DPDP Act Safeguard
Privacy Policy & Data Security
How MADIRÆ & Co. implements privacy shields and securely manages customer personal profiles under modern Indian privacy frameworks.
1. Data Minimization & Consent Limits
In absolute alignment with India's Digital Personal Data Protection (DPDP) Act, 2023, MADIRÆ & Co. operates under strict data minimization rules. We capture only the bare minimum personal data required to safely route D2C carriage, confirm legal ages, and deliver product launch newsletters. We never lease, trade, sell, or profile your personal data with third-party tracking corporations.
2. Ephemeral Govt ID OCR Verification
For compliance with state excise age limits, we verify age using a photograph of a Government ID (such as Aadhaar, PAN, Voter ID, or DL) during registration. Under our DPDP Privacy Guard policy, this document is parsed instantly in temporary RAM to verify age and legal name. The file is IMMEDIATELY PURGED from memory and is never written to disk, saved to databases, or cached on our servers. No copies or logs of the ID are retained.
3. Newsletter Data & Communication Privacy
Newsletter subscriptions are captured voluntarily. Customer emails are stored in a secure Supabase database schema strictly to distribute flavor updates, heritage stouts recipes, and local MRP guidance. Submissions trigger secure email alerts to madiraeandco@gmail.com. Customers possess the absolute right to withdraw consent and request immediate deletion by emailing us.
4. Cookie Storage & Anonymous Analytics
We utilize cookies to maintain verification states (such as '__madirae_gate_v2') and preserve state selections during your catalog navigation. Anonymous analytics are captured solely to measure page compile speeds and visual showcase rendering times. No marketing tracking cookies or invasive scripts are loaded.
Right to Deletion (Right to be Forgotten)
You hold full authority to request data deletion. To request complete, instant erasure of your newsletter records or verified login credentials, simply contact our privacy officers. We process all deletion requests within 24 hours.