Privacy Policy
Effective Date: October 2026
This Privacy Policy explains how Ghewal Tea Industries ("we", "us", or "our") collects, uses, protects, and discloses your personal information when you use our website and services. We are strictly compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. By using our Services, you expressly consent to the data practices described in this policy.
1. Information We Collect
We collect information you provide directly to us (such as name, shipping address, email address, and payment information) when you make a purchase, create an account, or contact us. We also automatically collect certain technical data (such as IP address, browser type, and cookies) to optimize your browsing experience. Under no circumstances do we collect sensitive personal data such as biometric information or passwords in plain text. All payment processing is handled by compliant third-party gateways; we do not store your credit card numbers on our servers.
2. Use of Your Data
We use the collected information solely for legitimate business purposes, including: processing and fulfilling your orders, communicating with you regarding your purchases or inquiries, preventing fraudulent transactions, and improving our website performance. We will not use your personal data for any purpose incompatible with these stated purposes without obtaining your explicit, informed consent as mandated by the DPDP Act.
3. Data Sharing & Third-Party Disclosure
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties for marketing purposes. We may share your data with trusted third-party service providers (such as logistics partners and payment processors) strictly for the purpose of fulfilling your order. These third parties are legally bound by strict data processing agreements to keep your information confidential and secure. We may also release information when its release is required to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.
4. Data Security & Retention
We implement state-of-the-art, industry-standard security measures, including end-to-end encryption and secure socket layer (SSL) technology, to maintain the safety of your personal information. Despite our stringent measures, no method of transmission over the internet is 100% secure. You acknowledge that you provide your personal data at your own risk. We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by Indian law. Once the retention period expires, your data is permanently and securely deleted.
5. User Rights & Grievance Redressal
Under the DPDP Act, you have the right to access, correct, or erase your personal data held by us. You also have the right to withdraw your consent at any time. To exercise these rights, please contact our Data Protection Officer / Grievance Officer. In accordance with the IT Act, 2000, any discrepancies and grievances with respect to processing of information shall be addressed to our Grievance Officer via email at legal@ghewaltea.com. We are committed to resolving any complaints within the statutory timeframes.