Privacy policy

Privacy Policy

Last Updated: September 29, 2026

Plain-language summary: MHEKO, operated by The Artless, uses the information needed to operate its website, process and fulfil orders, provide customer support, improve your shopping experience, prevent misuse and send marketing communications where permitted. We do not sell personal data. You may contact us to request access, correction, updating or deletion of eligible personal data, withdraw consent, or raise a privacy-related grievance.

1. About This Privacy Policy

This Privacy Policy explains how The Artless ("The Artless", "MHEKO", "we", "us" or "our") collects, uses, stores, shares and protects personal data when you visit or use the MHEKO website, https://mheko.com/, create an account, place an order, contact us, subscribe to communications, or otherwise interact with us.

For personal data processed through the MHEKO website and our direct customer operations, The Artless acts as the Data Fiduciary where applicable under Indian law.

By using the MHEKO website, you acknowledge this Privacy Policy. Where consent is required as the lawful basis for processing, we will request an appropriate affirmative indication and you may withdraw your consent as described below.

2. Personal Data We May Collect

Information You Provide

We may collect information such as:

Name and contact details, including your name, mobile number, email address and billing or delivery address.
Account information, such as login details and account preferences, where account functionality is available.
Order and transaction information, including products purchased, order value, payment status, invoices, returns, refunds and delivery details.
Customer communications, including enquiries, complaints, feedback, product reviews and customer-support conversations.
Marketing preferences, including whether you choose to receive promotional communications.

Information Collected Automatically

When you visit MHEKO, certain information may be collected automatically, including:

IP address, browser type, device type and operating system.
Approximate location inferred from your IP address.
Pages viewed, links clicked, referring pages, session information and cart activity.
Cookie and similar-technology data used for essential website functions, preferences, security, analytics and, where applicable, advertising.

We do not intentionally collect payment card numbers, UPI PINs or banking passwords. Payments made through the MHEKO website are processed through the applicable payment gateway, and the payment provider's own privacy and security practices may apply.

3. Why We Process Personal Data

We may use personal data to:

Create and manage customer accounts, carts and wish lists, where these features are available.
Accept, verify, process and fulfil orders.
Arrange delivery and provide order and delivery updates.
Process cancellations, returns and refunds.
Send transactional communications such as order confirmations, invoices, delivery updates and service notices.
Respond to enquiries and provide customer support.
Resolve complaints and disputes.
Maintain website security and prevent fraud, misuse or unauthorised activity.
Detect technical issues and improve website performance.
Understand how customers use our website and improve our products, services, content and shopping experience.
Send offers, product launches and MHEKO updates where you have provided consent or where otherwise permitted by applicable law.
Comply with applicable tax, accounting, consumer-protection, legal and regulatory requirements.
Establish, exercise or defend legal claims where necessary.

We aim to collect only personal data that is reasonably necessary for the relevant purpose.

4. Consent and Permitted Processing

Where required by applicable law, we process personal data based on your consent, including for optional marketing communications and certain non-essential cookies.

We may also process personal data where permitted or required by applicable law, including for:

Fulfilling an order you have placed.
Providing services you have requested.
Complying with legal or regulatory obligations.
Responding to lawful requests from government or law-enforcement authorities.
Preventing fraud, misuse or security incidents.
Protecting our legal rights and interests.

You may withdraw consent for future processing where processing is based on consent. Withdrawal of consent does not affect processing that was lawfully completed before withdrawal.

5. Cookies and Similar Technologies

MHEKO may use cookies, pixels, local storage and similar technologies.

These technologies may be used for:

Essential website functions.
Shopping cart and checkout functionality.
Security and fraud prevention.
Remembering preferences.
Website analytics and performance measurement.
Advertising and campaign measurement, where applicable.

Where required, non-essential cookies will be used only after an appropriate choice is provided.

You may manage cookies through the website's cookie-consent tool, where available, or through your browser settings. Disabling essential cookies may affect certain MHEKO website features.

6. When We Share Personal Data

We may share personal data only where reasonably necessary with:

Payment gateways and payment service providers for processing payments, refunds and payment-related checks.
Courier and logistics partners for delivery, tracking and fulfilment of orders.
Website hosting and technology providers that help us operate and maintain MHEKO.
Analytics, communications, customer-support and security providers acting on our instructions.
Professional advisers, accountants, auditors and insurers, where reasonably necessary.
Government or regulatory authorities, where required by applicable law or lawful request.
Business successors or transaction parties in connection with a merger, restructuring, acquisition, financing or transfer of business, subject to appropriate safeguards.

