Privacy Policy
Effective 1 Jun 2026. Last reviewed by RKG legal: PENDING
This policy explains what personal data we collect, why we collect it, and what your rights are. It applies to rkggheestories.in and is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Data controller
RKG Ghee Stories, 7/247, Shanmuga Towers, Karur Road, Kangayam, Tiruppur District, Tamil Nadu — 638 701. Grievance Officer contact details are on our Contact page.
2. What we collect
- Account data — email, first/last name, phone, addresses you save
- Order data — items, quantities, amounts, delivery address (snapshot at time of order), Razorpay payment IDs
- Login data — OTP request logs (IP, user-agent, timestamp) for fraud prevention; OTPs themselves are stored hashed and pruned after a day
- Technical data — session cookies, browser type, page-view counts via Google Analytics (if/when enabled)
3. Why we collect it
- To process orders and dispatch them to you
- To send transactional emails (order received / confirmed / shipped / delivered)
- To comply with GST/FSSAI/tax record-keeping obligations
- To improve the site (aggregate analytics only)
- To prevent fraud and abuse of our OTP / payment systems
4. Who we share it with
- Razorpay for payment processing (Razorpay's privacy policy applies to that processing)
- Our couriers (Delhivery, BlueDart, DTDC, India Post etc.) — for delivery only
- Email provider (SMTP/SES/etc.) — for transactional delivery
- Indian government / tax authorities — when legally required
We do not sell your data to anyone, ever.
5. Retention
Order records (including GST invoices) are kept for 8 years per Indian tax law. OTPs are kept for 1 day. Account profiles are kept until you delete them.
6. Your rights under DPDP Act 2023
- Access — request a copy of the data we hold on you
- Correction — fix anything wrong (or just edit it in your account)
- Erasure — delete your account (we'll keep what we're legally required to)
- Grievance — complain to our Grievance Officer (see Contact)
7. Cookies
We use a single session cookie to keep you signed in and to remember your cart. We don't use third-party tracking cookies. Analytics, when enabled, uses anonymised IDs only.
8. Updates
If this policy changes materially we'll notify you by email.