Privacy Policy

At Punjabi Roots (operated by Made of Music (Global) Ltd, Company Number: 08951534), we take your privacy seriously. This policy explains how we collect, use and protect your personal information when you use our website.

What We Collect

When you use our website, we may collect the following information:

• Account information: name, email address, phone number and delivery address when you create an account or place an order.
• Order information: products purchased, order history, payment method (we do not store full card details — these are handled securely by our payment processor).
• Communication data: messages sent through our contact form or email correspondence.
• Usage data: information about how you browse and interact with our website, collected through cookies and analytics tools.

How We Use Your Data

We use the information we collect to:

• Process and fulfil your orders.
• Communicate with you about your orders, including dispatch and delivery updates.
• Send you newsletters and promotional offers (only where you have opted in).
• Improve the design, content and layout of our website.
• Understand the interests and purchasing behaviour of our customers.
• Prevent fraud and maintain the security of our website.

Data Sharing

We do not sell your personal data to any third parties. We only share your information with:

• Delivery partners: to fulfil and deliver your orders.
• Payment processors: to securely process your payments.
• Analytics providers: to help us understand and improve our website (data is anonymised where possible).

Cookies

Our website uses cookies to enhance your browsing experience, remember your preferences, and gather analytics data. You can control cookie settings through your browser. Disabling certain cookies may affect website functionality.

Data Security

We use industry-standard security measures to protect your personal information, including firewalls, encrypted connections (SSL/TLS) and secure payment processing. While we take all reasonable precautions, no method of transmission over the internet is 100% secure.

Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Delete your personal data (where there is no legitimate reason for us to continue to process it).
• Object to the processing of your personal data for marketing purposes.
• Withdraw consent where we are relying on consent to process your data.

To exercise any of these rights, please contact us.

Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. Order records are kept for a minimum of 6 years to comply with UK tax and accounting regulations.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@punjabiroots.co.uk.