DivyaChetana Organics LLP

1. Data Fiduciary

DivyaChetana Organics LLP · LLPIN: ACX-1229 · Address: NO.B-405, PENINSULA, SARJAPUR ATTIBELE ROAD, Anekal, Bangalore, Karnataka, 562125 · DPO: privacy@divyachetana.com

2. Data We Collect

• Identity: Name, address, email, phone
• Financial: Payment info (via Razorpay — we don't store card data)
• Transaction: Order history, invoices
• Technical: IP, browser, device info
• Usage: Browsing behavior, pages visited
• Communication: Inquiries, support tickets

3. Purpose

• Order processing & delivery
• GST-compliant invoice generation
• Customer support
• Marketing (with explicit consent only)
• Website improvement & analytics
• Legal compliance (GST, IT Act)

The company can use your contact details for delivering informational and promotional messages through multiple communication channels like Email, WhatsApp, SMS, RCS, etc. However, the users will have the right to deactivate or unsubscribe from these services at any time.

4. Legal Basis

• Consent (primary, explicit, informed)
• Contract (order fulfillment)
• Legal obligation (tax records)
• Legitimate interest (security, fraud prevention)

5. Consent

• Free, specific, informed, unconditional, unambiguous
• Active checkbox (never pre-ticked)
• Separate consent for different purposes
• Available in EN, HI, KN, BN
• Withdrawable as easily as given

6. Your Rights (Data Principal)

• Right to access your data
• Right to correction
• Right to erasure
• Right to grievance redressal
• Right to nominate

Email: privacy@divyachetana.com

7. Withdrawal of Consent

Via account settings, email, or consent withdrawal form. Processed within 7 business days.

8. Data Retention

• Order data: 8 years (GST/IT Act)
• Marketing: Until consent withdrawn
• Browsing: 12 months
• Support: 24 months after resolution

9. Security

• SSL/TLS encryption
• Razorpay PCI-DSS Level 1
• Role-based access controls
• Regular security audits
• Breach notification procedures

10. Children's Data

No data collected from persons under 18 without verifiable parental consent. Discovered data deleted immediately.

11. Third Parties

• Razorpay (payment processing)
• Shipping partners (delivery)
• Google Analytics (anonymized)
• Government (when required by law)

We do NOT sell your data.

12. Cookies

Essential, analytics (with consent), marketing (with explicit consent). Managed via cookie consent banner.

13. Grievance Officer

14. Data Protection Board

If unresolved within 30 days, file complaint with Data Protection Board of India (DPDP Act, 2023).

15. Changes

Updates posted on this page with email notification to registered users. Continued use = acceptance.