Who controls your data
YellowMoon is operated by YELLOWMOON ENTERPRISES PVT LTD. Before launch, this page must include the company’s verified privacy contact details and principal/registered business address.
Personal data we may collect
Depending on how the store is used, we may process name, phone number, email, billing and delivery address, account credentials, order history, returns/support communications, device/browser information, IP address, consent preferences and related transaction information. Payment credentials are processed by the selected payment service provider; YellowMoon should not store raw card or UPI credentials in WordPress.
Why we process it
Data may be used to create and manage accounts, process and deliver orders, prevent fraud, provide customer support, handle returns/refunds, meet tax and legal obligations, maintain security, analyse store performance and send marketing communications where permitted.
Sharing
Information may be shared only as reasonably necessary with payment processors, logistics/courier partners, hosting and technology providers, analytics/marketing providers selected by YellowMoon, professional advisers and public authorities where legally required.
Retention and security
Personal data should be retained only for as long as reasonably necessary for the stated purpose, legal/accounting obligations, fraud prevention or dispute handling. Reasonable technical and organisational safeguards should be used to protect it.
Your choices and rights
Customers may contact YellowMoon regarding access/correction requests, withdrawal of consent where applicable, marketing preferences, account concerns or grievances. The privacy notice and consent flow should be maintained in line with the Digital Personal Data Protection Act, 2023 and the notified Digital Personal Data Protection Rules, 2025 as their applicable provisions take effect.