How DriedFruitPlant Handles Your Data at Someshwar Farm, Nashik
How we handle your information
This policy explains what personal information we collect when you buy from DriedFruitPlant, visit our farm, or contact us. We keep data handling simple and follow Indian data protection rules.
Last updated: October 2025
How We Follow Data Protection Rules
We comply with India's Information Technology Act 2000 and IT Rules 2011 for handling personal data. Our farm office in Someshwar, Nashik stores customer records on password‑protected computers with daily backups to an external drive kept in a locked cabinet.
Only two people access customer data: Rajesh Kulkarni (farm owner) and Priya Deshmukh (admin manager). Both are trained on data handling protocols and sign confidentiality agreements. Access logs are maintained in a physical register.
We do not sell or share your information with third parties for marketing. Your data is used only for order processing, delivery coordination, and customer support. Courier partners (Bluedart, Delhivery) receive only your name, phone, and delivery address — never your email or payment details.
Third‑Party Services We Use
We work with the following external services that may process limited data:
-
Email provider: basic SMTP service hosted in India (stores email addresses for delivery confirmations)
-
Payment gateway: for UPI and bank transfers (processes transaction data, not stored by us after payment clears)
-
Courier tracking: Bluedart and Delhivery APIs (receive delivery address and phone only)
What Information We Collect
When You Place an Order
-
Name, phone number, email address
-
Delivery address (city, state, PIN code)
-
Product details and quantity
-
Payment method (UPI, bank transfer, COD)
When You Visit Our Website
-
IP address and browser type (via server logs)
-
Pages visited and time spent
-
We do not use cookies or tracking scripts
When You Register for Events
-
Name, email, phone for workshop confirmation
-
Student ID (if applicable for field visits)
How Long We Keep Your Data
Order records (name, address, products) are kept for 18 months to support batch traceability and warranty claims. This matches our shelf life guarantee and allows us to investigate any delayed quality issues. After 18 months, we delete personal details and keep only anonymized sales data (product, quantity, date, city) for internal harvest planning.
Email and phone numbers are kept as long as you remain an active customer. If no purchase is made for 24 months, we automatically delete contact details unless you subscribe to our monthly newsletter. Newsletter subscribers can unsubscribe anytime using the link in emails.
Server Logs and Website Data
Our web server logs IP addresses and page visits for 90 days. These logs help us troubleshoot technical issues and monitor for security threats. After 90 days, logs are automatically deleted. We do not track you across other websites or use advertising cookies.
Payment Records
Transaction records (amount, date, method) are kept for 7 years as required by Indian tax law. These records contain only financial data, not personal details beyond your name. Bank account numbers and UPI IDs are never stored — payment gateways handle this securely.
Your Rights Over Your Information
Under Indian data protection rules, you have control over your personal information. Here's what you can request:
-
Request a copy of data we hold about you (we'll send a PDF with your order history, contact details, and any notes within 7 days)
-
Ask us to correct wrong details (phone, address, name spelling — we update within 2 working days)
-
Request deletion of your data (we comply within 30 days unless legally required to keep records for tax or traceability purposes)
-
Opt out of promotional emails (click unsubscribe in any email or email us — removed from list within 48 hours)
-
Object to data processing for specific purposes (e.g., you can still buy from us but opt out of marketing communications)
For any data‑related requests, email us at contact@driedfruitplant.com or call +91 20 9021 8897. We respond within 7 working days. If your request is complex (e.g., full data export), we may need up to 14 days.
How to Submit a Data Request
Send an email from the same email address you used for orders, or call from your registered phone number. This helps us verify your identity. For deletion requests, we may ask you to confirm via SMS code sent to your phone.
How We Protect Your Information
Customer data is stored on password‑protected computers with antivirus software updated weekly. Our office has physical access control — only farm staff with ID cards can enter the admin room where computers are located.
Payment details (UPI, bank account) are handled by certified payment gateways and never stored on our systems. We do not ask for card numbers or CVV codes via email or phone — these are requested only through secure payment links.
Data Breach Protocol
If unauthorized access to customer data occurs, we will notify affected customers within 72 hours via email and SMS. We'll explain what data was accessed and what steps we're taking. Incidents are reported to local cyber cell in Nashik if required by law.
Marketing and Communication Preferences
We send order confirmations, dispatch updates, and delivery tracking to all customers — these are transactional messages and cannot be opted out (required for order fulfillment).
Promotional emails (new products, festival offers, farm updates) are sent only if you tick the newsletter box during checkout or sign up via our website. We send 2–3 promotional emails per month, never daily.
SMS and WhatsApp
We send SMS for order status and delivery alerts. These are transactional and sent via registered telecom channels. We do not send promotional SMS. WhatsApp is used only if you message us first — we never initiate marketing via WhatsApp.
Children's Privacy
Our website and products are intended for adults. We do not knowingly collect data from children under 18 without parental consent. If a parent discovers we have collected data from their child, contact us immediately — we'll delete it within 48 hours.
For student field visits and workshops, we require school or college approval letters. Student names and contact details are deleted 90 days after the event, except for internship certificates which we keep for 5 years as proof of participation.
Changes to This Policy
We may update this policy when Indian data protection laws change or when we add new services. Any significant changes will be notified via email to active customers 30 days before implementation.
The current version is dated October 2025. Previous versions are available on request for reference.
Contact for Privacy Questions
If you have concerns about how we handle your data, contact Rajesh Kulkarni (farm owner) at contact@driedfruitplant.com. Our office is in Someshwar, Gangapur, Nashik, Maharashtra 422222, India
For urgent privacy issues (suspected data breach, unauthorized access), call +91 20 9021 8897 during office hours (Mon–Sat, 9 AM–6 PM). After hours, leave a voicemail — we check messages every morning.