

As a customer, you maintain full authority over your personal profile data. You have the right to review your saved address files, correct inaccuracies, or request the complete deletion of your personal contact history from our historical communication logs.

  • Data Erasure Process: To request account erasure, you must submit a formal request from your original registered email ID directly to support@masuto.in. Our compliance team will review the request and purge your data from our active systems within 30 days, provided there are no active, unfulfilled orders, ongoing fraud investigations, or mandatory statutory taxation records requiring retention under Indian law.

7. Cyber Safety & Attachment Shielding

For platform security and to protect our infrastructure from malware or virus-infected data injections, all media files uploaded to support return or damage claims (such as photos or unboxing videos) must be sent via our designated, sandboxed digital filters. Any external cloud sharing links or unrecognized file formats are systematically blocked by our server firewalls.

8. Policy Updates

HDM Enterprises reserves the absolute right to update or modify this Privacy & Data Collection Policy at any time to reflect changing regulations, cyber defense frameworks, or backend infrastructure updates. The updated version takes effect immediately upon publication on this dedicated page.

9. Grievance Officer & Contact Channels

In accordance with the Information Technology Act, 2000, any questions, concerns, or grievances regarding our data handling and privacy protocols may be directed to our compliance desk:

  • Operating Parent Corporate Entity: HDM Enterprises (Proprietor: Kunal Aggarwal)
  • Primary Official Support Email: support@masuto.in
  • Registered Operational Address: Faridabad, Haryana, India, Pin Code: 121004
Scroll to Top