Privacy Policy

Vimala Foods (“Company,” “we,” “our,” or “us”) is committed to safeguarding the privacy of individuals whose personal data we collect and process. This Privacy Policy is prepared in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and outlines how we collect, use, store, and share your personal data when you access or use our website [vimalafoods.in], place orders, or interact with our services.

This Privacy Policy applies to all individuals (“Data Principals” or “you”) who visit our website, purchase products, or otherwise interact with Vimala Foods in India.

We may collect and process the following categories of personal data:

• Identity Data: Name, email address, and phone number.
   
• Transaction Data: Billing/shipping address, payment details (collected securely via third-party payment gateways).
   
• Technical Data: IP address, browser type, device identifiers, and usage data collected through cookies or similar technologies.
   
• Voluntary Data: Any information you provide when you contact us, submit feedback, or sign up for newsletters.
   

We do not intentionally collect or process sensitive personal data unless explicitly required for a lawful purpose.

Your personal data will be processed only for lawful purposes, including but not limited to:

• Processing, fulfilling, and delivering product orders.
   
• Providing customer service and responding to queries.
   
• Sending transactional notifications (order confirmation, dispatch, etc.).
   
• Sending promotional communications (only with explicit consent).
   
• Improving our website, services, and product offerings.
   
• Compliance with applicable legal and regulatory requirements.
   

Under the DPDP Act, we process your personal data based on:

• Consent (e.g., marketing communications).
   
• Performance of a Contract (e.g., order fulfillment).
   
• Legal Obligation (e.g., tax or regulatory compliance).
   
• Legitimate Interests (e.g., website functionality and fraud prevention).
   

We do not sell or trade your personal data. We may share data only with:

• Service Providers: Delivery partners, payment processors, and IT support providers.
   
• Government Authorities: If mandated under applicable laws.
   
• Business Transfers: In case of merger, acquisition, or restructuring, subject to continued protection of your data.
   

Where personal data is transferred outside India (e.g., cloud hosting services), we ensure such transfers comply with applicable laws and that your data is afforded adequate protection.

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Upon expiry of the retention period, your data will be securely deleted or anonymized.

Under the DPDP Act, you have the following rights:

• Right to Access:Request details of your personal data processed by us.
   
• Right to Correction/Erasure: Request correction, completion, updating, or erasure of your personal data.
   
• Right to Nominate: Nominate another individual to exercise your rights in case of incapacity or death.
   
• Right to Withdraw Consent: Withdraw consent for processing at any time (without affecting processing carried out prior to withdrawal).
   
• Right to Grievance Redressal: Approach our Grievance Officer for any concerns.
   

To exercise your rights, you may contact us using the details provided below.

Email: [vimala.foods1@gmail.com]
Website: vimalafoods.in

We will acknowledge your grievance within 7 working days and attempt to resolve it within the time frame prescribed under applicable law.

We implement reasonable technical, administrative, and organizational measures to ensure that your personal data is protected against unauthorized access, alteration, disclosure, or destruction.

We do not knowingly collect personal data of children under the age of 18 without the consent of a parent or lawful guardian. If you believe we have collected such data, please contact us for immediate deletion.

We may revise this Privacy Policy periodically to reflect changes in legal, regulatory, or operational requirements. The updated policy will be posted on this page with the “Last Updated” date.