Legal

Privacy Policy

Last updated: 28 April 2026

1. Who we are

Mon Forté ("we", "us", "our") is a handcrafted protein chocolate brand operating from Maharshi Dayanand Marg, Garoth, 458880, District Mandsaur, Madhya Pradesh, India. For any privacy-related questions, please write to support@monforte.in.

2. Scope

This policy explains what personal data we collect when you visit monforte.in, create an account, place an order, or contact us, and how we use, share, and protect that data. It is aligned with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules thereunder.

3. Data we collect

Account data: name, email address, phone number, password (stored hashed).
Order & shipping data: billing/shipping address, pincode, items purchased, order amount.
Payment data: processed by our PCI-DSS compliant payment partner (Razorpay). We never store your full card or UPI credentials on our servers.
Communications: messages you send us via the contact form or email.
Technical data: IP address, device/browser type, pages visited, basic analytics (used in aggregate to improve the site).

4. Why we collect it (purposes)

To create and operate your account.
To process and fulfil your orders, including payment, shipping, and customer support.
To comply with tax, accounting, and other legal obligations.
To prevent fraud, abuse, and secure our systems.
To send transactional emails (order confirmations, shipping updates).
With your consent, to send marketing updates, you may withdraw consent any time.

5. Legal basis (DPDP Act)

We process your data based on (a) the consent you provide while creating an account or placing an order, and (b) "legitimate uses" recognised under the DPDP Act, such as fulfilling a service you have requested and complying with law.

6. Sharing your data

We share data only with service providers who help us run the business, under strict confidentiality:

Razorpay, payment processing.
Delhivery, shipping, delivery, and tracking.
Hosting & infrastructure providers, to securely store your data.
Government / regulators, only when required by valid legal process.

We do not sell your personal data.

7. Data retention

We retain account and order data for as long as your account is active and thereafter for the period required to comply with tax, accounting, and dispute-resolution obligations (typically up to 8 years for financial records).

8. Your rights

Subject to the DPDP Act, you have the right to (a) access your data, (b) correct or update inaccurate data, (c) request erasure where permissible, (d) withdraw consent for marketing, and (e) raise a grievance. To exercise any right, email support@monforte.in.

9. Security

We use industry-standard safeguards including TLS encryption in transit, hashed passwords, restricted access, and PCI-DSS compliant payment partners. No method of transmission over the internet is 100% secure, but we work hard to protect your data.

10. Cookies

We use a small number of essential cookies (session, cart) and optional analytics cookies to understand how the site is used. You can disable cookies in your browser, though some features may stop working.

11. Children

Our products and services are not directed at children under 18. We do not knowingly collect personal data from minors.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or a prominent notice on the site.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, the Grievance Officer is:

Mon Forté, Grievance Officer
Maharshi Dayanand Marg, Garoth, 458880
Dist. Mandsaur, Madhya Pradesh, India
Email: support@monforte.in