Your data, treated with the same care as our soil.

When you scan the QR code on a genuine bottle and submit the verification form, we store:

• Your name — to greet you in the confirmation message.
• Your 10-digit Indian mobile number — to send you the WhatsApp confirmation and to detect resold or counterfeit bottles linked to the same number.
• The date of purchase you tell us.
• Technical details about your scan — timestamp, approximate location derived from IP, device type — to help us identify counterfeit-scan patterns.

We do not collect Aadhaar, PAN, address, or any government ID. We never ask you to install an app.

After a successful first-time verification, we send one WhatsApp message to the mobile number you submitted, confirming your bottle is genuine and sharing our official WhatsApp number so you can verify the message came from us.

We use Meta's WhatsApp Business Platform Cloud API for delivery. The message is sent from a pre-approved utility template — we cannot send marketing, promotional, or unsolicited follow-up messages on this channel. We do not store your message content beyond delivery status (sent / delivered / failed).

How to opt out: reply STOP on WhatsApp, or block our number in your WhatsApp app. Once you opt out, we will not send further messages to that number. To revoke all of your data including the opt-out flag, contact us (see §7).

Verification records are retained for as long as the corresponding bottle is in circulation plus 24 months — this is the window during which fraudulent re-scans are most likely to surface and we need the record to investigate. After that window, your name and phone are deleted from the verification records, but anonymised scan statistics may be retained.

privacyPage.sections.sharing.intro

• Meta (WhatsApp Cloud API): your phone number, name (as the template variable), and the message delivery metadata. Meta processes this under its own privacy policy.
• Google Cloud (India region): our hosting provider. Data resides in Mumbai (asia-south1) and is encrypted at rest and in transit.
• Indian law enforcement or courts, only when required by a valid order under Indian law.

We do not sell, rent, or commercially share your data with anyone else.

privacyPage.sections.rights.intro

• Right to access: ask us what we hold about you.
• Right to correction: fix any inaccurate information.
• Right to erasure: request that we delete your name and phone from our records.
• Right to withdraw consent: at any time, by emailing us or replying STOP on WhatsApp.
• Right to grievance redressal: complain to the Data Protection Board of India if you believe your rights have been violated.

We will respond to verified requests within 30 days, as required by the Act.

Your phone number and name are stored in an encrypted database in Mumbai. Access is restricted to a small team and every access is logged in an append-only audit record. Each scan's authenticity check uses cryptographic signatures (HMAC-SHA256) so attackers cannot guess valid bottle codes from your phone.

For data requests or complaints:

• Email: privacy@shrikrushnaorganicproduct.com
• WhatsApp / phone: our official WhatsApp number (the same one that sent your confirmation message)
• Postal: Shrikrushna Organic Products — registered office address available on request

We may update this policy as our practices evolve or the law changes. Material changes will be highlighted with a new "Last updated" date at the top. For substantive changes affecting how we use your data, we will request fresh consent.