Privacy policy.
Updated 24 October 2026
Your space is personal. So is your information. Here is how we handle it.
Who this covers
This policy explains how Main Character Energy (“MCE”, “we” or “us”) handles information on the House of Enaya website and through its contact form. Use the contact form for privacy questions or requests.
Information you provide
When you contact us, we collect your name, email address, enquiry topic, message and, if supplied, order reference. We record your submission time and confirmation that you agreed to us using those details to handle the enquiry. Please do not send passwords, payment credentials, identity documents or unnecessary sensitive information.
Checkout saves contact details, delivery address, box quantity, total, provider order and payment references, status and timestamps in the site database. We also store order notes, shipping quotes, dispatch estimates, fulfilment status, courier tracking, audit entries and email queue records. Private order links use an unguessable access token; keep these links private. Order and shipping emails are sent to your email address using Resend. Razorpay handles payment details under its own privacy policy (razorpay.com/privacy/). We do not store card numbers, CVVs, UPI PINs or banking passwords. This contact form does not collect card numbers, CVVs, UPI PINs or banking passwords.
How we use it
We use enquiries to answer questions, investigate order issues and handle privacy requests. Order information is also used for payment confirmation, fulfilment, delivery updates, returns and required business records. Sending a message does not subscribe you to marketing.
Hosting, security & service providers
The site is hosted through OpenAI Sites using Cloudflare infrastructure. Contact submissions are saved in the site's database and are accessible through an owner-restricted enquiry inbox. Order details are accessible only to authorised admins and fulfilment users. Fulfilment users receive the details needed to pack, ship and track paid orders. Hosting providers may process technical information such as IP addresses, request times, browser details and security logs to deliver and protect the service.
To limit spam, the contact form uses an automated spam check and a daily pseudonymous request key derived from a network address where available. The form database does not store the raw network address. We also use a submission identifier to prevent duplicate enquiries when a request is retried.
We share information only as needed with service providers supporting the site, customer support, payment or delivery; to comply with lawful requests; or to protect people and the service. We do not sell contact-form information. Providers may process information in countries other than yours, subject to applicable requirements.
Cookies & external resources
House of Enaya does not use advertising pixels. Optional first-party analytics uses browser storage only with your permission, as described below. The hosting platform may use cookies needed for access, authentication or security. The site loads Bodoni Moda and Inter from Google Fonts; your browser connects to Google to request those files. External checkout or other linked services have their own privacy practices.
Retention & your choices
We retain enquiries for the time needed to handle the request and related follow-up, disputes or legal obligations, and review them for deletion when they are no longer needed. Payment and order records may need longer retention under applicable requirements.
You can ask to access, correct or delete information you gave us, or withdraw your consent to further enquiry processing, by choosing “Privacy request” on the contact form. We may need to verify the request. Some information may need to be retained for legal or dispute-related reasons; we will explain if this applies. Withdrawal does not affect processing already carried out, and may limit our ability to resolve the enquiry.
Children & security
The store and contact form are intended for adults. Please do not submit a child's personal information. If you believe it has been provided, contact us so we can investigate and remove it where appropriate. We use access restrictions and secure connections, but no online system can promise absolute security.
Policy updates
We will update this page when the site’s practices change, as our services evolve. The date above identifies this version.
Business & customer support
Main Character Energy
Plot No. 9, Ekvira Devi Marg, Sindhi Society, Chembur, Mumbai, Maharashtra — 400071
support@maincharacterenergy.co.in
Optional visit and campaign analytics
With your permission, House of Enaya measures page visits, source and campaign tags, device category, approximate country and interactions such as scent views and checkout steps. A random browser identifier helps estimate returning visitors; a session ends after 30 minutes of inactivity or when a new tagged campaign starts. Paid orders may be linked to the consented session that began their checkout. Names, email addresses, telephone numbers, delivery addresses, payment credentials and order-access tokens are not sent to visitor analytics. We do not use advertising trackers or fingerprinting.
You can decline analytics and still shop normally, or change your choice through “Cookie preferences” in the footer. Browser privacy signals are respected. Counts omit visitors who decline, use blockers or cannot run tracking, so they are estimates rather than a complete census. Campaign tags are intended for campaign names, never personal details. Raw visit data is retained for up to 180 days, with older records removed in batches during reporting maintenance. Sales records are kept separately.