Does Momsora sell customer data?

No. Momsora never sells personal data. Information is shared only with the processors needed to fulfil an order, such as payment gateways and Shiprocket's courier partners.

Legal

Privacy policy

What Momsora collects, why we collect it, who we share it with, and the control you have over your data.

Last updated 16 August 2026

Who we are

Momsora is an Islamic lifestyle brand based at Kottanthala, Palathingal, Parappanangadi, Malappuram, Kerala, India, operating this store at shop.momsora.in.

For anything about your data, write to hello@momsora.in. We are the data fiduciary for the information described here, under the Digital Personal Data Protection Act, 2023.

What we collect

Only what we need to sell you something and get it to your door:

Identity and contact — your name, email address and phone number.
Delivery — the shipping and billing addresses you save or enter at checkout.
Order history — what you bought, when, for how much, and any personalisation text or gift message you supplied.
Account — your password, stored only as a one-way cryptographic hash we cannot read.
Communication — emails, contact forms, support requests and reviews you send us.
Technical — IP address, browser type, device type and pages visited, collected as you browse.

What we do not collect

We do not store card numbers, CVVs, UPI PINs or bank credentials — those go straight to the payment gateway and never touch our servers.

We do not buy contact lists, and we do not sell, rent or trade your personal data to anybody. Ever.

Why we use it

Each piece of data has a purpose:

To process, pack, dispatch and deliver your order.
To send order, payment, dispatch and delivery updates — these are part of buying from us and are not marketing.
To answer your questions and handle claims, returns and cancellations.
To run your account, saved addresses, wishlist and order history.
To send marketing email only if you asked for it, and to stop the moment you unsubscribe.
To understand which pages and products people use, so the shop gets better.
To detect fraud and abuse, and to meet our tax and legal obligations.

Who we share it with

We share the minimum necessary with the services that make the shop work:

Shiprocket and the courier assigned to your parcel — your name, address and phone number, so they can deliver it.
Our payment gateway — the transaction amount and reference, to take payment and issue refunds.
Our email provider — your email address, to send order updates and any newsletters you subscribed to.
Our hosting and database provider, which stores this site and its data securely.
Analytics, in aggregated form, to see how the site is used.
Government authorities, only where the law genuinely requires it.

AI assistance

Some parts of the shop — the Momsora Guide, smart search and gift suggestions — use an AI model to answer your question.

What you type into those features is sent to the model provider to generate a reply, along with our public catalogue and policy text. Do not put personal, financial or sensitive details into them. Your account data, addresses and payment records are never used to train any AI model.

How long we keep it

Order and invoice records are kept for as long as tax and accounting law requires, currently eight years.

Account data stays until you ask us to delete the account. Newsletter data stays until you unsubscribe. Support conversations are kept for two years. Technical logs are kept for a short rolling period.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

Tell you what personal data of yours we hold and who we shared it with.
Correct anything inaccurate or incomplete.
Delete your data, where we are not legally required to keep it.
Withdraw a consent you gave, including marketing consent, at any time.
Nominate someone to exercise these rights if you are unable to.

Security, children and changes

The site runs over HTTPS, passwords are hashed, and access to customer data is restricted to the people who need it to run orders.

Momsora is not intended for children under 18 buying on their own account. We do not knowingly collect data from children; if you believe a child has given us data, write to us and we will remove it.

If this policy changes we update the date at the top of this page, and we tell you directly when the change is significant. Questions, requests or complaints: hello@momsora.in.

In short