1. Customer / User Information Collection

To process your wholesale orders and deliver physical goods, we collect the following categories of information:

• Identity & Contact Data: Full name, farm/business name, phone number, email address.
• Delivery Data: Complete shipping address (Village/Town, District, PIN Code) to ensure our transporters can reach you.
• Billing Data: GSTIN (optional, for B2B input tax credit).
• Transactional Data: Order reference, amount, items purchased, and payment status.
• Technical Data: IP address and browser type (for security and website analytics).

We do not collect or store credit/debit card numbers, UPI PINs, or bank passwords. All payment processing is handled securely by our PCI-DSS compliant payment gateway (PhonePe).

2. Use of Information

We use your data solely for the following lawful business purposes:

• Processing and dispatching your feed orders.
• Sharing your delivery address and phone number with our logistics partners/courier services to deliver the goods.
• Issuing GST-compliant invoices under GSTIN 20IDIPP1232E1Z0.
• Sending order confirmations, payment receipts, and delivery updates via SMS, WhatsApp, or Email.
• Complying with tax, audit, and statutory obligations.

3. Third-Party Disclosure

Because we sell physical products, we must share certain data with third parties to fulfill your order. We disclose data only to:

• Payment Gateway: PhonePe, for secure payment processing.
• Logistics & Transport Partners: Local transporters and courier companies to deliver the feed bags to your address.
• Legal Authorities: When required by court order or statutory obligation (e.g., GST authorities).

We do not sell, rent, or trade your personal data to third-party marketing entities. Internal order notifications are routed to our owner at dhirajpandey21012@gmail.com.

4. Information Protection

We implement reasonable security practices as required under the IT Act 2000, including:

• HTTPS/TLS encryption for all data transmission.
• Hashed passwords (bcrypt) for user accounts.
• Secure server-side storage with restricted access.
• No storage of financial credentials on our servers.

In the unlikely event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India in accordance with the DPDP Act, 2023.

5. Rights of Users

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you.
• Correction: Request correction of inaccurate data (e.g., updating a delivery address).
• Erasure: Request deletion of data not required for statutory tax/audit compliance.
• Withdraw Consent: Opt-out of non-essential communications (like promotional SMS).

To exercise these rights, email dhirajpandey21012@gmail.com with the subject "Data Principal Request". We respond within 30 days.

6. Cookies & Local Storage Policy

Our website uses the following client-side storage:

• localStorage: Stores your shopping cart contents (SKUs and quantities) between visits so you don't lose your items. Persists until cleared from your browser.
• Session Cookies: Used to keep you logged into your account securely.
• Payment Gateway Cookies: PhonePe may set cookies during the checkout process, governed by their own privacy policy.

We do not use third-party advertising or tracking cookies (like Google Analytics or Facebook Pixel).

7. Data Retention

We retain your data for the following periods:

• Order & Invoice Records: Minimum 8 years, as required by the Central Goods and Services Tax Act, 2017.
• Account Data: Until you request deletion (excluding mandatory tax records).
• Contact Inquiries: 24 months.

8. Notification of Changes

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on this page with an updated "Effective" date. Your continued use of the website after changes are posted constitutes acceptance.

10. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India. Any dispute arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts at Garhwa, Jharkhand, India.