This Privacy Policy describes how Godasya ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit our website or place an order. This policy is published in compliance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).
1. Information We Collect
We collect only the information necessary to process your order and communicate with you. The table below summarises what we collect and why:
| Data Collected | Purpose | Legal Basis |
|---|---|---|
| Name | Order processing & delivery | Contractual necessity |
| WhatsApp / Phone number | Order confirmation, dispatch updates, support | Contractual necessity |
| Delivery address | Shipping your order | Contractual necessity |
| Order history | Subscription management & dispute resolution | Legitimate interest |
| Website usage data (IP address, browser, pages visited) | Analytics, security, improving user experience | Legitimate interest |
| Order details (product, quantity, batch) | Product safety, recall management & regulatory compliance | Legal obligation |
We do not collect sensitive personal data such as financial account numbers, payment card details (payments are handled directly via UPI/bank transfer), government IDs, passwords, or health records.
2. How We Use Your Information
- To confirm, process, and dispatch your orders
- To send order status and delivery updates via WhatsApp
- To manage monthly subscriptions and bulk orders
- To respond to queries, complaints, and refund requests
- To send occasional promotional messages about new products or offers (you may opt out at any time by messaging us "STOP")
- To issue GST invoices where requested, using your name, delivery address, and GSTIN
- To notify you of any product safety issue or recall, and to identify and contact affected customers as required under the Food Safety and Standards Act, 2006
- To comply with legal and regulatory obligations
- To improve our website and services
We will never sell, rent, or share your personal data with third parties for their marketing purposes.
3. WhatsApp & Third-Party Services
Orders are processed via WhatsApp, which is operated by Meta Platforms, Inc. By messaging us on WhatsApp, you agree to WhatsApp's Privacy Policy. We do not control the data practices of WhatsApp or Meta.
Our website may be hosted on GitHub Pages (GitHub, Inc., a Microsoft subsidiary). GitHub Pages may collect basic server logs. Please refer to GitHub's Privacy Statement for details.
We use Google Fonts (Google LLC) to load typefaces. Google may collect limited technical data. See Google's Privacy Policy.
4. Data Retention
We retain your personal data only for as long as necessary for the purposes stated in this Policy:
- Order and transaction records — retained for 6 years in accordance with the Goods and Services Tax Act, 2017 and applicable accounting and legal compliance requirements
- WhatsApp message history — retained as per WhatsApp's own retention policies; we may refer to past messages for up to 2 years to resolve disputes
- Customer contact details — retained until you request deletion, subject to our legal retention obligations
- Website analytics data — anonymised or deleted within 12 months
5. Your Rights Under DPDPA 2023
Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
- Right to AccessRequest a summary of the personal data we hold about you
- Right to CorrectRequest correction of inaccurate or incomplete personal data
- Right to EraseRequest deletion of your personal data (subject to our legal retention obligations)
- Right to WithdrawWithdraw consent for promotional messages at any time by messaging "STOP"
- Right to NominateNominate another person to exercise your rights in the event of your incapacity or death
- Right to GrievanceFile a complaint with our Grievance Officer (see Section 6) or with the Data Protection Board of India
To exercise any of these rights, please contact our Grievance Officer (Section 6 below). We will respond within 30 days.
6. Grievance Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and DPDPA 2023, we have designated a Grievance Officer to address complaints or concerns regarding the processing of your personal data:
Grievance Officer – Godasya
Maharashtra, India
📞 WhatsApp: +91 96999 20611
🌐 Website: godasya.in
📧 Email: godasya.products@gmail.com
We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.
7. Data Security
We implement reasonable administrative and technical measures to protect your personal data from unauthorised access, disclosure, or misuse. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.
In the unlikely event of a data breach that is likely to affect your rights and interests, we will notify you as required by applicable law.
8. Data Processors
In the course of operating our business, we engage the following categories of third parties who may process your personal data on our behalf solely for the purposes described in this Policy:
- Courier / Logistics Partners — receives your name and delivery address for shipping
- WhatsApp (Meta Platforms, Inc.) — processes communication data as per their privacy policy
- GitHub, Inc. — hosts our website; may collect server logs
- Google LLC — provides fonts and may collect limited technical data
We do not sell or share your personal data with any third party for their independent marketing or commercial purposes. All data processors are engaged under confidentiality obligations.
9. Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated "Last updated" date. For significant changes, we will attempt to notify active customers via WhatsApp.