Privacy Policy

1. Our Privacy-First Philosophy

At My High, we understand that shopping for rolling accessories, curated gear, borosilicate glassware, and lifestyle products requires absolute confidentiality. We treat your personal information with the highest degree of discretion, security, and integrity.

This Privacy Policy explains how My High (“we”, “us”, or “our”) collects, uses, stores, and protects personal data obtained from visitors and registered buyers across https://myhigh.in in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000 of India.

2. Information We Collect

We only collect personal information that is strictly necessary to fulfill your orders, provide customer support, and maintain platform security:

3. The 100% Plain Discreet Packaging Protocol

4. Payment Security & Zero Credential Storage

My High operates a strict Zero Payment Credential Storage Architecture:

• We never request, process, or store your UPI MPIN, bank account passwords, or debit/credit card CVVs.
• All Instant UPI payments are initiated via direct deep-links or QR codes handled entirely within your personal banking app (Google Pay, PhonePe, Paytm, or BHIM).
• All server-to-server payment communications are encrypted with 256-bit TLS (HTTPS) protocols.

5. How We Use Your Information

Your data is processed strictly for legitimate transactional and operational purposes:

• Order Processing & Dispatch: Packing, routing, and delivering your items via Delhi NCR riders or national courier networks.
• Real-Time WhatsApp Notifications: Transmitting live order status updates, fulfillment hub pickup codes, and digital invoices.
• Customer Support: Resolving refund requests, replacement claims, and tracking inquiries.
• Fraud Prevention: Monitoring malicious bot activity and securing the platform against unauthorized checkout exploits.
• Optional MH Club Perks: Delivering exclusive discounts and secret drop alerts (only if explicitly opted-in; can be unsubscribed from at any time with 1 click).

6. Non-Disclosure & Logistics Sharing

We do not sell, rent, monetize, or trade your personal information with third-party advertisers or data brokers under any circumstances.

Your data is shared exclusively with trusted third-party service providers bound by strict confidentiality agreements, strictly as required to fulfill services:

• Logistics & Courier Carriers: Name, delivery address, and phone number shared with courier partners (e.g. Bluedart, Delhivery, Shadowfax) solely to complete doorstep drop-off.
• Communication Gateways: WhatsApp Cloud API and Hostinger transactional mail servers for automated invoice dispatch.
• Statutory Authorities: Disclosed only if strictly mandated by valid legal process, court subpoena, or enforceable government order under Indian law.

7. Cookies & Local Storage

My High uses modern, lightweight browser cookies and HTML5 local storage strictly for essential functional operations:

• Cart Persistence: Retaining your shopping cart items across browser sessions.
• Age Verification Token: Remembering that you have verified your 21+ age so you are not re-prompted on every page navigation.
• Theme & UI Preferences: Storing your display preferences (e.g. Classic vs. Neon theme mode).
• Security Tokens: Maintaining authenticated session states for buyers and sellers.

You can clear cookies or local storage at any time through your browser settings. Note that disabling essential storage may cause your shopping cart to reset between visits.

8. Your Data Rights (DPDP Act Compliance)

In accordance with the Digital Personal Data Protection Act, 2023, you retain full sovereignty over your personal data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can update or correct inaccurate address details or contact numbers.
• Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account and customer records from our database by emailing hi@myhigh.in. (Subject to statutory transaction retention periods mandated by tax regulations).

9. Data Protection Officer & Grievances

For privacy inquiries, data deletion requests, or concerns regarding your information, contact our designated Data Protection & Grievance Officer: