Privacy Policy - Maa Roti

1. Introduction

Who we are: State the name of your company/website and your contact information.
Purpose: Briefly state the purpose of the policy (to inform users about how their data is collected, used, disclosed, and protected).
Acceptance: Note that by using the service, the user agrees to the terms of the policy.

2. Information We Collect

Explain the different types of data you collect and how you collect them.

Category	Examples of Data Collected	Source/Method of Collection
Personal Data (Direct)	Name, email address, phone number, shipping address, payment information.	Directly provided by the user (e.g., account registration, checkout, forms).
Usage Data (Automatic)	IP address, browser type, operating system, pages visited, time spent on pages, referral source.	Collected automatically via cookies, server logs, and tracking technologies.
Device Data (Automatic)	Device type, unique device identifiers, mobile network information.	Collected automatically from the user’s device.
Third-Party Data (Indirect)	Data from social media platforms if you connect your accounts, or data from partners.	Collected via third-party services.

3. How We Use Your Information

Explain the lawful basis and specific purposes for processing the collected data.

To provide and maintain the Service: Processing transactions, delivering products/services, and customer support.
To manage your Account: Managing user registration and providing access to different functionalities.
To contact you: Sending updates, marketing and promotional materials (where consent is given), and notifications.
For Analytics and Improvement: Monitoring usage, troubleshooting, testing, research, and improving the user experience.
For Security and Fraud Prevention: Detecting and preventing fraudulent activity.
To comply with legal obligations: Adhering to applicable laws and regulations.

4. Disclosure of Your Information

Explain who you share the data with and why.

Service Providers: Third-party companies that perform services on your behalf (e.g., payment processing, hosting, analytics, email delivery).
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition.
Affiliates: Sharing with parent companies, subsidiaries, or other companies under common control.
Legal Requirements: To comply with law enforcement, court orders, or legal processes.
With Your Consent: When you specifically instruct or consent to the sharing.

5. Data Security

Describe the measures you take to protect user data.

We use reasonable administrative, technical, and physical measures to safeguard your Personal Data against loss, theft, and unauthorized use, disclosure, or modification. However, no internet transmission is ever fully secure or error-free.

6. Your Data Protection Rights

Depending on the user’s location, they may have rights such as:

The Right to Access: Requesting a copy of the data we hold about them.
The Right to Rectification: Requesting correction of inaccurate data.
The Right to Erasure (“Right to be Forgotten”): Requesting deletion of data under certain conditions.
The Right to Restrict Processing: Requesting us to limit how we use their data.
The Right to Data Portability: Requesting data transfer to another organization.
The Right to Object: Objecting to the processing of their Personal Data.

7. Cookies and Tracking Technologies

Briefly explain what cookies are and how users can manage their preferences. You may want a separate Cookie Policy linked here.

8. Changes to This Privacy Policy

State that the policy may be updated periodically and how users will be notified (e.g., posting the new policy on the page with an updated “Effective Date”).