Privacy Policy

Legal

Last updated: 15 August 2026

This policy explains what MACROS.™ by Abhishek Saini ("MACROS.™", "we", "us") does with your personal data when you use eatmacros.in, order from us, or sign up as a member. We are the data fiduciary for that information under India's Digital Personal Data Protection Act, 2023.

1. What we collect

Account data — your mobile number, name, and optionally your email, training goal and gym name, when you create an account.
Order data — the items you bought, the amount, the time, and the Razorpay order and payment identifiers.
Message data — anything you type into our contact form.
Technical data — your IP address and browser type, recorded in server logs for security and rate limiting.

We never collect or store your card number, CVV, UPI PIN or bank credentials. Payments run entirely inside Razorpay's PCI-DSS compliant checkout. We only receive a payment identifier and a success or failure result.

2. Why we use it

To take, price and fulfil your order, and to resolve disputes about it.
To verify it's really you, via a one-time code sent to your mobile number.
To apply your member discount and partner-gym discount.
To reply when you contact us.
To meet food-safety, tax and accounting obligations under Indian law.
With your consent, to send occasional offers. You can opt out at any time and we will stop; it will not affect your ability to order.

3. Who we share it with

We do not sell your data. We share the minimum necessary with:

Razorpay Software Private Limited — to process payments.
Our SMS provider — to deliver your one-time code.
Our hosting provider (Render) — which stores the data on our behalf.
Government authorities — only where the law compels us.

Partner gyms receive counts and totals, never your name or number, unless you ask us to share them.

4. How long we keep it

Order records: eight years, as required for tax records.
Account details: until you ask us to delete them, or after three years of inactivity.
One-time codes: five minutes, then destroyed.
Contact-form messages: two years.
Server logs: ninety days.

5. Your rights

Under the DPDP Act, 2023 you may ask us to show you the personal data we hold about you, correct anything wrong, delete it, or withdraw a consent you previously gave. Write to info@eatmacros.in and we will respond within thirty days. If you are not satisfied, you may complain to the Data Protection Board of India.

6. Security

The site is served over HTTPS. Payment verification uses HMAC-SHA256 signature checking with a constant-time comparison, so a forged payment confirmation is rejected. Access to stored data is limited to the owner. No system is perfectly secure; if a breach affects you, we will notify you and the Board as the law requires.

7. Children

Our services are not directed at anyone under 18. We do not knowingly create accounts for children. If you believe a child has given us data, write to us and we will delete it.

8. Cookies

This site sets no advertising or tracking cookies and uses no third-party analytics. Your cart is held in your browser's memory for the session only and is gone when you close the tab. Razorpay may set its own cookies inside its checkout window under its own policy.

9. Changes and contact

If we change this policy we will update the date above and, for material changes, tell members directly. Questions: info@eatmacros.in or +91 93540 09517, Palam, South West Delhi 110045.