1. Sacred Trust & Regulatory Compliance
Girdhar Organic Heritage Pvt. Ltd. (“we,” “us,” “our,” or “Girdhar Organic”) operates the digital store located at girdharorganic.com. This Privacy Policy outlines our transparent practices regarding the collection, handling, storage, and protection of personal data entrusted to us by customers, visitors, and subscribers.
We operate in strict adherence to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Consumer Protection (E-Commerce) Rules, 2020.
2. Information We Collect
We collect solely the minimum information necessary to churn, package, and safely dispatch your authentic Vedic A2 Gir Cow Ghee harvests:
- Customer Identity & Contact: Full legal name, Indian mobile telephone number (for OTP authentication and courier dispatch alerts), WhatsApp communication preferences, and optional email address.
- Delivery Address: Recipient name, complete residential or commercial address, landmark, PIN code, and state for accurate door-to-door courier routing.
- Harvest Orders & Loyalty Ledger: Order numbers, chosen jar volume (500ml, 1 Litre, 2 Litres, 5 Litres), batch numbers, Golden Drops loyalty credits/redemptions, and delivery feedback.
- Device & Telemetry Data: IP address, device type, browser specifications, and anonymous browsing journey telemetry utilized to maintain cart persistence and diagnose network latency.
3. Purpose & Legal Basis for Processing
Your personal data is processed exclusively on legitimate, consensual grounds to perform our contract of harvest dispatch:
Dispatch Fulfillment
Packaging fresh bilona jars, generating courier waybills (AWBs), and delivering to your doorstep.
Order Telemetry & Alerts
Sending real-time WhatsApp and SMS tracking milestones when your jar leaves the Sonipat Gaushala.
FSSAI Compliance
Maintaining mandatory batch harvest ledgers and tax invoices as required under Indian food safety statutes.
Golden Drops Passbook
Crediting 5% cashback drops upon verified deliveries and maintaining your rewards balance.
4. Payment & Financial Data Security
All online monetary settlements are handled directly through Reserve Bank of India (RBI) authorized, PCI-DSS Level 1 certified payment aggregators (such as Razorpay and Cashfree Payments). Payment processing uses cryptographic tokens and 256-bit SSL transport layer security.
5. Non-Disclosure & Trusted Logistics Partners
We uphold a strict Zero Third-Party Commercial Sale Policy. Your data is never sold, leased, or broadcasted to advertising networks, data brokers, or telemarketing agencies.
Data is disclosed strictly on a need-to-know basis to our vetted infrastructure partners:
- • Logistics & Courier Partners: (Shiprocket, BlueDart Express, Delhivery, DTDC) receive your name, address, and phone number exclusively to execute transit and delivery.
- • Transactional Messaging: (Meta WhatsApp Cloud API, authorized Indian SMS DLT gateways) receive your mobile number strictly to deliver OTPs and parcel tracking notifications.
- • Statutory Regulatory Authorities: Where mandatorily required by law, court order, or GST/FSSAI audit inspections.
7. Your Rights Under the DPDP Act 2023
As a valued customer (“Data Principal”), you possess sovereign statutory rights regarding your personal information:
Right to Access & Summary: Request a full ledger of personal data processed and shared by Girdhar Organic.
Right to Correction & Erasure: Modify incorrect contact/address records or request the permanent deletion of your account (subject to statutory GST tax invoice retention mandates).
Right of Grievance Redressal: Direct recourse through our designated Grievance Officer before escalating to the Data Protection Board of India.
Right to Nominate: Designate a representative to exercise your data rights in the event of incapacity.
8. Account & Personal Data Deletion Request (Google Play Policy Compliance)
We respect your right to control your digital footprint. In accordance with the Digital Personal Data Protection (DPDP) Act 2023 and Google Play User Data Policy, any customer may request complete erasure of their account and associated personal data at any time:
Method 1: Instant In-App Deletion
You can delete your account directly inside the Girdhar Organic Mobile App. Navigate to Sanctum (Profile) → Scroll to bottom → Tap "Delete Account & Data". Upon confirmation, your profile, authentication tokens, addresses, and loyalty balance are immediately purged.
Method 2: Web & Email Deletion Request
If you no longer have the app installed, you can submit a deletion request by emailing our Grievance Officer at care@girdharorganic.com with your registered mobile number. Our team will verify and permanently delete your account within 48 to 72 hours.
What Data is Deleted vs Retained:
- Permanently Deleted: Name, phone number, saved delivery addresses, Golden Drops points balance, active subscription schedules, and marketing preferences.
- Statutory Retention: Past completed order records and GST-compliant tax invoices are retained for 7 years in cold storage strictly to satisfy Section 36 of the Central Goods and Services Tax (CGST) Act, 2017 and FSSAI traceability laws, after which they are automatically destroyed.
9. Grievance Officer & Statutory Inquiries
In accordance with Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 12 of the DPDP Act 2023, our designated Grievance Officer details are published below:
Shubham Girdhar
Director of Customer Trust, Girdhar Organic Heritage Pvt. Ltd.
Official acknowledgment of data inquiries will be dispatched within 48 hours, with complete investigation and redressal within 30 statutory days.