Privacy Policy

We collect several categories of information to provide a seamless experience.

A. Information You Provide to Us

• Identity Information: Full name, title, and date of birth (collected to ensure compliance with our 18+ age restriction).
• Contact Information: Primary and secondary email addresses, mobile phone number, and WhatsApp contact details.
• Delivery & Billing Information: Detailed shipping addresses, landmarks, and billing addresses required for order fulfillment and tax compliance.
• Preference Information: Your interests in specific spice varieties, newsletter subscriptions, and feedback provided through surveys or reviews.

B. Technical and Automated Information

As you navigate the Site, we use automated technologies to collect:

• Device & Connection Data: Your IP address, browser type and version, browser plug-in types, operating system, and hardware model.
• Interaction Data: Clickstream patterns, pages viewed, time spent on pages, page response times, and download errors.
• Location Data: General location derived from your IP address to provide localized shipping estimates and currency formatting.

Under the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023, we process your data based on the following grounds:

• Contractual Necessity: To fulfill your orders, process payments via our authorized payment processors, and manage deliveries through our third-party logistics partners.
• Consent: For marketing communications sent via our email marketing platforms or messaging services, which you may withdraw at any time.
• Legitimate Interest: To monitor website performance via analytics tools, prevent fraudulent transactions, and improve our product catalog.
• Legal Obligation: For maintaining financial records, tax filings (GST), and complying with Food Safety and Standards Authority of India (FSSAI) requirements.

We do not sell, trade, or rent your Personal Data to third parties. We only share data with service providers who are contractually bound to protect your information:

• Payment Infrastructure: We use industry-standard, PCI-DSS compliant payment gateways to handle all financial data. Daastaan does not store your credit card, CVV, or net banking credentials on its own servers.
• Logistics & Fulfillment: We share necessary contact and delivery details with our shipping and courier partners to ensure the physical delivery of your orders.
• Communication Platforms: We utilize third-party marketing automation tools and messaging APIs to send newsletters, order tracking updates, and promotional content.
• Cloud Infrastructure: Your data is stored securely using third-party cloud database providers that utilize enterprise-grade security, encryption at rest, and robust access controls.

Security Measures

We use Secure Socket Layer (SSL) encryption for all data transmissions. Our database architecture is protected by modern security protocols, including row-level security and encryption. Access to personal data is restricted to authorized personnel on a "need-to-know" basis.

International Transfers

While Daastaan is based in Delhi, some of our service providers may store or process data on servers located outside of India. By using the Site, you consent to this cross-border transfer, provided the destination country ensures an adequate level of data protection as per applicable Indian laws.

We use cookies and similar tracking technologies to improve your browsing experience:

• Essential Cookies: Required for the shopping cart and user session features.
• Performance & Analytics Cookies: Used by our analytics partners to help us understand how visitors interact with the Site.
• Marketing & Advertising Cookies: Used by social media and advertising partners to show you relevant advertisements based on your browsing history.

You can manage your cookie preferences through your browser settings, though this may impact your ability to use certain features of the Site.

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction: You may update or correct any inaccurate information through your account dashboard or by contacting us.
• Right to Erasure: You may request that we delete your data. We will comply unless we are legally required to retain certain records (e.g., for tax or audit purposes).
• Right to Withdraw Consent: You can opt-out of marketing at any time.

• Email: Click the "Unsubscribe" link found at the bottom of any marketing email received from us.
• Messaging Services: For platforms like WhatsApp, you can opt-out by replying with the word "STOP" to our messages or by contacting our support team.

Note: Transactional messages related to your active orders (confirmation, shipping, delivery) cannot be disabled as they are essential for service delivery.

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Our services are strictly directed to individuals aged 18 and over. We do not knowingly collect information from minors. If we discover a minor has shared data with us, we will delete it within a reasonable timeframe (typically 48 hours) of discovery.

If you have any questions, concerns, or complaints about our privacy practices, please reach out to our designated Grievance Officer.