Last updated: [To be confirmed: Date of publication]
This Privacy Policy explains how Brewed Earth Pvt. Ltd. (“Espresso Roots”, “we”, “us”) collects, uses, shares and protects your personal data when you use espressoroots.com (the “Website”) or buy from us. It is published in accordance with the Information Technology Act, 2000 and its rules, the Digital Personal Data Protection Act, 2023 (as and when its provisions come into force) and the Consumer Protection (E-Commerce) Rules, 2020.
1. Who we are
Brewed Earth Pvt. Ltd.
Registered office: B-1/144, 2nd Floor, New Moti Nagar,
New Delhi – 110015
CIN: [To be confirmed: Company CIN]
Email: espressoroots@gmail.com
2. Personal data we collect
- Order and account data: name, email address, mobile number, delivery and billing address, order history, and your password (stored only in encrypted, hashed form).
- Payment data: payments are processed by Razorpay Software Pvt. Ltd. We receive a payment reference and status. We do not receive or store your full card number, CVV, UPI PIN or net-banking credentials.
- Communications: messages you send through our contact form, email or WhatsApp, and your newsletter subscription.
- Technical data: IP address, browser and device type, pages visited and cookies needed to run your bag, checkout and login. If enabled, analytics and advertising tools (Google Analytics, Meta Pixel) collect usage data through cookies.
3. Why we use it
- To process, ship and support your orders, including sharing tracking updates.
- To create and manage your account.
- To respond to your enquiries, complaints and refund requests.
- To send newsletters and offers where you have subscribed. You can unsubscribe at any time.
- To prevent fraud and misuse, keep the Website secure, and meet legal, tax and accounting obligations.
- To understand how the Website is used and improve it.
We process your data on the basis of your consent, to perform our contract with you, and to comply with law.
4. Who we share it with
We share only what is needed with service providers who act for us:
- Payment processing: Razorpay.
- Shipping and delivery: our logistics partners (such as Shiprocket and the courier assigned to your order).
- Hosting and email: Hostinger and our email service providers.
- Analytics and advertising, if enabled: Google and Meta.
We may also disclose data where required by law, a court order or a government authority. We do not sell your personal data.
5. Cookies
Essential cookies keep your bag, checkout and login working. Analytics and advertising cookies are used only if those tools are enabled. You can block or delete cookies in your browser settings; some parts of the Website may not work without essential cookies.
6. How long we keep it
We keep order and invoice records for as long as tax and accounting laws require ([To be confirmed: Retention period, typically 8 years under the Companies Act and GST law]). Account data is kept while your account is active. Newsletter data is kept until you unsubscribe. Enquiries are kept for [To be confirmed: Enquiry retention period].
7. Security
The Website uses HTTPS encryption. Passwords are stored in hashed form, payments are handled by a PCI-DSS compliant gateway, and access to customer data is limited to authorised staff. No system is completely secure, but we take reasonable security practices and procedures to protect your data.
8. Your rights
You can ask to access, correct, update or erase your personal data, withdraw consent, or nominate another person to exercise your rights. You can update most details yourself in My Account. For anything else, contact our Grievance Officer below. We may need to keep some data where the law requires it.
9. Children
The Website is meant for adults. We do not knowingly collect data from children under 18 without verifiable parental consent.
10. Grievance Officer
[To be confirmed: Grievance officer name and contact]We will acknowledge complaints within 48 hours and aim to resolve them within one month, as required by applicable rules.
11. Changes
We may update this policy from time to time. The latest version will always be on this page with its date.