Privacy Policy

Effective [EFFECTIVE DATE]

This policy explains what personal data Veera Fresh ([LEGAL NAME], [ADDRESS]) collects, why, and your rights under the Digital Personal Data Protection Act, 2023. We collect only what we need to sell and deliver your order.

1. What we collect

When you order: name, email, phone number, delivery address, city and pincode, any note you add, and [GSTIN and business name, if you request a GST invoice].
Payment: Razorpay processes your payment. We receive the payment status, amount, method type and a transaction reference. We never see or store card numbers, UPI PINs or bank passwords.
When you browse: basic technical data (IP address, browser, pages visited) and the campaign tags in links you followed (for example, which Instagram post or pack QR code brought you). Your cart is saved in your own browser.
When you write to us: your messages and contact details.

We don't knowingly collect data from children; orders must be placed by an adult.

2. Why we use it

To process, pack, deliver and support your order, and send order and delivery emails (including tracking links).
To process payments, refunds and prevent fraud (including a bot check at checkout).
To meet legal duties: tax, accounting and consumer law records.
To understand which posts and campaigns bring customers, using aggregated numbers.
[Only with your separate consent:] to send news, recipes or offers. You can withdraw consent at any time with one click.

3. Who we share it with

Only with service providers who help us run the shop, and only what they need:

Razorpay (payments and refunds)
Courier partners (name, phone and address for delivery)
Resend (sending our emails)
Cloudflare (hosting, database and security)

We don't sell your data or share it for others' advertising. We may disclose data if the law requires it.

4. How long we keep it

Order and invoice records: as long as tax and accounting laws require (generally up to 8 years).
Other data (messages, technical logs): only as long as needed for the purpose, then deleted.

5. Security

Data is stored on secured cloud infrastructure, transmitted over HTTPS, and admin access is restricted and logged. Order pages linked from your emails use long random links that only work for that order. If a personal data breach affects you, we'll inform you and the Data Protection Board as the law requires.

6. Your rights

You can ask us to:

tell you what personal data we hold about you and how we use it;
correct or complete it;
delete it, where we don't need to keep it by law;
withdraw any consent you gave;
name someone to exercise these rights on your behalf.

Write to [EMAIL] from the email you ordered with. We'll respond within [30] days.

7. Cookies

We use only essential storage (for your cart and site security). [If analytics are added later, describe them here and ask for consent where required.]

8. Grievances

Grievance Officer: [GRIEVANCE OFFICER], [EMAIL], [ADDRESS]. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

9. Changes

We'll post any changes here with a new effective date, and email you about significant ones.