We collect the following types of information: Account Information: When you register, we collect your name, email address, and phone number. Order Information: When you place an order, we collect your delivery address, city, state, PIN code, and payment method. Usage Data: We use session cookies to maintain your cart and login state. We do not use tracking cookies or third-party analytics. Social Login: If you sign in with Google or Facebook, we receive your name, email address, and profile photo from those platforms. We do not receive your passwords or any private data beyond what you approve during the OAuth flow.

We use your information to: • Process and deliver your orders • Send order confirmation and status update emails • Respond to customer support inquiries • Prevent fraud and ensure account security • Improve our products and website We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising.

We use essential session cookies only to: • Keep you logged in • Maintain your shopping cart • Store CSRF security tokens We do not use advertising cookies, tracking pixels, or any third-party analytics (e.g. Google Analytics). You can disable cookies in your browser, but this will prevent login and cart functionality from working.

We share your data only in these limited circumstances: Delivery Partners: Your name, phone, and address are shared with our courier partners to fulfil deliveries. Payment Processors: For online payments, your transaction data is handled by our payment gateway. We never store card or UPI details. Legal Requirements: We may disclose data if required by law or court order.

If you use Google or Facebook sign-in, those platforms handle authentication. Their privacy policies apply to that login process: • Google Privacy Policy: https://policies.google.com/privacy • Facebook Privacy Policy: https://www.facebook.com/policy.php We only store your name, email, and social account ID. We never post on your behalf or access your contacts, timeline, or messages.

We protect your data using: • Encrypted HTTPS connections (SSL/TLS) • Passwords hashed using bcrypt (never stored in plain text) • CSRF tokens on all forms to prevent cross-site attacks • Rate limiting on login to prevent brute-force attacks • Admin panel protected by role-based access control However, no system is 100% secure. We encourage you to use a strong password and not share your account credentials.

We retain your data for as long as your account is active or as needed to fulfil orders, comply with legal obligations, and resolve disputes. You may request deletion of your account and data at any time by contacting us.

You have the right to: • Access the personal data we hold about you • Correct inaccurate information • Request deletion of your account and data • Withdraw consent for data processing To exercise these rights, email us at info@shri-annapurna.com with the subject line "Data Request".

Our website is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify registered users by email for significant changes. The "last updated" date at the top of this page always reflects the most recent version.

For privacy-related questions or requests: 📧 Email: info@shri-annapurna.com 📞 Phone: +91 98765 43210 📍 Address: 123 Mill Road, Industrial Area, Delhi - 110001