Moment Shopping

Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how Moment Enterprise ("we", "us", "our"), the operator of Moment Shopping (momentshopping.com) and our mobile application (together, the "Platform"), collects, uses, shares, stores, and protects your personal data. We are committed to handling your data responsibly and in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules made thereunder.

For the purposes of the DPDP Act, Moment Enterprise is the Data Fiduciary and you are the Data Principal. By using the Platform and providing your data, you consent to the practices described in this Policy.

1. Data We Collect

We collect the following categories of personal data:

  • Identity & contact data: your name, mobile number, email address, and date of birth or anniversary (if you provide them).
  • Transaction data: delivery and billing addresses, order history, payment method (we do not store full card numbers; these are handled by our payment partners), and GST details if you request a GST invoice.
  • In-store linkage: where you make a purchase at one of our physical stores, we may link that invoice to your mobile number to give you a unified purchase history and warranty record.
  • Technical & usage data: device information, IP address, app version, and how you interact with the Platform, collected automatically to operate and improve our service.
  • Communications: messages, queries, and feedback you send us.

2. How & Why We Use Your Data (Purpose)

We process your personal data only for specified, lawful purposes, including to:

  • create and manage your account and verify your identity via OTP;
  • process, fulfil, and deliver your orders, and provide invoices and warranty support;
  • provide customer support and respond to your requests;
  • send transactional updates (order, payment, delivery, and service messages) via WhatsApp, SMS, email, and push notifications;
  • operate the Moment Coins loyalty and Privilege Club programmes;
  • detect, prevent, and address fraud, abuse, and security issues;
  • comply with legal, tax, and regulatory obligations; and
  • with your consent, send promotional offers and marketing communications.

3. Consent & Its Withdrawal

We process your data based on the consent you provide, or where processing is necessary for fulfilling your order, for legitimate uses permitted by law, or to comply with a legal obligation. Your consent is sought through clear, affirmative action. You may withdraw your consent at any time by contacting our Grievance Officer (see Section 9). Withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to provide certain services. Transactional messages relating to your orders may continue as part of the service.

4. Sharing Your Data

We share your data only as necessary, with:

  • Logistics partners to deliver your orders;
  • Payment gateways and banks to process payments and EMI;
  • Communication providers to send you order updates and notifications;
  • Professional advisers and authorities where required by law, regulation, court order, or to protect our rights.

We do not sell your personal data to any third party. Our service providers are permitted to use your data only to perform services for us.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required to comply with legal, tax, accounting, and regulatory obligations. Transaction records such as invoices and order history are retained for the period mandated by Indian law. When data is no longer required and there is no legal obligation to retain it, we will delete or anonymise it.

6. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you and how it is processed;
  • Correct, complete, or update inaccurate or outdated data;
  • Erase your personal data where it is no longer required;
  • Withdraw consent at any time;
  • Nominate another individual to exercise your rights in the event of death or incapacity; and
  • Grievance redressal in respect of how we handle your data.

To exercise any of these rights, contact our Grievance Officer (Section 9) or use the Delete Account page. We may need to verify your identity before acting on a request.

7. Data Security

We implement reasonable technical and organisational security safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including secure transmission and restricted access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Data

The Platform is intended for users aged 18 and above. We do not knowingly process the personal data of children without verifiable parental or guardian consent. If we learn that we have collected a child's data without such consent, we will delete it.

9. Grievance Officer & Contact

If you have any questions, concerns, or complaints about your personal data or this Policy, please contact our Grievance Officer:

Grievance Officer: Mr. Sanu Das
Moment Enterprise, Shivmandir, Panchayat Road, Siliguri, West Bengal – 734011
Phone: +91 77193 83500

We will acknowledge your request or complaint promptly and endeavour to resolve it within 90 days, as required under the DPDP Act. You also have the right to register a complaint with the Data Protection Board of India.

10. Cookies & Tracking

Our website uses cookies and similar technologies to remember your preferences, keep you signed in, and analyse traffic to improve the Platform. You can manage or disable cookies through your browser settings, though some features may not function correctly without them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.