Information We Collect

• Identity & contact: name, email, phone, delivery/billing address.
• Order & account: items purchased, payment method, transaction details (from our payment providers), loyalty/points, preferences.
• Device & usage: IP address, device IDs, browser, cookies, pages viewed, referral/UTM, approximate location.
• Communications: support chats, emails, call notes, survey responses, contest entries.
• Marketing preferences: newsletter opt-ins, channel choices.
• Special categories: we do not intentionally collect health or sensitive data. If you tell us about allergies or intolerances, we use it only to serve you and do not profile on that basis.
  
  

How We Use Your Information (Purposes)

• Fulfilment: process orders, deliver products/services, provide receipts/invoices, handle returns and support.
• Account & loyalty: manage logins, preferences, rewards, and service notices.
• Customer care: respond to queries, troubleshoot issues, record service quality.
• Improvement & analytics: measure performance, fix bugs, develop new features, and improve product quality.
• Safety & compliance: prevent fraud/abuse, maintain security, comply with audits, tax, and legal requests.
• Marketing (with consent where required): send updates, offers, surveys, and event invites; show interest-based ads.
• Research & R&D: aggregate/anonymous analysis to improve recipes, packaging, and operations.

Lawful bases (examples): consent, contract performance, legitimate interests (e.g., service improvement/fraud prevention), legal obligation. EU/EEA bases align to GDPR Art. 6; “special category” processing, if any, complies with Art. 9. 

Cookies & Similar Technologies

We use cookies, local storage, and similar tools to keep you logged in, remember cart contents, measure performance, and personalize content/ads. Manage preferences in our Cookie Settings [link] or via your browser. For EU/EEA, we only drop non-essential cookies after consent (CMP banner).

Data Sharing

We do not sell personal information. We share limited data with:

• Processors: payment gateways, hosting/CDN, email/SMS platforms, analytics, logistics/last-mile, customer support tools—under contracts that require confidentiality and security.
• Fraud & security: service providers helping detect/prevent fraud or abuse.
• Legal: where required by law or to protect rights, safety, or property.
• Corporate events: in a merger, acquisition, or asset sale, per this Policy.
  
  

International Transfers

Where data moves across borders (e.g., India ↔ UAE ↔ other regions), we use appropriate safeguards (data processing agreements, standard contractual clauses or local equivalents) and respect localization rules where applicable. UAE/GCC and India have specific cross-border provisions; see regional sections. 

Security Measures

We use encryption in transit, hardened infrastructure, access controls, least-privilege, secure development practices, regular vulnerability reviews, and vendor due diligence. No method is 100% secure; we work to minimize risk.

Retention

We keep data only as long as necessary for the purpose collected and to meet legal/accounting/reporting obligations, then delete or anonymize it. (For India: erasure when the purpose is served or consent withdrawn, unless law requires retention.)  

Your Rights

Depending on your location, you may have rights to access, correct, delete/erase, port, restrict or object to processing, withdraw consent, and object to direct marketing or automated decisions. To exercise rights, email [privacy@yourdomain]. We will verify your identity before acting on requests. GDPR and GCC frameworks recognize similar rights; see local sections.  

Children

Our services are not directed to children under the local age of consent (typically 13–16). We do not knowingly collect their data; if we learn we have, we’ll delete it.

Automated Decision-Making

We do not make decisions producing legal or similarly significant effects solely by automated means. If this changes, we will provide meaningful information and opt-out/appeal routes.

Data Breaches

If a breach occurs, we will notify impacted users and regulators when required by law (e.g., India’s DPDP Board, EU Supervisory Authorities, or GCC authorities).  

Marketing Preferences

Marketing is opt-in where required. You can unsubscribe anytime via email footer or by contacting us. We may still send transactional/service messages.

Contact (Privacy)

• Email: “Email”
• Postal: Address of Privacy Office/DPO
• UAE DPO (if appointed): Name, email
• India grievance officer (if applicable): Name, email