Privacy Policy
Last updated 11 October 2026
Malmal has not launched. The only thing this website does with your information is add you to a waitlist and tell you when we launch.
The short version. If you fill in the form we keep your email, your pincode, the size you said you need, what you said you would want at launch, and your WhatsApp number if you chose to give one. We use it to email you about the launch and to work out whether enough parents in Delhi NCR want this to be worth making. We do not sell it. Email ceo@malmalcare.com and we will delete it.
Who is responsible for your data
Malmal is a pre-launch project and is not yet an incorporated company. Until it is, the person operating this website is the data fiduciary responsible for the information described here, and can be reached at ceo@malmalcare.com. That address is also the grievance contact for anything in this policy.
If and when Malmal is incorporated, this policy will be updated to name the company and its registered address, and you will be told before your data is transferred to it.
What we collect, and why
The waitlist form
| What | Why we ask | Required? |
|---|---|---|
| Email address | The only way we can tell you when Malmal launches | Yes |
| Delivery pincode | To check whether the people signing up are actually in Delhi NCR, which is the only place we could deliver at launch | Yes |
| Size needed | To know which sizes to make first | Yes |
| What you would want at launch | To tell the difference between people who would buy and people who are curious. This is the single most important answer on the form | Yes |
| WhatsApp number | So we can reach you about the launch on WhatsApp instead of email, if you prefer | No - optional |
The optional questions after you sign up
Once you are on the list we ask three more things: what brand you use now, what it gets wrong, and roughly what you spend a month. These are entirely optional, you are already on the waitlist whether or not you answer, and we use them to decide what to build and what to charge. Your email is stored alongside them only so the answers can be matched to your signup.
What we do not collect
We do not ask for your name, your address, your baby's name or date of birth, or any payment details. Nothing on this site takes money. We do not knowingly collect anything from children, and this site is meant for adults making a decision for a child in their care.
Who else sees it
We are a pre-launch project with no servers of our own, so a few well-known services sit underneath this website. We do not sell your data to anyone, and we do not share it with any other brand.
| Service | What reaches them | Why |
|---|---|---|
| Google (Forms and Sheets) | Everything you type into the form | The waitlist itself is a Google Form writing to a Google Sheet |
| Meta (Facebook and Instagram) | Only if you accept tracking. That you visited, that a signup happened, and which of the four launch-intent options you picked. Not your email, pincode or WhatsApp number | To measure which advertisement brought people who would actually buy. See the Cookie Policy |
| Brevo (email sending) | Your email address, and the pincode and size you gave us so we only send what is relevant to you. Whether you opened an email or clicked a link in it | Sending launch emails from ceo@malmalcare.com, with a one-click unsubscribe in every email |
| Cloudflare | Your IP address, in standard server logs | Hosting and delivering this page, and routing email sent to our address |
| Cloudflare Web Analytics | Your IP address and browser type | Aggregate visitor counts, switched on by our host. It sets no cookies and does not follow you to other websites |
| Google Fonts | Your IP address, when the fonts on the home page load | Typefaces. The policy pages you are reading now use your device's own fonts and make no such request |
How long we keep it
We keep waitlist entries until we decide whether to launch, and for up to 12 months after that decision so we can tell you the outcome either way. After that they are deleted. If we decide not to launch at all, we will delete the list rather than keep it.
We will not quietly pass the list to a different project or sell it as an asset. If Malmal is ever sold or transferred, you will be told and given the chance to opt out first.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us to:
- Tell you what we hold about you and who we have shared it with
- Correct anything wrong, incomplete or out of date
- Delete it, which we will do unless we are legally required to keep it
- Withdraw your consent at any time, which also means we stop emailing you
- Nominate someone to exercise these rights if you die or become incapacitated
Email ceo@malmalcare.com and we will act on it and reply. There is no form to fill in and no charge. If you are unhappy with how we handle it, you may escalate to the Data Protection Board of India.
Every email we send about the launch will carry a one-click unsubscribe. Unsubscribing stops the emails; ask for deletion if you want the record gone as well.
Security, honestly stated
Your form answers sit in a Google account protected by a strong password and two-factor authentication, and this site is served only over HTTPS. We think that is proportionate for an email address and a pincode. We are not going to claim more than that: no small pre-launch project can promise perfect security, and you should not give any website information you would be seriously harmed by losing.
Changes
If this policy changes in a way that affects what we do with data we already hold, we will email the waitlist rather than quietly change the page. Smaller corrections will just be made here, with the date at the top updated.