Privacy Policy

1. Welcome to Diet Swad!

At Diet Swad, we're committed to protecting your privacy while helping you discover guilt-free indulgence through our range of healthy snacks made from ancient ingredients like dates, nuts, and ghee.

This Privacy Policy explains:

• What information we gather when you interact with our services
• The purposes for which we process your information
• How we collaborate with trusted partners to deliver our services
• The choices and controls available to you
• How we safeguard your data

We've written this policy in plain language because we believe you deserve to understand exactly how your information is handled. We treat privacy not as a legal obligation but as a fundamental aspect of our relationship with you.

This policy complies with:

• Digital Personal Data Protection Act, 2023 (DPDP Act)
• Information Technology Act, 2000
• Consumer Protection Act, 2019
• FSSAI (Food Safety and Standards Authority of India) regulations

2. Information We Collect

We gather information you choose to provide during your interaction with our services, as well as certain information that is automatically collected to facilitate your experience.

2.1 Information You Provide Directly

When you place an order or communicate with us, we collect:

Contact Information:

• Full name
• Email address
• Phone number (WhatsApp-enabled)
• Social media handles (if you interact via Instagram/Facebook)

Delivery Information:

• Complete delivery address (street, landmark, city, state, pincode)
• Alternative phone number (if provided)
• Special delivery instructions

Order Details:

• Product selections and quantities
• Special dietary preferences or instructions
• Order history and purchase patterns

Payment Information:

• Transaction confirmation details
• Payment method used (UPI, card, cash on delivery)
• We do NOT store: Credit/debit card numbers, CVV codes, UPI PINs, or banking passwords

Legal Basis for Collection: Contractual necessity (to fulfill your orders) and your explicit consent for marketing communications.

2.2 Information Collected Automatically

When you browse our website (dietswad.in) or interact with our digital platforms, certain information is automatically processed:

Device Information:

• Browser type and version (Chrome, Safari, Firefox, etc.)
• Operating system (Windows, Mac, iOS, Android)
• Device identifiers and mobile advertising IDs
• Screen resolution and device specifications

Usage Data:

• Pages visited and time spent on each page
• Links clicked and buttons pressed
• Scroll depth and reading patterns
• Referring websites or advertisements that brought you to our site

Location Data:

• IP address
• Approximate geographic location (city/region level, not precise GPS)
• Internet service provider

2.3 Analytics and Advertising Technologies

We use advertising and analytics technologies to measure the effectiveness of our marketing campaigns and understand how visitors engage with our website.

Meta Pixel (Formerly Facebook Pixel)

What It Is: A piece of code provided by Meta Platforms Ireland Limited that tracks visitor interactions on our website.

Provider Details:

• Name: Meta Platforms Ireland Limited
• Address: 4 Grand Canal Square, Dublin 2, Ireland
• Privacy Policy: https://www.facebook.com/privacy/policy

Purpose:

• Measure conversion rates from Facebook and Instagram advertisements
• Build custom audiences for targeted advertising campaigns
• Create lookalike audiences of potential customers with similar interests
• Retarget website visitors with relevant product ads
• Optimize ad delivery to people most likely to be interested

Your Control:

• Manage ad preferences: Facebook Ad Preferences
• Opt out of personalized ads while keeping your account active
• Use browser extensions like Privacy Badger or Facebook Container
• Clear cookies regularly through your browser settings

Google Analytics

Provider: Google Ireland Limited

Purpose:

• Understand website traffic patterns and visitor demographics
• Identify popular products and content
• Measure website performance and loading speeds
• Improve user experience based on behavior insights

Your Control:

• Opt out: Google Analytics Opt-out Browser Add-on

Microsoft Clarity

Provider: Microsoft Corporation

Purpose:

• Record anonymised user sessions (screen recordings and heatmaps) to understand how visitors interact with our website
• Identify usability issues, confusing navigation, and areas for UX improvement
• Detect patterns such as rage clicks and dead clicks that indicate friction in the user journey

Privacy: Clarity does not collect personally identifiable information. All personal data fields on our order form (name, phone, email, delivery address, pin code) are masked before recording — Clarity never sees or stores these values. Smart Masking is enabled to automatically blur any other text that resembles personal data.

Your Control:

• Learn more: Microsoft Privacy Statement
• Opt out of Clarity: clarity.microsoft.com/optout

3. How We Use Your Information

We process your information for specific, transparent purposes that directly benefit your experience with Diet Swad.

3.1 Order Fulfillment and Delivery

What We Do:

• Confirm orders and generate invoices
• Coordinate with delivery partners for shipment
• Provide order tracking information
• Handle delivery exceptions, reschedules, or address changes
• Process returns, refunds, or replacements

Legal Basis: Performance of contract - we need this information to complete your purchase.

3.2 Marketing and Personalized Communications

What We Do:

• Share promotional offers, discount codes, and festival campaigns
• Announce new product launches and restocks
• Provide recipes, nutrition tips, and healthy snacking content
• Re-engage customers who haven't ordered recently

Your Control: You can opt out anytime by:

• Replying "STOP" to WhatsApp messages
• Clicking "Unsubscribe" in email footers
• Emailing [email protected] with "Unsubscribe" in subject line

Important: Opting out of marketing communications will NOT affect transactional messages (order confirmations, delivery updates, payment receipts).

