Privacy Policy

1. Introduction

Pushpmilan is a florist in Nashik offering fresh flowers, gifts, cakes and decorations. This Privacy Policy explains what information Pushpmilan (“we”, “us”, “our”) collects, how we use it, who we share it with, and the choices you have.

It applies to:

• our website at pushpmilan.com, including ordering, enquiries and customer accounts; and
• the Pushpmilan Admin Android application, a private app used only by authorised Pushpmilan staff to manage the business.

Technical support for these services, including privacy questions and requests, is provided by RM Web Setu. Their contact details are in Contact Us.

2. Information We Collect

Information you give us

• Account details: when you sign in with Google, we receive your name, email address and basic profile details from your Google account. We also ask for your mobile number so we can contact you about your orders.
• Order details: your name, mobile number, email address (optional), delivery address, area or locality, landmark, PIN code, preferred delivery date and time, any delivery instructions or gift message you write, the items you order and the amounts charged.
• Saved addresses: if you choose to save an address, we store its label, the recipient’s name and phone number, the address, landmark and PIN code.
• Enquiries: your name, phone number, what you would like to order, and any notes, delivery date or address details you include.
• Messages and calls: if you contact us by phone, WhatsApp or email, we receive the details you share in that conversation.

Information collected automatically on our website

• Site activity: we record simple events on our own systems, such as which page or product was viewed and when the WhatsApp or call buttons are tapped. These records use a random identifier that lasts only for your browser session, and are linked to your account if you are signed in. They help us understand which products customers are interested in.
• Browser storage: our website stores your shopping cart, favourites, the delivery PIN code and date you checked, and your sign-in session in your browser’s local storage, so these are remembered on your device. Our website does not set advertising or tracking cookies.
• Technical information: like all websites, our hosting and service providers receive standard technical information such as your IP address and browser type when your browser connects to them.

We do not use your device’s location (GPS). Delivery availability is checked using the PIN code you enter.

Information about authorised staff

For staff using the Pushpmilan Admin app, we hold their name, email address, phone number (if provided), role and account status, sign-in information, and a record of certain actions taken in the app. See Admin App and Authorised Staff Access.

3. How We Use Information

• to process, prepare and deliver your orders, and to contact you about them;
• to respond to your enquiries and prepare quotes or custom orders;
• to create and manage your account, saved addresses and order history;
• to process online payments and keep accurate payment records;
• to check whether we deliver to your area;
• to understand which products and pages are popular so we can improve our catalogue and website;
• to run the business through the Admin app, including managing products, orders, enquiries and delivery settings;
• to control staff access, keep a record of important changes, and protect our services against misuse; and
• to provide technical support and to meet our legal obligations.

We do not use your information for advertising, and we do not sell it.

4. Admin App and Authorised Staff Access

The Pushpmilan Admin app is a private business tool distributed only to approved testers and staff through Google Play’s internal testing programme. It is not available to the public.

• Authorised access only: staff accounts are created by invitation from the app owner. Invitations and password-reset messages are sent by email through our authentication provider. Staff sign in with their email address and a password they set themselves. Pushpmilan never sees staff passwords.
• Role-controlled access: each staff member has a role (Super Admin, Admin or Read-only Admin) that controls what they can see and change. Customer order, enquiry and account information is visible to authorised staff only as needed to run the business, for example to prepare and deliver orders and respond to enquiries. Read-only Admins can view information but cannot change it.
• Activity records: the app keeps a record of certain staff actions, such as changes to products, manual orders and user management, so the business can see who changed what. These records can only be viewed by Super Admins.
• Removing access: the app owner can deactivate a staff account at any time, which immediately stops that person from using the app.
• On the device: the app keeps the staff member’s sign-in session and display preference on the device until they sign out. It asks for access to the photo library only when a staff member chooses to add a product photo. It does not use the camera, microphone or location, and it does not contain advertising, analytics or crash-reporting tools.
• Support reports: the app’s “Report an Issue” feature prepares an email to RM Web Setu in the staff member’s own email app. It includes the description they write, the app version, build number and environment, the device platform and operating-system version, the time, and the reporter’s name and role. It does not include passwords, sign-in tokens or customer details. Nothing is sent until the staff member sends the email themselves.

5. Orders, Enquiries and Delivery Information

• Orders: you need to sign in to place an order online. Your order and delivery details are stored with your account so you can see your order history, and so our staff can prepare and deliver your order.
• Saved addresses: at checkout you can choose whether to save your address for next time. You can add, edit or delete saved addresses from your account.
• Enquiries: when you send an enquiry from our website, the details are saved so our staff can follow up, and a WhatsApp chat with Pushpmilan opens with your details filled in so you can send them. Our website’s hosting provider also receives a copy of the enquiry form submission.
• Delivery: we use your address, landmark, PIN code and preferred date and time to plan delivery, and your phone number to contact you or the recipient about it. Staff may call or message you on WhatsApp about your order.
• WhatsApp: if you choose to contact us through WhatsApp, your messages are also handled under WhatsApp’s own privacy policy.

