Privacy Policy

Effective Date: 15 April 2026 · Aaranya Natural Products Pvt Ltd

1. Information We Collect

Information you provide directly:

• Mobile phone number (used for OTP login — required)
• Name and email address (optional, for profile and invoices)
• Delivery addresses (required to place orders)
• Product reviews and ratings you submit

Information collected automatically:

• Order history and cart activity
• Device type and operating system (for app compatibility)
• IP address and approximate location (for delivery pin code matching)
• Session and usage data (pages visited, features used)
• Push notification tokens (if you grant permission)

2. How We Use Your Information

We use your data for the following purposes:

• Processing and fulfilling your orders
• Sending OTP for authentication
• Sending order status SMS and WhatsApp notifications (with your consent)
• Generating GST invoices
• Calculating and awarding loyalty points
• Improving platform features and detecting fraud
• Customer support and dispute resolution
• Sending promotional messages only if you have opted in

We do not use your personal data for automated profiling or decision-making that significantly affects you.

3. Data Sharing and Disclosure

We share your data only as necessary to provide the service:

• Store Owners (Sellers): your name, phone, and delivery address for order fulfilment
• Shiprocket: your delivery address and order details for courier dispatch
• Razorpay: your payment data for secure transaction processing
• MSG91 / Interakt: your phone number for OTP and order notifications
• Firebase: your device token for push notifications

We do not sell your personal data to advertisers, data brokers, or any third party for commercial purposes.

We may disclose data if required by law, court order, or government authority in India.

4. Data Storage and Security

Your data is stored on secured servers in India. We use industry-standard measures including TLS encryption for data in transit, hashed passwords (bcrypt), and role-based access controls.

Payment card details are never stored on our servers. All payment processing is handled by Razorpay, which is PCI-DSS compliant.

We retain your account data for as long as your account is active. Order data is retained for 7 years as required by Indian GST laws.

5. Your Rights (DPDPA 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Erase your personal data (subject to legal retention requirements)
• Nominate another person to exercise rights on your behalf
• Withdraw consent for marketing communications at any time
• File a complaint with the Data Protection Board of India

To exercise any of these rights, email us at privacy@aaranya.in. We will respond within 30 days.

6. Cookies and Tracking

We use secure HTTP-only cookies for session management (keeping you logged in). We do not use third-party advertising cookies.

We use anonymised analytics to understand platform usage. This data cannot be used to identify individual users.

7. Push Notifications

If you grant permission, we send push notifications for order updates, new products from stores you follow, and promotional offers. You can disable these at any time in your device settings or in the Notification Preferences section of your profile.

8. Children's Privacy

Aaranya Naturals is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us and we will delete the account.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via your registered mobile number or a prominent notice on the platform. Continued use after notification constitutes acceptance.

10. Contact & Grievance Officer

For privacy concerns, data requests, or grievances: