This Privacy Policy describes how Berrieswala ("Berrieswala", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit berrieswala.in (the "Site"), place an order, contact us, or otherwise interact with us.

By using the Site, you agree to the practices described here. If you do not agree, please do not use the Site.

1. Who we are

Berrieswala is a [sole proprietorship / private limited company] operating from Unit 4, Kotla Fruit Market, Shimla, Himachal Pradesh 171001, India. We sell fresh and dried berries and berry-based snacks directly to customers across India [and internationally].

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Berrieswala is the Data Fiduciary for the personal data described below.

2. Information we collect

2.1 Information you give us

When you shop with us or interact with the Site, you may provide:

• Identity and contact details — name, email address, phone number
• Delivery details — shipping address, billing address, landmark, PIN code, delivery instructions
• Order information — items purchased, quantity, order value, order history, gift messages
• Payment information — payment method type and transaction confirmation. We do not collect or store your full card number, CVV, UPI PIN, or net banking credentials. These are handled directly by our payment gateway.
• Account information — if you create an account, your login credentials and saved preferences
• Communications — messages you send us by email, WhatsApp, Instagram DM, phone, or through our contact form, including any information you choose to share about allergies, dietary preferences, or delivery issues
• Marketing preferences — your consent to receive emails, SMS, or WhatsApp updates
• Reviews and user content — product reviews, ratings, photos, and testimonials you submit

2.2 Information we collect automatically

When you visit the Site, we automatically collect certain information about your device, which we refer to as Device Information:

• Browser type and version, operating system, device type, and screen resolution
• IP address and approximate location derived from it (typically city or region level)
• Referring website or campaign that brought you to the Site
• Pages viewed, products browsed, time spent on pages, and interaction data such as clicks and scrolls
• Local time zone and language settings

We collect Device Information using cookies, log files, web beacons, pixels, and similar technologies. See Section 7 for details.

2.3 Information from third parties

We may receive information from:

• Payment gateways (transaction status, fraud risk signals)
• Shipping and logistics partners (delivery status, address corrections, failed delivery reasons)
• Social media platforms, if you interact with our pages or click our ads
• Marketing and analytics providers

3. How we use your information

We use your personal data to:

Legal basis

Where the DPDP Act applies, we process your personal data on the basis of your consent, or for certain legitimate uses permitted by law — for example, where you have voluntarily provided data for a specified purpose (such as placing an order), or where processing is required to comply with a legal obligation.

Where the GDPR applies (visitors from the EEA and UK), we rely on: performance of a contract (order fulfilment), legitimate interests (fraud prevention, improving our service), consent (marketing and non-essential cookies), and legal obligation.

4. When we share your information

We do not sell your personal data. We share it only as described below:

• Shopify — our e-commerce platform, which hosts the Site and processes order data on our behalf. You can read Shopify's privacy policy at https://www.shopify.com/legal/privacy
• Payment gateways — [Razorpay / Shopify Payments / PayU / Cashfree] to process transactions securely
• Logistics and delivery partners — [Delhivery / Shiprocket / Blue Dart / India Post / local cold-chain couriers], who receive your name, address, and phone number to deliver your order
• Communication tools — email and messaging providers such as [Klaviyo / Mailchimp / Shopify Email / WhatsApp Business API provider]
• Analytics providers — [Google Analytics / Shopify Analytics / Meta Pixel] to understand how the Site is used
• Advertising platforms — [Meta, Google Ads] for campaign delivery and measurement
• Professional advisors — accountants, auditors, and lawyers, where necessary
• Authorities — where we are required to do so by law, a court order, or a lawful government request, or to protect our rights, safety, or property

Our service providers are permitted to use your data only to perform services for us, under contractual confidentiality and security obligations.

5. Data retention

We keep your personal data only as long as necessary:

• Order and transaction records — retained for [8] years to meet Indian tax, GST, and accounting requirements
• Account information — retained while your account is active, and for [12] months after you request deletion or the account becomes inactive
• Marketing data — retained until you withdraw consent or unsubscribe, plus a short suppression period so we don't accidentally contact you again
• Support correspondence — retained for [24] months
• Analytics data — retained in line with the provider's default retention settings

When data is no longer needed, we delete it or irreversibly anonymise it.

6. Your rights

Under the DPDP Act, you have the right to:

• Access — request a summary of the personal data we hold about you and how we process it
• Correction and completion — ask us to correct inaccurate or misleading data, or complete incomplete data
• Erasure — ask us to delete your personal data, unless we are required to retain it by law
• Withdraw consent — withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing already carried out.
• Grievance redressal — raise a complaint with us through our Grievance Officer (Section 12)
• Nomination — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity

If you are in the EEA or UK, you additionally have rights to data portability, restriction of processing, objection to processing, and to lodge a complaint with your local supervisory authority.

To exercise any right, email us at hello@berrieswala.in. We will respond within [30] days. We may ask you to verify your identity before acting on a request.

Opting out of marketing

• Email — click "unsubscribe" at the bottom of any marketing email
• SMS / WhatsApp — reply STOP, or email us
• You will still receive transactional messages about orders you have placed.

7. Cookies and tracking

Cookies are small text files placed on your device. We use:

• Strictly necessary cookies — keep you logged in, remember your cart, and secure checkout. The Site cannot function without these.
• Analytics cookies — help us understand traffic and user behaviour in aggregate
• Marketing cookies — used by advertising platforms to show you relevant ads and measure conversions

You can control cookies through your browser settings — most browsers let you block or delete cookies. Blocking strictly necessary cookies may break checkout and cart functionality.

8. Data security

We use reasonable technical and organisational safeguards to protect your data, including SSL/TLS encryption across the Site, PCI-DSS-compliant payment processing handled by our gateway partners, access controls limiting staff access to order data, and secure hosting through Shopify.

No method of transmission or storage over the internet is entirely secure. While we work hard to protect your data, we cannot guarantee absolute security. If a personal data breach occurs, we will notify you and the Data Protection Board of India as required under the DPDP Act.

9. Children's privacy

The Site is intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. In line with the DPDP Act, we do not process children's data for tracking, behavioural monitoring, or targeted advertising. If you believe a child has provided us personal data, contact us and we will delete it.

10. International transfers

Our service providers — including Shopify, our email platform, and our analytics providers — may store or process data on servers located outside India, including in the United States and the European Union. Where data is transferred internationally, we take steps to ensure it receives an appropriate level of protection through contractual safeguards such as Standard Contractual Clauses, and we transfer data only to countries not restricted by the Government of India under the DPDP Act.

11. Third-party links

The Site may link to third-party websites, including our Instagram page and payment partners. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing them any personal data.

12. Contact and Grievance Officer

For any question, request, or complaint about this Privacy Policy or how we handle your data, contact:

Grievance Officer: [Full Name] Berrieswala Unit 4, Kotla Fruit Market, Shimla, Himachal Pradesh 171001, India Email: hello@berrieswala.in Phone: +91 98765 43210 (Mon–Sat, 10am – 6pm IST)

We aim to acknowledge complaints within [7] business days and resolve them within [30] days.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India under the DPDP Act, 2023.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, or legal requirements. We will post the revised version on this page and update the "Last updated" date. Material changes will be communicated by email or a prominent notice on the Site. Please review this page periodically.

Berrieswala — fresh from the Himalayan orchards.