Privacy Policy

To deliver an order we need, and you give us at checkout:

• Your name.
• Your delivery address, city, state and PIN code.
• Your phone number — our delivery team calls it on the day.
• Your email address, where you give one, so we can send the order confirmation.
• Your GSTIN, only if you are buying as a business and ask for a GST invoice.

We do not ask you to create an account, and we do not collect a date of birth, a government ID or any other identifier we have no use for.

Card numbers, UPI IDs, bank credentials and one-time passwords are entered in Razorpay's payment window, not on our site. They are never sent to our servers and we cannot see or store them. We receive only the payment reference and whether it succeeded.

• To take payment for, pack and deliver your order.
• To contact you about that order, including if there is a problem with the delivery.
• To issue an invoice and keep the accounting and tax records Indian law requires us to keep.
• To handle a refund or a complaint if you raise one.

We do not sell your data, and we do not use it for marketing unless you have separately asked to hear from us.

The order data passes through a small number of service providers, each for one purpose:

• Razorpay Software Private Limited — takes the payment and holds the payment record.
• Google (Google Workspace) — the order log and our invoicing records are held in Google Sheets and Google Drive on our company accounts.
• Cloudflare — hosts the site and serves it to your browser.
• Our delivery partners — receive the name, address and phone number needed to hand over your order, and nothing else.

Some of these providers store data outside India. Where that happens, it is because the service is operated that way; the data is limited to what is described above.

Order and invoice records are kept for eight years, which is the retention period Indian company and tax law requires. Enquiries that do not become orders are kept for two years. After that they are deleted.

Our cart is stored in your own browser's local storage so that it survives a page reload. It is not a tracking cookie, it stays on your device, and it is cleared when your order completes. Razorpay sets its own cookies inside its payment window under its own policy.

Write to contact-bharat@m2-labo.jp to ask what we hold about you, to correct it, or to have it deleted where we are not required to keep it. We reply within 30 days. If you are not satisfied, you may escalate to our grievance officer at the same address, or by post to 519-A, Pearl Garden, RP Masani Road, Matunga East, Mumbai, Maharashtra 400019, India.

The site is not directed at children and we do not knowingly collect data from anyone under 18.

If this policy changes, the new version appears on this page with a new date at the top.