Privacy policy
PRIVACY POLICY
Fresh Roots Naturals Effective Date: December 2, 2025
At Fresh Roots Naturals (“we”, “us”, “our”), we value the trust you place in our 150-year-old farming heritage. This Privacy Policy outlines how we collect, process, and safeguard your personal data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.
By visiting or shopping at www.freshrootsnaturals.com, you expressly consent to the practices described in this policy.
1. Information We Collect (Data Fiduciary)
We only collect information that is strictly necessary for lawful business operations (Order Fulfillment, Fraud Prevention, and Legal Compliance).
A. Personal Information (Provided by You)
When you place an order, we collect:
Identity Data: Full Name.
Contact Data: Phone Number, Email Address.
Delivery Data: Billing & Shipping Address, Landmark, Postal Code.
Transaction Evidence: Order History, Customer Support Chats, and Unboxing Videos (as required under our Refund Policy).
B. Payment Information
We do NOT store your financial data. * All transactions are processed via secure, RBI-compliant payment gateways (e.g., Razorpay, UPI). We only receive a transaction reference number for reconciliation.
C. Technical Data (Automated Collection)
To prevent fraud and improve website performance, we collect:
IP Address (to detect suspicious bulk ordering).
Browser Type & Device Information.
Time Zone & Location Data.
Cookies & Session Logs.
2. Purpose of Data Processing
We process your data for the following "Legitimate Uses":
Order Fulfillment: To pack, dispatch, and deliver your spices.
Communication: To send invoices, tracking updates, and shelf-life information.
Fraud Prevention: To detect suspicious activity (e.g., multiple cancellations, fake claims).
Legal Compliance: To maintain records for GST (Tax) and FSSAI (Food Safety) audits.
Marketing: To send offers/updates (only if you have opted in).
3. Data Sharing & Disclosure
We do NOT sell or rent your personal data. We share data only with the following trusted partners for operational necessity:
Logistics Partners: (e.g., Delhivery, Shiprocket) – Only Name, Address, and Phone Number are shared to ensure delivery.
Payment Gateways: – To process secure payments.
Technology Providers: (e.g., Shopify, WhatsApp API) – To host our website and send automated updates.
Legal Authorities: We may disclose data if required by law, court order, or government agency (e.g., FSSAI, Tax Dept) without prior notice.
4. Data Retention (The "No-Deletion" Clause)
Under the DPDP Act and Indian Tax Laws:
Transaction Data: We retain order details, invoices, and customer contact info for a minimum of 7 years as mandated by the GST Act and FSSAI regulations.
Deletion Requests: You cannot request the deletion of data related to completed orders until this statutory period is over. This ensures we have evidence for tax audits and consumer disputes.
Marketing Data: You may request deletion of your email/phone from our marketing lists at any time.
5. Your Rights (DPDP Act 2023)
As a "Data Principal," you have the right to:
Access: Request a summary of the personal data we hold about you.
Correction: Update or correct inaccurate details (e.g., change of address).
Grievance Redressal: Report a privacy concern to our Grievance Officer.
Withdraw Consent: You may withdraw consent for marketing activities. Note: Consent for order processing cannot be withdrawn for active orders.
6. Cookies Policy
We use cookies to enhance your experience.
Essential Cookies: Required for the cart and secure checkout to function.
Analytics Cookies: Help us understand which spices are popular.
Ad Cookies: Used by platforms like Google/Meta to show you relevant ads.
You can disable cookies in your browser settings, but this may prevent you from placing an order.
7. Protection of Minors
Our website is not intended for use by minors (under 18). We do not knowingly collect data from children. If you are a parent and believe your child has submitted data, please contact us for immediate deletion.
8. Grievance Officer
In compliance with the Information Technology Act 2000 and DPDP Act 2023, the details of our Grievance Officer are:
Name: Alen George
Designation: Founder & Grievance Officer
Email: info@freshrootsnaturals.com
Address: Fresh Roots Naturals, Changanassery, Kottayam, Kerala – 686104, India.
Response Time: We aim to respond to all privacy queries within 48 hours.
9. Jurisdiction
This Privacy Policy is governed by Indian laws. Any privacy-related dispute or claim shall be subject to the exclusive jurisdiction of the courts in Kottayam/Ernakulam, Kerala.
Last Updated: December 2, 2025