This explains what personal information MAA FURNITURE collects about you, why we need it, who else sees it, and what you can ask us to do about it.
Effective 14 August 2026 · Version 2026-08-14.1
MAA FURNITURE sells and makes furniture in Kurnool, Andhra Pradesh. When you use this website, we decide what happens to your personal information, which under the Digital Personal Data Protection Act, 2023 makes us the Data Fiduciary and you the Data Principal.
Our showroom is at Door No 87/1240, MAA FURNITURE, Ramalingam Subhashini Complex, 4th employees colony, near by Shakthi Auto Mobiles, Revenue Colony, Sree Rama Nagar, Kurnool, Kalluru, Andhra Pradesh 518002.
We only collect what we need to sell you furniture and deliver it. We do not collect your date of birth, your gender, your location, or anything about you from other websites. We do not use analytics or advertising trackers, and there are no tracking cookies on this site.
| What we collect | Why | Our legal basis | How long we keep it |
|---|---|---|---|
| Your name and email address | To create your account, sign you in, and email you about your orders. | Needed to provide the account and shop you asked for | Until you delete your account |
| Your password | To sign you in. | Needed to provide your account | Stored only as a scrambled one-way hash. We cannot read it. |
| Delivery address and phone number | To deliver your furniture and call you if the driver cannot find you. | Needed to fulfil your order | Saved addresses until you delete them; a copy on each order for 8 years |
| Your orders and invoices | To fulfil the order, handle returns and refunds, and file our taxes. | Needed to fulfil your order, then required by Indian tax law | 8 years, as the Companies Act and GST rules require |
| Custom furniture enquiries — your name, phone, photos and description | To understand what you want built and to call you with a quote. | Steps towards a contract, at your request | Deleted when the enquiry closes; if it becomes an order, the build specification is kept for warranty |
| Marketing emails | To tell you about new arrivals and offers. | Your consent — you can withdraw it at any time | Until you withdraw consent |
| Your testimonial, if you give us one | To show it on our website with your name and city. | Your consent — you can withdraw it at any time | Until you withdraw consent |
| Your IP address | To stop bots and password-guessing attacks. | Security of our service | Under one hour, then automatically discarded |
We use a small number of companies to run the website. They only handle your data to do a job for us, and they are not allowed to use it for anything else.
Processing outside India. Some of these companies process your data on servers outside India, including our website servers in South Korea. Section 16 of the DPDP Act permits this except to countries the Government of India has restricted; none of the countries we use is currently restricted.
If you have an account, you can do most of this yourself at Account → Privacy & Data.
We delete your account, your saved addresses, your cart, any custom furniture enquiries that did not become orders, and any photos you uploaded.
We cannot delete the invoices for orders you have already placed — Indian tax and company law requires us to keep those for 8 years. What we do instead is remove your name, phone number, street address and pincode from them, leaving only the amounts, the dates and the state, which is what the tax record actually needs.
If you have an order still on its way, we cannot delete your details until it arrives — we still need them to deliver it. We record your request and complete it automatically once the order is done.
This website sells furniture and is meant for adults. We do not knowingly collect information from anyone under 18, and we do not advertise to or profile children. If you believe a child has created an account, contact us and we will delete it.
Passwords are stored as one-way hashes and never in readable form. Traffic to this site is encrypted. Signing in uses a secure, browser-only session cookie that cannot be read by scripts. Only staff who need to see an order can see it, and every staff action on your account is logged.
If a breach happens that affects you, we will tell you and the Data Protection Board of India, as Section 8(6) of the Act requires.
For anything about your personal data, contact our Data Protection Officer:
We answer within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
This is version 2026-08-14.1, effective 14 August 2026. When we change anything substantial we publish a new version number here. Your account records which version you agreed to for each thing you consented to, and you can see that history on your privacy page.
If you would prefer this notice in Telugu or Hindi, ask us and we will provide it.