Data Deletion Request

You have the right to ask Dronagiri Herbal to delete the personal data we hold about you. This page explains what we hold, how to ask us to delete it, and how long the deletion takes.

What personal data we hold

When you interact with Dronagiri Herbal, we may hold:

• Your name (if you placed an order or created an optional account).
• Your mobile number (used for order updates and OTP-based login).
• Your email address (if you provided one — always optional).
• Your shipping addresses (used to fulfil past orders).
• Your order history — what you bought, when, and for how much.
• WhatsApp message logs with our official business number, if you have messaged us.
• Technical logs — IP address, browser version, pages visited — kept for security and abuse prevention.

We do not hold payment card numbers, UPI IDs, or net-banking credentials. Those are processed entirely by Razorpay; we only see a transaction ID and the amount.

How to request deletion

Send a deletion request to store@dronagiriherbal.in from the email address linked to your account, or message our official WhatsApp number +91 94290 29840 from the phone number linked to your account. Please include:

1. The phone number associated with your orders.
2. The email address, if you have one on file.
3. A clear statement that you are requesting deletion of your personal data under the Digital Personal Data Protection Act, 2023.

Identifying yourself from the contact details on file is what keeps a stranger from deleting your data on your behalf. If you cannot reach us from the linked phone or email, please tell us in the message so we can verify another way.

What we delete

Within 30 days of a verified request, we permanently delete:

• Your customer profile (name, contact details, marketing preferences).
• All saved shipping addresses.
• Your account login, if you created one.
• Your WhatsApp opt-in record, so we stop sending you messages.

What we keep, and why

A small set of records is retained even after a deletion request, because the law requires it or because we cannot operate without it:

• Past orders and invoices, kept for eight years as required by Indian tax law (GST, Income Tax Act). Your name and address remain on those invoices because the invoice is a legal document we cannot rewrite.
• Payment transaction references kept for the same eight-year window for audit and refund verification.
• Security logs (IP addresses, login attempts) kept for one year for fraud and abuse investigation.

We never share any of this with a marketer or sell it to a third party.

After deletion

Once your data is deleted, you can no longer:

• Place a new order using the same profile (you can of course place a new order with new details).
• Log in to any account that referenced the deleted profile.
• Receive any future messages from us — promotional or transactional.

Re-opening an account or making a fresh order after deletion creates a new profile from scratch; the deleted records are not restored.

Questions

If you are not sure whether to ask for deletion, or you want a copy of your data first (also your right under the DPDP Act), email us at the same address. We will reply within seven working days.

— Dronagiri Herbal Ahmedabad, Gujarat UDYAM-GJ-01-0019327 · KVIC: S0/GJ/KVIC/22/2022 · WHO GMP Certified