Last updated: [CONFIRM: date of approval]
This notice explains what personal data dairysuvidha.com collects, why, who it is shared with, how long it is kept, and the rights you have under the Digital Personal Data Protection Act, 2023.
Who is responsible for your data
Two parties decide how your order data is used, and both are responsible to you for it (data fiduciaries):
- The website operator — [CONFIRM: operator legal name], [CONFIRM: registered address], which runs dairysuvidha.com, its customer accounts and its analytics.
- The billing branch — the Dairy Suvidha branch that serves your delivery pincode, which sells to you, issues your GST invoice, receives your payment and arranges delivery. Each branch’s legal name and address is on its page under Locations.
What we collect
When you place an order:
- name, phone number and email address
- billing and delivery address, including pincode
- GSTIN and business name, only if you choose to enter them
- the products you ordered, amounts paid, invoices and order notes
When you pay online: payment is handled by Razorpay. We receive a payment reference and status, never your full card number, CVV, UPI PIN or bank login.
When you contact a branch on WhatsApp, phone or email: your number or address and the content of the conversation.
When you browse: pages viewed, device and browser type, approximate location from your IP address, and the cookies described below.
We do not ask for more than an order, delivery, invoice or legal obligation needs. We do not knowingly collect data from children; orders must be placed by an adult.
Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Accept, deliver and support your order | contact, address, order details | your order (consent given by placing it) |
| Route your order to the right branch | delivery pincode | your order |
| Issue GST invoices and keep tax records | name, address, GSTIN, order details | legal obligation |
| Take payment and process refunds | payment reference and status | your order |
| Prevent fraud and secure the website | IP address, device data, order history | legitimate use under the Act |
| Measure and improve the website | browsing data, analytics cookies | your consent |
| Send offers and news | phone, email | your separate, opt-in consent only |
Who we share it with
- The billing branch that serves your pincode.
- Couriers and transporters, who receive your name, phone number and delivery address.
- Razorpay, to process online payments and refunds.
- Our hosting provider and email service, which store and send data on our behalf.
- Google (Analytics, Ads, Merchant Center) and Meta (Facebook and Instagram), which receive browsing and purchase events to measure our advertising.
- WhatsApp (Meta), when you choose to message a branch.
- Government and tax authorities, when the law requires it.
We do not sell your personal data.
Cookies
| Cookie | Purpose |
|---|---|
ds_branch | Remembers the branch you chose so the right WhatsApp number and branch contact details are shown. It is never used to bill you. |
| WooCommerce cart and session cookies | Keep your cart and checkout working. |
| Login cookies | Keep you signed in to your account. |
| Google Analytics and Google Ads | Measure visits and the performance of our ads. |
| Meta Pixel | Measures the performance of our Facebook and Instagram ads. |
You can block or delete cookies in your browser settings. The cart and checkout need their cookies to work.
How long we keep it
- Orders that were never paid or failed: deleted after 30 days.
- Cancelled orders with no invoice: deleted after 90 days.
- Orders with a GST invoice or credit note, and the documents themselves: kept for at least 72 months, as tax law requires.
- WhatsApp and email conversations: [CONFIRM: retention period].
- Marketing consent: until you withdraw it.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- ask for a summary of the personal data we hold about you and who we have shared it with;
- ask us to correct, complete or update it;
- ask us to erase it, except where the law requires us to keep it (for example, invoices);
- withdraw consent you have given (such as marketing), as easily as you gave it;
- nominate another person to exercise these rights if you die or become unable to;
- complain to our Grievance Officer, and then to the Data Protection Board of India.
To use any of these rights, write to the Grievance Officer. We may need to verify your identity before acting.
Security
The website uses HTTPS throughout, and access to order data is limited to the staff who need it. If a breach affects your data, we will inform you and the Data Protection Board as the law requires.
Changes
We will post any change to this notice on this page, with a new date at the top.