Privacy Policy

Lovedeep Fresh Foods, [business legal name (proprietorship/partnership/company) to be added], registered office at [full business address to be added], is the “Data Fiduciary” responsible for the personal data described in this policy.

We only collect what we need to take and deliver your order, and to run an optional account:

• Guest checkout (no account needed): name, phone number, delivery address, city, state, PIN code, and — only if you provide it — business/shop name, GSTIN, and order notes.
• Optional customer account:your email address (used only to send a one-time sign-in link), and a display name you choose. If you set up an authenticator app for extra security, we store that it's enabled — never the codes it generates.
• Order history: what you ordered, when, and the amount — kept as a business and tax record even if you later delete your account.
• “Notify me” requests: the email you give us to alert you when an out-of-stock pack size is back.
• Technical data: standard web server logs (IP address, browser type, pages visited) kept by our hosting provider for security and reliability, not for tracking you across other sites. Your language and theme (light/dark) preference, and your cart contents, are stored only in your own browser (localStorage) — never sent to us — until you check out.

We do not currently use any third-party advertising or analytics trackers (e.g. Google Analytics, Meta Pixel) on this Site. If that changes, this policy will be updated first.

• To take, confirm, and deliver your order, and handle any refund or complaint about it (contract).
• To let you sign in to an account, see your order history, and manage account security (consent, given when you create an account — entirely optional).
• To alert you when a product is back in stock, if you asked to be notified (consent).
• To alert us internally when stock runs low, so we can restock (our legitimate business interest).
• To keep records required under Indian tax and consumer-protection law (legal obligation).

We don't sell your data. It's shared only with the service providers that run the Site on our behalf, strictly to provide that service:

• Supabase — hosts our database and handles account sign-in. Supabase acts as our data processor.
• Netlify — hosts the Site itself and its server logs.
• Payment processing:real online payments are not live yet — the Site is currently in test mode and no payment details are collected or processed by us or any payment gateway. This policy will be updated with our payment processor's name before real payments go live.
• We may disclose data if required by Indian law, court order, or a valid government request.

Data is stored with our infrastructure providers (Supabase, Netlify); depending on their regional configuration, this may involve processing outside India. Where personal data is transferred outside India, we rely on our processors' standard contractual and security safeguards, consistent with the DPDP Act's requirements for cross-border transfer.

Order records are kept as long as required for accounting, tax, and consumer-protection purposes under Indian law. Account data is kept until you delete your account; guest checkout data tied to a specific order is kept for the same record-keeping period as the order itself. “Notify me” requests are deleted once fulfilled or after a reasonable period of inactivity.

Data in transit to and from the Site is encrypted (HTTPS/TLS). Access to order and customer data is restricted to what each part of the Site needs — for example, your browser never has direct database access; all reads and writes go through access-controlled server logic. The one administrator account is protected by a one-time emailed sign-in link, with an optional authenticator-app second factor. No method of transmission or storage is 100% secure, but we take reasonable, industry-standard measures.

Under the DPDP Act, as a Data Principal you have the right to:

• Get a summary of the personal data we hold about you and how it's been processed;
• Ask us to correct, complete, or update it;
• Ask us to erase it, once it's no longer needed for the purpose it was collected for or for a legal obligation (e.g. tax records);
• Withdraw consent at any time (for anything based on consent, like account creation or notify-me alerts) — this doesn't affect orders already placed;
• Nominate another individual to exercise these rights on your behalf if you become unable to;
• Register a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these, contact us using the details in Section 10.

This Site is intended for adults placing household or bulk food orders. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we'll delete it.

For any question about this policy, or to exercise your rights above, contact our Grievance Officer:

• Name: [Grievance Officer name to be added]
• Email: [Grievance Officer email to be added]
• Phone: +91 12345 67890
• Address: [registered business address to be added]

We'll acknowledge your complaint within 48 hours and aim to resolve it within one month, as required under the Consumer Protection (E-Commerce) Rules, 2020.

We may update this policy as the Site changes — for example, once real online payments go live. We'll update the “Last updated” date above when we do. Continued use of the Site after a change means you accept the updated policy.

This policy is governed by the laws of India.