Privacy Policy

Dronagiri Herbal ("we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and your rights — in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).

Information We Collect

You give us directly:

• Name, phone number, email address (email is optional)
• Delivery address
• Order history

Collected automatically:

• Device and browser information
• Pages visited and actions taken on the Website (analytics)
• A session identifier stored in a cookie

We do NOT collect or store:

• Your full payment card details — these are handled directly by our payment partner Razorpay, who is PCI-DSS compliant. We never see or store your card number.

How We Use Your Information

• To process and deliver your orders
• To send you order updates (confirmation, shipping, delivery) via WhatsApp, SMS, or email
• To provide customer support
• To improve our products and Website
• To send occasional offers and product updates — only if you have given consent, and you can opt out anytime
• To comply with legal and tax obligations

Sharing Your Information

We share your information only with:

• Delivery partners — to ship your order (name, address, phone)
• Razorpay — to process payments
• WhatsApp/SMS/email providers — to send you order updates
• Government authorities — only where legally required

We do not sell your personal data to anyone.

Data Security

• Phone numbers used for analytics are stored in hashed (anonymised) form.
• Passwords, if you set one, are stored using strong one-way encryption (bcrypt).
• All data is transmitted over secure HTTPS connections.
• Access to personal data is restricted to authorised personnel only.

Cookies

We use a small number of cookies:

• A session cookie to keep your cart and login working
• Analytics cookies (Google Analytics) to understand how the Website is used

You can disable cookies in your browser, though some features may not work.

Your Rights

Under the DPDP Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for marketing communications

To exercise any of these rights, contact us at store@dronagiriherbal.in.

Data Retention

We retain your order data for as long as required for tax, accounting, and legal purposes (typically 8 years, in line with GST record-keeping requirements). Marketing consent data is retained until you withdraw consent.

Children's Privacy

Our Website is not directed at children under 18. We do not knowingly collect data from children.

Grievance Officer

In accordance with the IT Act and DPDP Act, our Grievance Officer is:

• Name: Sarita Modha
• Email: store@dronagiriherbal.in
• Phone: +91 94290 29840
• Response time: We aim to respond within 30 days

Changes to This Policy

We may update this policy. The current version is always on this Website.