Privacy Policy

At Nishanti Blue Botanicals, we hold the sanctuary of your privacy in the highest regard. This Privacy Policy details how we collect, process, and safeguard your personal information when you browse our website or complete purchases.

1. Compliance Framework

This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and other applicable data security regulations. We act as the Data Fiduciary for the personal data you share with us.

2. Personal Information We Collect

We collect only the personal credentials necessary to execute your requests and ensure smooth transactions:

• Identity & Contact Details: Full name, shipping address, billing address, telephone number, and email address.
• Transaction Details: Details of products purchased, order values, and payment status.
• Technical Information: IP addresses, browser specifications, and usage cookies via analytics systems.

3. Lawful Basis for Processing

We process your personal credentials under the following lawful bases:

• Consent: Your explicit consent provided at checkout or during newsletter subscriptions.
• Contractual Necessity: To process payments, verify invoices, print shipping manifests, and deliver your orders.
• Legitimate Interests: To monitor website performance, secure our transaction gateways, and prevent fraud.

4. Analytical Tools and Tracking

We utilize analytical cookies, including Google Analytics, to measure traffic, compile performance reports, and improve website readability. No personally identifying information is exported to third-party tracking databases. You can adjust your preferences via our Cookie Policy settings.

5. Secure Payment Gateways

We do not store your credit/debit card numbers or UPI PINs on our servers. All transaction routing and authorization are processed by certified third-party payment gateways, primarily Razorpay and Stripe, which operate under strict Payment Card Industry Data Security Standard (PCI-DSS) protocols.

6. Courier and Logistics Partners

To deliver your handpicked tea bundles, we share your name, shipping address, and telephone number with verified logistics agencies (e.g., Delhivery, Blue Dart, India Post). Our partners are contractually bound to process your data solely for logistics fulfillment.

7. Data Retention and Deletion

We store your transaction history and shipping details for as long as necessary to comply with tax regulations, resolve transaction queries, or honor statutory warranty boundaries. You have the right to request deletion of your account and personal details by contacting our Grievance Officer.

8. Consumer Rights under DPDP Act

Under the DPDP Act, 2023, you have the right to:

• Access a summary of your personal data processed by us.
• Request correction of inaccurate or incomplete data.
• Withdraw your consent for data processing at any time.
• Nominate another individual to act on your behalf in the event of incapacity.