PRIVACY POLICY
Last updated: 1 JULY 2026
MAHASUTRA LIMITED ("Mahasutra", "we", "us") operates
mahasutra.co. This policy explains what personal data we
collect, why, and what rights you have over it.
1. WHO WE ARE
Wanderasia Sdn Bhd | Wanderasia Pte Ltd
2. WHAT WE COLLECT
When you place an order: name, email, phone number, billing
and shipping address, and order history.
When you pay: payment card details are collected and processed
directly by our payment providers. We do not store full card
numbers.
When you browse: IP address, device and browser type, pages
viewed, and referring site. Collected via cookies and similar
technologies.
When you contact us or subscribe: name, email, and the content
of your message.
When you leave a review: name and review content, collected
via Judge.me.
3. WHY WE USE IT
- To process and deliver your order
- To communicate about your order
- To provide customer support
- To send marketing communications, where you have consented
- To detect and prevent fraud
- To improve our store and products
- To comply with legal and tax obligations
4. CONSENT
Where we rely on consent — principally for marketing — you may
withdraw it at any time by using the unsubscribe link in any
email, or by contacting us at info@mahasutra.co. Withdrawing consent does
not affect processing carried out before withdrawal.
Where processing is necessary to fulfil a contract with you, to
comply with law, or for our legitimate business interests, we
rely on those grounds instead.
5. WHO WE SHARE IT WITH
We do not sell your personal data.
We share it with service providers who process it on our behalf:
- Shopify Inc. — store hosting, order and customer records
- Payment providers — payment processing
- Shipping and logistics partners — delivery
- Judge.me — product reviews
We may disclose data where required by law, court order, or a
lawful request from a regulator.
6. INTERNATIONAL TRANSFERS
Our platform and service providers store and process data
outside your country of residence, including in [JURISDICTIONS].
Where we transfer personal data across borders, we take
reasonable steps to ensure it receives a comparable standard of
protection, as required under the law as applicable to you.
7. HOW LONG WE KEEP IT
Order and transaction records: [7] years, to meet tax and
accounting obligations.
Marketing contacts: until you unsubscribe, and for [12] months
thereafter.
Support correspondence: [24] months.
Browsing data: 12 months.
8. YOUR RIGHTS
Subject to the law applicable to you, you may:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data, where we have no continuing
lawful basis to retain it
- Withdraw consent to marketing
- Limit or object to certain processing
- Request a copy of your data in a portable format
- Lodge a complaint with your national data protection
authority
To exercise any of these, contact info@mahasutra.co. We will respond
within the period required by applicable law. We may need to
verify your identity first.
9. COOKIES
We use cookies that are strictly necessary for the store to
function, and — where you consent — cookies for analytics and
marketing. You can manage these through your browser settings
or our cookie banner. Disabling necessary cookies may prevent
checkout from working.
10. SECURITY
We take reasonable technical and organisational measures to
protect personal data against loss, misuse, and unauthorised
access. No method of transmission over the internet is entirely
secure, and we cannot guarantee absolute security.
11. CHILDREN
Our store is not directed at children under [13/16 — check the
threshold for each market]. We do not knowingly collect their
data. If you believe a child has provided us data, contact us
and we will delete it.
12. CHANGES
We may update this policy. Material changes will be posted here
with a revised "last updated" date.
13. CONTACT
Questions, requests, or complaints:
Info@mahasutra.co