Privacy Policy — Shree Vyankatesh Food Services

Thank you for visiting Shree Vyankatesh Food Services. Your privacy and the security of your personal information are important to us. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, the choices you have, and how we protect it when you visit or place an order on our website or use our services.

1. Who we are

Shree Vyankatesh Food Services offers premix food products such as chakali, anarase, puran poli, dry coconut, idli, dosa, uttapa, karanji, thalipith and related services (the "Services").
If you have questions about this policy or our data practices, contact us (see Section 12 — Contact).

2. Information we collect

We collect information you give us directly and information automatically when you use our website or Services.

A. Information you provide

• Identity & contact data: name, email address, phone number.
• Shipping & billing information: delivery address, contact for delivery.
• Payment information: payment instrument details (card or UPI) — note: full card numbers are processed and stored only by our payment processors; we may retain limited transaction identifiers.
• Order information & preferences: products purchased, order history, dietary preferences you share.
• Customer support communications: messages, feedback, complaints.
• Account information: username, password (hashed).

B. Information we collect automatically

• Device & usage data: IP address, browser type and version, operating system, pages visited, referral/exit pages, date/time stamps, and analytics data.
• Cookies & similar technologies: cookies, web beacons, local storage to support logins, cart, personalization, analytics and advertising (see Section 6 — Cookies).

C. Information from third parties

Delivery partners, payment processors, marketing platforms and publicly-available sources, as needed to provide Services (for example to verify an address or process a payment).

3. How we use your information

We use personal data to:

• Provide & fulfill orders: process purchases, deliver products, send order confirmations and receipts.
• Manage your account & support: respond to inquiries, troubleshoot, and provide customer service.
• Payments & fraud prevention: process payments, detect and prevent fraud or suspicious activity.
• Communications & marketing: send order updates, transactional messages, and (with consent where required) promotional emails, SMS or offers. You can opt out of marketing at any time (see Section 8 — Your choices).
• Improve our services: analyze usage, perform research, develop new products, and personalize your experience.
• Legal & safety: meet legal, tax, or accounting obligations, and protect rights, property, or safety.

Legal bases for processing (where applicable): performance of a contract (orders), consent (marketing where required), legitimate interests (fraud prevention, site improvements), and legal obligations.

4. Sharing & disclosure

We may share personal data with:

• Service providers & processors: payment gateways, delivery companies, cloud and hosting providers, analytics and email/SMS providers — only to perform services on our behalf.
• Business partners: when you use partner services integrated on our site (we'll make this clear at the point of collection).
• Legal & safety reasons: to comply with laws, respond to lawful requests, protect our or others' rights, property, safety or to enforce our Terms of Use.
• Business transfers: in connection with a merger, acquisition, restructuring, sale of assets or bankruptcy — personal data may be transferred as part of that transaction.
• Aggregated & anonymized data: for analytics and reporting; such data cannot reasonably be used to identify you.

We require third parties to protect personal data consistent with this policy and applicable law.

5. International transfers

Our servers and service providers may be located outside your country. When we transfer personal data internationally we protect it using standard contractual safeguards, data transfer agreements, or other legally recognized mechanisms. By using our Services you consent to such transfers where required.

6. Cookies & similar technologies

We use cookies, local storage and similar tools to operate the website, remember your preferences, keep you logged in, support the shopping cart, analyze site performance and deliver relevant marketing. You may control cookie settings via your browser and opt-out tools for targeted advertising. Note: disabling certain cookies may affect site functionality (for instance, the shopping cart or automatic sign-in).

7. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Typical retention examples:

• Order & transaction records: retained for a period required to meet tax, accounting or legal obligations (for many jurisdictions this may be several years).
• Account information: until you delete your account, plus a limited period afterward to prevent fraud and enforce our policies.
• Marketing preferences: until you opt out.

If you request deletion, we will delete your data unless we must retain it for legal, tax, or legitimate business reasons.

8. Your choices & rights

Depending on your location and local laws, you may have rights including:

• Access: request a copy of personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: request deletion of your personal data (subject to legal exceptions).
• Portability: request a machine-readable copy of data you provided.
• Restriction & objection: restrict or object to certain processing (such as direct marketing or profiling).
• Withdraw consent: where processing is based on consent, you may withdraw it.
• Opt-out of marketing: unsubscribe from our marketing emails/SMS using the link or instructions in the message, or by contacting us.

To exercise rights, email privacy@vyankateshfoods.com with the subject line "Privacy Rights Request" and include: your name, email/phone used with us, and the request. We may require additional information to verify your identity. We aim to respond within 30 days where required by law; complex requests may require more time.

If you are an EU/UK resident, you also have the right to lodge a complaint with your local supervisory authority.

9. Security

We implement administrative, technical and physical measures to protect personal data (for example access controls, encryption in transit, and monitoring). While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

In case of a data breach that creates a real risk to your rights and freedoms, we will follow applicable notification rules and inform affected individuals and regulators when required by law.

10. Children's privacy

Our Services are not intended for children. We do not knowingly collect personal data from children under the age of 13. If you believe we have collected such information, please contact us and we will take steps to delete it. For residents in jurisdictions with a higher minimum age (for example under some versions of GDPR), please note parental consent may be required; if necessary contact us.

11. Third-party links & services

Our website may contain links to other sites or services (for example social media, payment providers). This policy does not apply to third-party sites. We encourage you to review privacy notices of those sites before providing personal data.

12. Contact us

If you have questions, want to exercise your rights, or lodge a complaint, please contact:

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the "Last updated" date above. For material changes, we will provide more prominent notice (for example via email or a notice on our homepage) where required by law.

14. Additional information for residents of specific regions

• European Economic Area / UK: You may have additional rights under the GDPR (e.g., right to restrict processing, right to object). Our legal bases for processing include contract performance, consent, legitimate interests, and compliance with legal obligations. Contact us for details.
• California residents (CCPA/CPRA): If you are a California resident you may have the right to request access, deletion, and to opt out of sale of personal information (we do not "sell" personal information as traditionally defined; however we may share data with third parties for targeted advertising; you may opt out). To submit verifiable requests, contact us at the address above.