Privacy Policy

Last Updated: 16 April 2026

1. Introduction

This Privacy Policy (“Policy”) describes how Nector Foods Private Limited (“Company”, “we”, “us”, or “our”), the owner and operator of the brand “Kasmirana” and the website www.kasmirana.com (“Website”), collects, uses, processes, stores, discloses, and protects the personal information of its users (“you”, “your”, or “User”).

This Policy is published in compliance with:

• The Information Technology Act, 2000;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);
• The Digital Personal Data Protection Act, 2023 (“DPDP Act”);
• The Consumer Protection Act, 2019 and rules made thereunder.

By accessing or using the Website, you confirm that you have read, understood, and agreed to be bound by this Privacy Policy. If you do not agree, please do not use the Website.

2. Company Information

3. Information We Collect

3.1 Personal Information You Provide

When you use the Website, register an account, place an order, contact customer service, or subscribe to our newsletter, we may collect:

• Identity data: full name, gender, date of birth (if voluntarily provided)
• Contact data: email address, phone number, shipping and billing addresses
• Account data: username, password (stored in encrypted form), profile preferences
• Transaction data: details of purchases, payment method (last 4 digits only – full card data is NEVER stored on our servers), order history, refund records
• Communication data: messages, queries, complaints, reviews, and feedback you submit
• Marketing preferences: your subscription status, opt-in choices for promotional content

3.2 Information Collected Automatically

When you access the Website, our systems automatically collect:

• Technical data: IP address, browser type and version, time zone, operating system, device identifiers
• Usage data: pages visited, time spent on pages, products viewed, click patterns, referrer URLs
• Location data: approximate geographic location (city / state level) inferred from IP address
• Cookies and similar technologies: as detailed in our Cookie section below

3.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data as defined under the SPDI Rules (e.g., financial information beyond payment processing, biometric data, sexual orientation, medical records). Please do not submit such information to us.

3.4 Information from Third Parties

• Payment gateways (Razorpay, PayU, Cashfree, etc.) confirming successful transactions
• Shipping partners (Delhivery, BlueDart, India Post, etc.) regarding delivery status
• Social login providers (Google, Facebook), if you choose to log in using these services – limited to your name, email, and profile photo

4. How We Use Your Information

We do not make automated decisions that produce legal or significantly similar effects on you without human review.

5. Sharing & Disclosure of Information

We do not sell, rent, or trade your personal information. We may disclose your information only to the following categories of recipients:

5.1 Service Providers

• Payment processors for transaction processing
• Shipping and logistics partners for order delivery
• Email service providers for transactional and marketing emails
• Cloud hosting providers for Website infrastructure
• Analytics providers (Google Analytics, etc.) for usage insights — anonymized where possible

All service providers are contractually bound to use your data only for specified purposes and to maintain appropriate security safeguards.

5.2 Legal & Regulatory Authorities

We may disclose information if required by law, court order, or governmental request, including for tax, audit, or law enforcement purposes.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred to the successor entity, subject to obligations consistent with this Policy.

5.4 With Your Consent

For any disclosure not described above, we will obtain your explicit consent.

6. Cookies & Tracking Technologies

We use cookies and similar technologies (web beacons, pixels, local storage) to:

• Maintain user sessions (essential cookies)
• Remember your preferences (functional cookies)
• Analyze Website performance (analytics cookies)
• Deliver relevant marketing content (advertising cookies, where opted in)

You may disable cookies through your browser settings; however, certain Website features may not function correctly if cookies are disabled. We honor “Do Not Track” signals where technically feasible.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal, accounting, tax, and regulatory obligations, resolve disputes and enforce our agreements.

After the retention period, your information is securely deleted or irreversibly anonymized.

8. Your Rights Under Indian Law

Subject to applicable law, you have the right to:

1. Access your personal information held by us
2. Correct inaccurate or incomplete data
3. Erase your data (“right to be forgotten”), subject to legal retention obligations
4. Withdraw consent for processing where consent is the legal basis
5. Restrict or object to certain processing activities
6. Data portability — receive your data in a structured, machine-readable format
7. Lodge a complaint with the Data Protection Board of India (post-DPDP Act enforcement) or appropriate authority

To exercise any of these rights, please email [email protected] with the subject line “Data Rights Request”. We will respond within 30 days of receiving a verifiable request.

9. Data Security

We implement reasonable security practices and procedures in accordance with the SPDI Rules and DPDP Act, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of passwords and payment-related data
• Access controls: only authorized personnel can access personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• Secure data centers with physical and network security measures
• Incident response plan for data breaches

Despite these measures, no method of electronic transmission or storage is 100% secure. In the event of a confirmed data breach involving your information, we will notify you and the appropriate regulatory authority as required by law.

10. Children’s Privacy

The Website is not intended for and not directed at individuals under the age of 18 years. We do not knowingly collect personal information from minors. If we discover that we have collected information from a person under 18 without verifiable parental consent, we will delete it promptly. Parents who believe their child has provided us with personal data should contact us at [email protected].

11. Third-Party Links

The Website may contain links to third-party websites, plugins, or services. We are not responsible for the privacy practices of these third parties. We recommend reviewing the privacy policies of any third-party sites you visit.

12. International Data Transfers

Your data is primarily processed and stored within India. If we transfer data outside India (e.g., to cloud service providers), we ensure such transfers comply with the DPDP Act and SPDI Rules through contractual safeguards or other lawful mechanisms.

13. Grievance Redressal

In accordance with the Information Technology Act, 2000 and rules thereunder, the contact details of the Grievance Officer are:

We will acknowledge your grievance within 48 hours and endeavor to resolve it within 15 days of receipt.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or technology. The “Last Updated” date at the top of this Policy will indicate the most recent revision. Material changes will be communicated to registered users via email or a prominent notice on the Website. Continued use of the Website after changes constitutes acceptance of the updated Policy.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please contact:

Nector Foods Private Limited
Brand: Kasmirana
Email: [email protected]
Website: https://kasmirana.com

By using the Website, you acknowledge that you have read this Privacy Policy and consent to the practices described herein.