4. How We Share Your Information

We collaborate with trusted service providers and partners who assist us in delivering our services. We never sell your personal information to third parties for their marketing purposes.

4.1 Delivery and Logistics Partners

Who They Are: Shiprocket, Delhivery, Xpressbees, Blue Dart, India Post, Local courier services

What We Share: Recipient name, phone number, delivery address, order contents

Why We Share: To ship products to your location and enable tracking

4.2 Payment Processors

Who They Are: Razorpay, Paytm, PayU, UPI payment systems

What We Share: Order amount, invoice number, billing name

Protections: PCI-DSS compliant secure payment gateways. We never see or store your card details, CVV, or PINs.

4.3 Advertising and Analytics Platforms

Who They Are: Meta Platforms Ireland Limited (Facebook, Instagram), Google Ireland Limited, Microsoft Corporation

What We Share: Website behavior data, hashed email addresses and phone numbers, conversion events

Your Control: Manage ad preferences on Facebook and Google

5. Cookies and Tracking Technologies

Cookies are small text files stored on your device that help websites remember your preferences and understand how you interact with them.

5.1 Types of Cookies We Use

5.2 How to Manage Cookies

Browser Controls:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Safari: Preferences → Privacy → Manage Website Data
• Firefox: Options → Privacy & Security → Cookies and Site Data

Third-Party Opt-Outs:

• Facebook Ad Preferences
• Google Ad Settings
• Digital Advertising Alliance Opt-Out

6. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have comprehensive rights over your personal information.

6.1 Right to Access Your Data

What It Means: You can request a complete copy of all personal information we hold about you.

How to Exercise: Email [email protected] with subject line "Data Access Request - [Your Name]"

Response Timeline: Within 7 business days, free of charge

6.2 Right to Correction

What It Means: You can request correction of inaccurate or incomplete personal information.

Response Timeline: Within 5 business days

6.3 Right to Erasure (Right to be Forgotten)

What It Means: You can request deletion of your personal information when it's no longer necessary.

How to Exercise: Email [email protected] with subject "Data Deletion Request - [Your Name]"

Response Timeline: Within 10 business days

6.4 Right to Withdraw Consent

What It Means: You can withdraw consent for marketing communications or optional data processing at any time.

How to Exercise:

• WhatsApp: Reply "STOP" to any message
• Email: Click "Unsubscribe" link at bottom of emails
• General: Email [email protected] with subject "Withdraw Consent"

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law.

8. Security Measures

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

8.1 Technical Security Measures

Encryption:

• Data in Transit: TLS/SSL encryption (HTTPS) for all website connections
• Data at Rest: Encrypted storage for databases and backups
• Payment Data: Handled entirely by PCI-DSS compliant payment processors

Access Controls:

• Multi-factor authentication (MFA) for accessing sensitive systems
• Role-based access control (RBAC)
• Regular access reviews and revocation of unnecessary permissions

8.2 Your Responsibility for Security

Please help us protect your information:

• Keep login credentials secure
• Never share one-time passwords (OTPs) with anyone
• Report suspicious activity immediately
• Verify before sharing information

9. Children's Privacy

We do NOT knowingly collect personal information from children under 18 without verifiable parental consent.

If you are under 18 years old, please have a parent or legal guardian place orders on your behalf.

10. Marketing and Communications

Types of Communications

Transactional Communications (Cannot Opt Out):

• Order confirmation emails/WhatsApp messages
• Payment receipts and invoices
• Shipping and delivery status updates

Marketing Communications (Can Opt Out):

• Promotional offers and discount codes
• New product launches and restocks
• Recipes, nutrition tips, and healthy snacking content

11. Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements.

Material Changes (Affects Your Rights):

• Email notification sent to all registered customers
• WhatsApp broadcast sent to active contacts
• Website banner prominent notice for 30 days
• 30 days notice before changes take effect

12. Grievance Redressal

We take your privacy concerns seriously and have established a comprehensive grievance redressal mechanism.

13. Our Commitment to You

At Diet Swad, we believe healthy eating should come with peace of mind—not just about ingredients, but also about how we handle your trust and your data.

Our Privacy Promise

We Promise To:

• Be Transparent: Explain what data we collect and why in plain language
• Respect Your Control: Give you meaningful choices over your information
• Respond Promptly: Acknowledge privacy concerns within 24 hours
• Never Sell Your Data: We do not sell personal information to third parties

What We Do NOT Do

Clear Boundaries We Respect:

• Sell your personal information to data brokers or marketing companies
• Share your dietary preferences or order history for others' marketing
• Send unsolicited marketing after you opt out
• Store sensitive payment information (card numbers, CVVs, UPI PINs)
• Make opting out difficult - it's always as easy as opting in

Legal Disclaimer and Governing Law

Governing Law: This Privacy Policy is governed by the laws of India, including but not limited to:

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• Consumer Protection Act, 2019
• Indian Contract Act, 1872

Jurisdiction: Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of courts in Kolkata, West Bengal, India.

Quick Reference Guide

Need to Exercise Your Rights?

External Resources

• Meta Ad Preferences: facebook.com/adpreferences
• Google Ad Settings: adssettings.google.com
• Consumer Helpline: 1800-11-4000 | consumerhelpline.gov.in
• Cyber Crime Reporting: cybercrime.gov.in | 1930