We do not sell your personal data.

Third-party service providers may have their own privacy policies and terms. We recommend reviewing those policies when using their services.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

Processing and fulfilling orders.
Providing customer support.
Processing returns and refunds.
Preventing fraud and misuse.
Maintaining business and transaction records.
Meeting legal, tax and accounting requirements.
Resolving disputes or protecting legal rights.

Different categories of information may have different retention periods.

When personal data is no longer required, we may delete or anonymise it unless continued retention is required by law or reasonably necessary for legal, security or other lawful purposes.

Backup copies may remain for a limited period before being securely deleted or overwritten.

8. Security

The Artless takes reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, alteration, disclosure or loss.

Depending on the circumstances, these measures may include access controls, secure configurations, encryption in transit where supported, logging, backups and restrictions on internal access.

However, no website, transmission or storage system can be guaranteed to be completely secure.

If a personal data breach occurs, we will take reasonable steps to contain and address the incident and provide notifications where required under applicable law.

9. Your Rights and Choices

Subject to applicable law and appropriate identity verification, you may have the right to request:

Information about personal data being processed about you.
Information regarding certain processing activities and relevant data-sharing categories where required by law.
Correction or updating of inaccurate or incomplete personal data.
Erasure of personal data where it is no longer necessary and where deletion is not restricted by law.
Withdrawal of consent for future processing based on consent.
Grievance redressal.
Other rights available under applicable Indian data-protection law.

To exercise a privacy right, please contact us using the details in Section 15.

We may request information reasonably necessary to verify your identity and locate the relevant records.

10. Marketing Communications

If you have opted to receive promotional communications from MHEKO, we may send information about:

New products.
Offers and promotions.
Product launches.
Brand updates.
Other relevant MHEKO communications.

You may opt out of promotional emails, SMS or other marketing communications by using the unsubscribe option provided in the communication, where available, or by contacting us.

You may still receive non-promotional communications that are necessary for an order, delivery, account, security matter, legal notice or customer-service request.

11. Children's Personal Data

MHEKO's website and products are intended for adults and are not directed toward children.

We do not knowingly process a child's personal data for creating an account or placing an order without appropriate parental or lawful-guardian consent where required by applicable law.

If you believe that a child has provided personal data to us improperly, please contact us so that we can review the matter and take appropriate action.

12. Data Processing Outside India

Some technology, hosting, payment or service providers used by MHEKO may process or store personal data outside India.

Where this occurs, The Artless will take reasonable steps to work with providers that maintain appropriate safeguards and will comply with applicable requirements governing cross-border processing.

13. Third-Party Links

The MHEKO website may contain links to third-party websites or services, including payment providers, delivery partners and social-media platforms.

These third parties operate independently and may have their own privacy policies, terms and practices.

The Artless does not control the privacy practices of third-party websites. We recommend reviewing their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

The MHEKO website.
Our products and services.
Our business practices.
Technology and service providers.
Applicable laws and regulations.

Any revised version will include an updated "Last Updated" date.

Where a change materially affects how personal data is processed, we will provide appropriate notice and obtain fresh consent where required by applicable law.

15. Grievance Officer and Contact

For privacy questions, requests regarding your personal data, consent withdrawal or privacy-related grievances, you may contact:

Grievance Officer / Privacy Contact
The Artless (MHEKO)
H.no. 866, Street no. 11,
Mustafabad New,
Delhi – 110094, India

Phone: +91 9873300330
Website: https://mheko.com/

When contacting us, please mention that your request concerns privacy and provide sufficient information to help us identify your account, order or request.

We will review and respond to privacy requests within the period required by applicable law.

16. Governing Framework

This Privacy Policy is intended to operate consistently with applicable Indian law, including the Digital Personal Data Protection Act, 2023, applicable rules and regulations as they come into force, and other applicable information-technology, consumer-protection, tax and e-commerce requirements.

If any provision of this Privacy Policy conflicts with a mandatory requirement of applicable law, the applicable legal requirement will prevail to the extent of that conflict.