Privacy Policy

1. Who We Are

Aastha Nutri Foods (“we”, “us”, “our”) operates this website and the online store on it. We are based in Gujarat, India, and sell stone-ground and sprouted flours directly to customers across India.

For the purposes of applicable data-protection law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), we are the data fiduciary for the personal data described in this policy.

2. Information We Collect

Information you give us

• Order details — your name, billing and shipping address, phone number and email address when you place an order.
• Account details — your name, email and password if you create an account.
• Communications — anything you send us through the contact form, email, phone or WhatsApp.
• Reviews and newsletter sign-ups — your name, email and the content of any product review you choose to leave.

Information collected automatically

• Usage data — pages visited, products viewed, time on site and referring pages.
• Device data — IP address, browser type, operating system and screen size.
• Cookies — small files described in the Cookies section below.

We do not knowingly collect any sensitive personal data (such as health, financial or biometric information) beyond what is needed to process your payment through our payment partners.

3. How We Use Your Information

• To process and deliver your orders, send order confirmations and delivery updates.
• To manage your account, returns, refunds and customer-support requests.
• To send you our newsletter and offers — only if you opt in, and you can unsubscribe at any time using the link in every email.
• To improve our website, products and service based on how the store is used.
• To prevent fraud and comply with legal obligations such as tax and accounting rules.

4. Payments

All online payments are processed by secure third-party payment gateways (such as UPI providers, card networks and net-banking services). We never see or store your full card number, CVV, UPI PIN or banking passwords. Payment data is handled entirely by the payment gateway under their own privacy policy and PCI-DSS compliance.

For Cash on Delivery orders, we only record the order amount and delivery details.

5. Cookies

Cookies are small text files stored on your device. We use them for:

• Essential cookies — keeping your cart, login session and checkout working. The store cannot function without these.
• Preference cookies — remembering choices such as a dismissed announcement bar.
• Analytics cookies — understanding, in aggregate, how visitors use the site so we can improve it.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent the cart and checkout from working.

6. Who We Share Data With

We never sell your personal data. We share it only with service providers who need it to serve you:

• Delivery partners — your name, address and phone number, so they can deliver your order.
• Payment gateways — to process your payment securely.
• Hosting and IT providers — who store the website and its database.
• Email service providers — to send order updates and, if you opted in, newsletters.
• Authorities — if required by law, court order or to protect our legal rights.

Each provider is bound to use your data only for the service they provide to us.

7. How Long We Keep Data

• Order and invoice data — retained for the period required by Indian tax and accounting law.
• Account data — kept until you delete your account or ask us to remove it.
• Newsletter data — kept until you unsubscribe.
• Support conversations — kept for up to 24 months so we can help with follow-up queries.

8. Your Rights

Under the DPDP Act and other applicable law, you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Erasure — ask us to delete your data, where we are not legally required to keep it.
• Withdraw consent — opt out of marketing at any time.
• Grievance redressal — raise a complaint with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us using the details in the Contact Us section. We aim to respond within 30 days.

9. How We Protect Data

We use HTTPS encryption across the entire site, restrict access to personal data to staff who need it, and rely on reputable hosting with regular security updates. No method of transmission over the internet is 100% secure, but we take commercially reasonable measures to protect your information.

10. Children's Privacy

Our store is intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time — for example, when we add new services or the law changes. The “Last updated” date at the top of this page will always reflect the current version. Significant changes will be announced on the website.

12. Contact Us

For any privacy questions, requests or complaints, reach our grievance officer at: