Privacy Policy

Last updated: 4 August 2026

This Privacy Policy explains how SHIVSREE CREATIONS, operating the brand Modura ("we", "us", "our"), collects, uses, stores, shares and protects your personal data when you visit our website, place an order, or communicate with us.

We are the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025. This policy also reflects our obligations under the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020.

Please read this policy carefully. By using our website or placing an order, you acknowledge that you have read and understood it.

1. What we collect

We collect only what we need to sell to you and serve you.

  • Identity and contact data — name, email address, phone number, billing address, shipping address.
  • Order data — items viewed, added to cart, purchased, returned, exchanged or cancelled; order history.
  • Payment data — payment method type, transaction reference, and payment status. We do not collect or store your full card number, CVV or UPI PIN. Card and UPI details are captured directly by our PCI-DSS compliant payment gateway and never reach our servers.
  • Account data — if you create an account: username, saved addresses, preferences, wishlist.
  • Technical data — IP address, device type, browser, operating system, referring page, and pages viewed.
  • Communications — the content of emails, WhatsApp messages, calls and support tickets you send us.
  • Bank details — only where you request a refund on a Cash on Delivery order, and only for the purpose of making that refund.

2. Why we use it

Purpose Basis
Processing and delivering your order, handling returns, exchanges and refunds Performance of contract
Sending transactional updates — order confirmation, dispatch, tracking, delivery Performance of contract
Customer support and grievance handling Performance of contract / legal obligation
Fraud prevention, COD verification and account security Legitimate use
Tax invoicing, GST compliance and statutory record keeping Legal obligation
Marketing emails, SMS and WhatsApp messages Your consent — withdrawable at any time
Analytics and advertising measurement Your consent

We do not sell your personal data. We do not use automated decision-making that produces legal or similarly significant effects on you.

3. Consent, and how to withdraw it

Where we rely on your consent — chiefly for marketing and analytics — you gave it by opting in, and you may withdraw it at any time. Withdrawing consent is as easy as giving it:

  • Click unsubscribe in any marketing email.
  • Reply STOP to any marketing SMS or WhatsApp message.
  • Write to our Grievance Officer at the address in section 11.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. It also does not stop transactional messages about orders you have already placed — those are necessary to perform our contract with you.

4. Who we share it with

We share personal data only with parties who need it to deliver the service, and only to the extent needed. These parties act as our Data Processors and are bound by contract to protect your data.

  • Shopify — our e-commerce platform, which hosts the store and processes orders.
  • Payment gateways — to process payments and refunds securely.
  • Courier and logistics partners — name, address and phone number, so they can deliver and collect returns.
  • Communication providers — email, SMS and WhatsApp service providers, to send you order updates.
  • Analytics and advertising providers — such as Google and Meta, where you have consented.
  • Professional advisers and authorities — where required by law, court order, or a valid request from a government agency.

5. Where your data is stored

Our store runs on Shopify, whose servers are located outside India. This means your personal data may be transferred to, stored in and processed in countries other than India. We transfer data only to countries not restricted by the Central Government under the DPDP Act, and we require our processors to apply appropriate safeguards.

6. How long we keep it

  • Order and invoice records — 8 years, as required under GST and income tax law.
  • Account data — until you ask us to delete your account, plus a short retention period for records we must keep by law.
  • Marketing contact data — until you withdraw consent, after which it is deleted or anonymised.
  • Support correspondence — 3 years from the last interaction.
  • Refund bank details — deleted once the refund is complete and the statutory record-keeping period has passed.

When a retention period ends we delete or irreversibly anonymise the data.

7. Your rights

Under the DPDP Act you have the following rights, exercisable free of charge by writing to our Grievance Officer:

  • Right to access — obtain a summary of the personal data we hold about you, how we process it, and who we have shared it with.
  • Right to correction and erasure — have inaccurate or incomplete data corrected, updated or completed, and have data erased where it is no longer needed and we are not required by law to keep it.
  • Right to grievance redressal — raise a complaint with us and receive a response. You must approach us before escalating to the Data Protection Board of India.
  • Right to nominate — nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
  • Right to withdraw consent — as described in section 3.

We will respond to any request within 30 days. We may need to verify your identity before acting on a request.

8. Children

Under Indian law a child is any person under 18 years of age. Our website and products are intended for adults. We do not knowingly collect personal data of children, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us personal data, contact our Grievance Officer and we will delete it.

9. Cookies and tracking

We use cookies and similar technologies to keep your cart working, remember your preferences, understand how the site is used, and measure advertising where you have consented. You can block or delete cookies through your browser settings. Blocking essential cookies will break cart and checkout functionality.

10. Security

We apply reasonable security safeguards to prevent personal data breaches, including encrypted connections (HTTPS), access controls limiting who on our team can see customer data, and contractual security obligations on our processors. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a personal data breach we will notify the Data Protection Board of India and affected users as required under the DPDP Rules.

11. Grievance Officer

In accordance with the DPDP Act, the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer are:

Grievance Officer
SHIVSREE CREATIONS
491/2, Pillayar Nagar, Unnamed Road, near Imagine Interiors, Old Rayakottah HUDCO, Hosur, Krishnagiri District, India 635109
Email: info@modura.co.in
Phone: +91 9344315040
Hours: Monday to Saturday, 10:00 AM to 6:00 PM IST

We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or in law. We will post the revised policy on this page and update the "Last updated" date. Where changes are significant, we will notify you by email or a notice on the website.