6. Product Images and Uploaded Content

• Product photos are uploaded by authorised staff through the Admin app. The original file is stored privately. A resized, watermarked copy is created for display on our website, and this published copy does not carry the photo’s embedded camera information.
• Because the original file is kept privately as uploaded, it may still contain information recorded by the camera, such as the date or, if the device recorded it, location. Staff are asked to upload photos of products only, not photos of people or personal documents.
• AI-assisted features: staff can choose to use AI tools to suggest product titles and descriptions or to create alternative product backgrounds. For these features, the product’s photo and product details (such as its name, description and category) are sent to our AI provider. Customer information is not sent. AI suggestions are reviewed by staff and are only shown to customers once staff approve them.

7. Payments

• At checkout you can choose to pay online or to arrange payment with us directly, for example over WhatsApp.
• Online payments are processed by Razorpay. Your card, UPI, bank or wallet details are entered on Razorpay’s secure checkout and are handled by Razorpay. Pushpmilan does not receive or store your full card number, CVV, UPI PIN or banking passwords.
• To set up a payment, we share your order number, order amount, and your name, mobile number and email address with Razorpay so its checkout can be pre-filled.
• We keep payment records needed to confirm and reconcile orders, such as the Razorpay order and payment references, the payment status, the amount paid and, if a payment fails, the reason given by Razorpay. We also keep the payment confirmations Razorpay sends us.
• For payments you make to us directly, our staff may record the payment method and amount against your order.
• Razorpay’s handling of your payment information is governed by Razorpay’s own privacy policy.

8. Third-Party Service Providers

We use trusted service providers to run our services. They process information on our behalf, only as needed to provide their service:

• Supabase: database, account sign-in, file storage for product images, and server functions, for both the website and the Admin app.
• Netlify: hosting for our website, including receiving website enquiry form submissions.
• Google: Google Sign-In for customer accounts; Google Fonts, which provides the fonts used on our website; and an embedded Google Map on our home page showing our location.
• jsDelivr: delivers a software library used by our website.
• Razorpay: online payment processing.
• OpenAI: AI-assisted product features in the Admin app. Only product photos and product details are sent, never customer information.
• WhatsApp (Meta): when you choose to contact us or send an enquiry through WhatsApp.
• Google Play: distribution of the private Pushpmilan Admin app to authorised testers and staff.
• RM Web Setu: technical support and maintenance of Pushpmilan’s services.

These providers have their own privacy policies and may store or process information on servers in India or in other countries.

9. Data Storage and Security

• Information is stored with our service providers and sent over encrypted (HTTPS) connections.
• Access to customer and business data is limited by database access rules and staff roles. Customers can only see their own orders and saved addresses.
• Staff accounts require a password. Access can be removed by the app owner at any time.
• Card and UPI details are handled by Razorpay, not by us.

We take reasonable steps to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

• We keep order, payment, enquiry and account records for as long as needed to provide our services, keep proper business and accounting records, resolve disputes and meet legal obligations.
• Saved addresses are kept until you delete them or ask us to delete them.
• Staff activity records are kept so the business has a reliable history of changes.
• Information stored in your browser (such as your cart and favourites) stays on your device until you clear it or sign out.

When information is no longer needed, we delete it or keep it in a form that no longer identifies you, unless we are required to keep it.

11. Data Sharing

We do not sell or rent your personal information, and we do not share it with advertisers. We share information only:

• with the service providers listed above, to run our services;
• with the people involved in fulfilling your order, as needed to deliver it;
• with Razorpay, when you choose to pay online;
• when required by law, or to protect the rights, property or safety of Pushpmilan, our customers or others; or
• with your permission.

12. User Rights and Requests

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is inaccurate or incomplete;
• delete your information or account, except where we need to keep certain records (for example, for accounting or legal reasons); or
• stop using your information for a particular purpose, where applicable.

You can also manage some information yourself: you can edit or delete saved addresses from your account, sign out at any time, and clear your browser’s storage.

To make a request, contact RM Web Setu using the details below. We may need to confirm your identity before acting on a request, and we will respond within a reasonable time. Staff members can also ask the app owner about their Admin account.

13. Children and Age Restrictions

The Pushpmilan Admin application is intended for authorised adult business users and is not directed to children.

Our website is intended for customers who are able to place orders. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will take appropriate steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services or practices change. The updated version will be posted on this page with a new “Last updated” date. If we make significant changes, we will take reasonable steps to let you know.

15. Contact Us

For questions about this Privacy Policy, or to make a privacy or data request, please contact: