Bajaj Sweets collects only necessary personal data under the Digital Personal Data Protection Act (DPDPA) 2023 and IT Act 2000.

• Identity Data: Full name, date of birth (if provided).
• Contact Data: Email address, mobile number, delivery/billing address.
• Transaction Data: Order history, payment method type (card numbers are not stored), invoice details.
• Dosha & Skin Profile Data: Skin type, wellness concerns, preferences (voluntary, explicit consent).
• Technical Data: IP address, browser, device info, pages visited (cookies & analytics).
• Communication Data: Queries, complaints, feedback via email/forms.

Legal bases: Performance of contract, legitimate interest, consent & legal obligation.

• Process orders, invoices, delivery → contract performance.
• Order confirmations, shipping updates, customer support.
• Promotional offers, Ayurvedic wellness tips, product launches (only with your consent).
• Analytics to improve website & botanical remedies (legitimate interest).
• Comply with tax/audit/legal requirements.
• Personalised recommendations based on your Dosha or skin profile (explicit consent).

You can withdraw consent anytime — email info@bajajsweets.com (subject: "Withdraw Consent").

We never sell, rent, or trade your personal data. Data is shared only for operational purposes with:

• Logistics partners (name, address, phone for order delivery).
• Payment gateways (PCI DSS compliant; no card/UPI details stored on our servers).
• Cloud/tech providers (hosting, email, analytics) under strict Data Protection Agreements.
• Legal/regulatory authorities when required by law.

Cross-border: Some cloud/analytics providers may be located outside India. Transfers are governed by DPDPA-equivalent protection agreements.

Retention schedule:

• Order/transaction data: 7 years (GST & accounting compliance).
• Account & profile: duration of active account + 2 years after deletion.
• Support records: 3 years from last interaction.
• Marketing consent: until withdrawn + 1 year compliance record.
• Dosha / Skin profile / sensitive data: deleted promptly upon request.

• Right to Access: Summary of your data and processing purposes.
• Right to Correction: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion (subject to legal retention mandates).
• Right to Grievance Redressal: Handled by our Grievance Officer.
• Right to Nominate: Nominate an individual to act on your behalf.
• Right to Withdraw Consent: Anytime.

To exercise your rights, write to: info@bajajsweets.com (subject: "Data Rights Request"). Response within 30 days.

Children's Data: Our website is intended for individuals aged 18+ only. We do not knowingly collect data from minors. If discovered, it will be deleted promptly.

Cookies: Essential, functional, analytics, and marketing cookies are used. Manage preferences via browser settings. See /cookie-policy for details.

Data Security: SSL/TLS encryption, secure servers, and restricted access controls. In the event of a breach, we notify you and the Data Protection Board as required by law.

In accordance with DPDPA 2023 & Consumer Protection (E-Commerce) Rules 2020:

Grievance Redressal Team — Bajaj Sweets
Email: info@bajajsweets.com
Website: https://bajajsweets.com

Grievances are acknowledged within 48 hours and resolved within 30 days. For unresolved issues, approach the Data Protection Board of India or National Consumer Helpline at 1800-11-4000.

We may update this Privacy Policy periodically. Material changes will be communicated via email or website notice 7 days prior to taking effect. The "Last Updated" date always reflects the latest version.

For data privacy concerns, write to info@bajajsweets.com with clear request details.