Privacy Policy

Effective Date May 19, 2026
Last Updated May 19, 2026
On this page

Introduction

Sindhi Dry Fruits ("we", "our", "us") operates the website sindhidryfruits.live (the "Store"). We are a Delhi-based food business in operation since 1939 and are committed to protecting the personal data of our customers and visitors.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, and the rights you have over it. It is issued under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 together with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using this Store, you confirm that you have read and understood this Policy. If you do not agree with any part of it, please do not use the Store.

Data we collect

We collect the following categories of personal data:

Information you provide

  • Name, billing and shipping address, email address, mobile number
  • Order history, product preferences, dietary or allergen notes (if you share them)
  • Account credentials, if you choose to create an account
  • Communications you send us (email, WhatsApp, chat, contact form)
  • Reviews, ratings, photos, and feedback you submit

Information collected automatically

  • IP address, browser type, device identifiers, operating system
  • Pages visited, time on site, referring URL, search terms used on our Store
  • Cookies and similar tracking technologies (see our Cookie Policy)

Information from third parties

  • Payment confirmation details from Razorpay (we never see your full card or UPI credentials)
  • Delivery status updates from Shiprocket and our courier partners
  • Analytics and ad-performance signals from Google and Meta (aggregated, pseudonymous)

How we use your data

We process your personal data for the following lawful purposes under Section 7 of the DPDP Act, primarily on the basis of your consent and where necessary to perform our contract with you:

  • To process, fulfil, ship, and deliver your orders
  • To contact you about order status, delivery, and customer service issues
  • To send promotional emails, WhatsApp messages, and SMS — only with your prior consent, and always with an unsubscribe option
  • To personalise product recommendations and your shopping experience
  • To prevent fraud, abuse, or unauthorised access to our Store
  • To comply with applicable Indian law, including tax, accounting, and consumer protection requirements
  • To improve our Store, products, and services through aggregated analytics

Cookies and similar technologies

We use cookies and similar technologies to operate the Store, remember your cart, understand how visitors use the Store, and run our marketing. You can control cookies through your browser settings and through the cookie banner on first visit.

For full details of every cookie we set, including name, purpose, and duration, please read our Cookie Policy.

Third parties we share data with

We share personal data only with the trusted service providers listed below, and only to the extent needed for them to provide their service. Each is contractually required to protect your data and use it only for the purpose for which it was shared.

We do not sell your personal data to any third party.

Your rights under the DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

  • Right to access - obtain a summary of personal data we hold about you and how we process it (Section 11)
  • Right to correction and erasure - request that inaccurate, incomplete, or out-of-date personal data is corrected or erased (Section 12)
  • Right of grievance redressal - raise a complaint with our Grievance Officer (Section 13)
  • Right to nominate - nominate another person to exercise your rights in case of your death or incapacity (Section 14)
  • Right to withdraw consent - withdraw any consent you have previously given, at any time, with the same ease with which you gave it (Section 6)

To exercise any of these rights, email our Grievance Officer at contact@sindhidryfruits.live with the subject line "DPDP Rights Request". We will respond within the statutory timeline of 30 days. If unresolved, you may approach the Data Protection Board of India.

Data retention

We retain personal data only for as long as is necessary for the purpose it was collected, or as required by Indian law. Indicative retention periods:

  • Order, invoice, and tax records: 8 years from the end of the relevant financial year, as required under the CGST Act 2017 and the Income Tax Act 1961
  • Account data: until you delete your account, plus 90 days for backup retention
  • Marketing preferences: until you withdraw consent, plus 30 days
  • Website analytics: typically 14 months (Google Analytics default)

When the retention period ends, data is permanently deleted or irreversibly anonymised.

Security

We implement reasonable security practices and procedures as required under Section 8 of the DPDP Act and Rule 8 of the IT (SPDI) Rules, 2011. These include:

  • HTTPS encryption across the Store
  • Encrypted storage of customer records on Shopify's PCI-DSS-compliant infrastructure
  • Tokenised payment processing through Razorpay - we do not store your card or UPI credentials
  • Role-based access controls, two-factor authentication for staff accounts
  • Regular security reviews and patching

No system is 100% secure. If we ever become aware of a personal data breach that is likely to result in significant harm to you, we will notify you and the Data Protection Board of India in accordance with the DPDP Act.

International data transfers

Some of our service providers (Shopify, Google, Meta) operate servers outside India. Where personal data is transferred outside India, we only do so to countries not restricted by the Central Government under Section 16 of the DPDP Act, and we ensure the recipient is bound by contractual obligations equivalent to those in this Policy.

Children

Our Store is intended for use by individuals aged 18 years and over. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contact@sindhidryfruits.live and we will delete the data in accordance with Section 9 of the DPDP Act.

Contact and Grievance Officer

For any privacy question or to exercise your rights, contact our Grievance Officer:

Sindhi Dry Fruits — Grievance Officer
M/s Sindhi Dry Fruit Impex
K 14, Central Market, Lajpat Nagar 2, New Delhi, Delhi 110024
Email: contact@sindhidryfruits.live
WhatsApp: +91-81784-74593

If your grievance is not resolved to your satisfaction within 30 days, you may escalate to the Data Protection Board of India.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or to applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the Store. We encourage you to review this page periodically.