Privacy Policy

Last updated: 22 September 2026

This policy explains what personal data we collect, why, and what you can do about it. It is written to the Digital Personal Data Protection Act 2023 and the DPDP Rules 2025.

We are the Data Fiduciary for the data described here.

Who to contact

We acknowledge every request within 48 hours and respond within 30 days.

What we collect

When you order. Your name, phone number and delivery address, given to us over WhatsApp. We need these to send you saffron. WhatsApp is operated by Meta and your messages are governed by their own privacy terms as well as this one.

When you subscribe. Your email address, if you sign up for our discount offer. Held by Mailchimp.

When you browse. Your approximate country, taken from your IP address by ipapi.co so we can show prices in your currency and route you to the right WhatsApp number. Plus the usual analytics on which pages you visit, how you arrived, and what device you use.

We do not collect payment card details. We do not run a checkout.

Who processes it

  • Google Analytics (Google LLC): site usage statistics
  • Meta Pixel (Meta Platforms): advertising measurement
  • Cloudflare Web Analytics (Cloudflare): page view counts, added at the edge and without cookies
  • Mailchimp (Intuit): email list
  • ipapi.co: country lookup from IP address
  • GitHub Pages and Cloudflare: hosting and delivery, including server logs

Some of these store or process data outside India.

What we store in your browser

Three cookies, all set by the analytics and advertising tools named above and none by us directly:

  • _ga and _ga_9569ES4LBP: Google Analytics, to recognise a returning browser
  • _fbp: Meta Pixel, for advertising measurement

Browser storage that does a similar job, set by this site:

  • sok_currency and sok_country: your currency and region
  • sok_overlay_seen and sok_overlay_done: whether you have seen the discount popup
  • an order reference code, generated in your browser so we can tell which orders came from where

Meta's script also stores lastExternalReferrer and lastExternalReferrerTime: the site you arrived from, and when.

Clearing your browser data removes all of these.

Why we use it

  • To take, pack and deliver your order
  • To answer your questions
  • To send you offers, if you asked for them
  • To understand which pages and sources bring people to the site

How long we keep it

  • Order details: 3 years, for tax and dispute purposes
  • Email subscriptions: until you unsubscribe
  • Analytics: as long as Google and Meta retain it under their own policies

Your rights

Under the DPDP Act you can:

  • Access the personal data we hold about you
  • Correct anything wrong or out of date
  • Erase your data, unless we are required by law to keep it
  • Nominate someone to exercise these rights if you die or become incapacitated
  • Complain to our Grievance Officer, and after that to the Data Protection Board of India

Email [email protected] to use any of these. We will ask you to confirm who you are before we act.

To stop marketing email, use the unsubscribe link in any message we send. That works immediately and you do not need to contact us.

Children

This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe we have, tell us and we will delete it.

Not for EU or UK customers

We do not sell to customers in the European Union or the United Kingdom, and this policy is not written to the GDPR. If you are in the EU or UK, please do not order from us.

Changes

We will update this page when our practices change, and change the date at the top.