Privacy Policy

1Introduction

Pasumaithuli Foods (“we”, “us”, “I”) operates an e-commerce website and Android mobile app as a sole proprietorship. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with India's Digital Personal Data Protection (DPDP) Act, 2023 and Rules, 2025, as well as Google Play Store requirements.

By using our Platform, you consent to the data practices described herein.

2Information We Collect

• Identity & Contact: Name, email, mobile number, billing/shipping address.
• Order Details: Products purchased, order history, delivery instructions.
• Payment Information: Processed securely by Razorpay. We receive only transaction metadata (transaction ID, amount, status, last 4 digits); we do not store full card numbers or CVV.
• Device & Usage: Device type, OS, IP address, browser, pages visited, app performance data, cookies.
• Location: Approximate or precise location (with your consent) for delivery and location-based features.
• Communications: Customer support emails, chats, and feedback.

3How We Use Your Information

• Process and deliver orders (via Shiprocket).
• Process payments securely (via Razorpay).
• Send order confirmations, shipping updates, and customer support communications.
• Personalize your experience and improve our Platform.
• Send promotional offers (only with your consent; you can opt out anytime).
• Prevent fraud and comply with legal obligations.

4How We Share Your Information

We do not sell your data. We share information only with:

• Shiprocket: Name, shipping address, mobile number for delivery.
• Razorpay: Payment data for transaction processing; we receive only transaction metadata.
• Service Providers: Cloud hosting, analytics, and marketing tools under strict data protection agreements.
• Legal Authorities: When required by law or to protect safety and rights.

5Data Retention

We retain your data only as long as necessary:

• Account Information: While active + 2 years thereafter.
• Order & Transaction Data: 7–8 years (as required by Indian tax laws).
• Marketing Data: Until you withdraw consent.
• Device & Usage Data: 1 year for analytics.

6Your Rights (DPDP Act, 2023)

You have the right to:

• Access, correct, or delete your personal information.
• Withdraw consent for data processing or marketing.
• Request data portability.
• Nominate someone to exercise your rights.
• Lodge a complaint with the Data Protection Board of India.

7Data Security

We use encryption (SSL/TLS), secure payment processing (Razorpay is PCI-DSS compliant), access controls, and regular security audits to protect your data.

8International Data Transfers

Your data may be transferred outside India (e.g., cloud hosting, analytics). We ensure such transfers comply with applicable laws through contractual safeguards.

9Children's Privacy

Our Platform is not intended for users under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided us with data.

10Third-Party Links & SDKs

Our Platform may link to third-party sites or use SDKs (e.g., Razorpay, Shiprocket, analytics). This policy does not apply to them. Review their privacy policies.

11Changes to This Policy

We may update this policy periodically. Significant changes will be notified via email or on our Platform.

12Contact Us

13Google Play Store Disclosures

• Data Safety: All data practices disclosed in Play Console.
• Permissions: Only necessary permissions requested (location, storage). Manage via device settings.
• Account Deletion: Available in app settings or via email.

14Governing Law

This policy is governed by Indian law, including the DPDP Act, 2023. Disputes subject to courts in Chennai, Tamil Nadu, India.

15Language

This policy is available in English. Upon request, we will provide it in any of the 22 scheduled languages under the DPDP Act.