Your privacy is important to us. This policy explains exactly what personal data Narpadham Foods collects, why we collect it, how we use it, and your rights under Indian law.
Contents
Narpadham Foods ("we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect the personal data you provide to us when you visit www.narpadhamfoods.com, purchase our products, contact us via WhatsApp, or interact with us in any other way.
This Policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and aligns with best practices under the Digital Personal Data Protection Act, 2023 (DPDPA).
By using our website or services, you consent to the practices described in this Policy. If you do not agree, please discontinue use of our website and services.
Narpadham Foods is the Data Fiduciary (Data Controller) responsible for your personal data. All questions, requests, or complaints regarding your personal data should be directed to our Grievance Officer (see Section 15).
Organisation
Narpadham Foods
Type
Food Manufacturer & Online Retailer
Registered Address
No. 6, Subramanya Nagar 1st Street, Thirumullaivoyal, Chennai – 600062, Tamil Nadu, India
Contact Email
narpadhamfoods@gmail.com
Phone
+91 7550110383
Jurisdiction
Republic of India
We collect only the information necessary to fulfil your orders, provide customer support, and improve our services. The categories of personal data we may collect include:
Identity & Contact Data
Full name, email address, phone number, WhatsApp number, and delivery address (including city, state, and pincode).
Order & Transaction Data
Products purchased, order value, order date, order ID, payment method type (not card details), and delivery status.
Communication Data
Messages sent to us via WhatsApp, email, or our contact form; enquiry subject and content; support ticket history.
Technical & Usage Data
IP address, browser type and version, device type, operating system, pages visited, time spent on pages, and referring URLs - collected via cookies and analytics tools.
Preference Data
Product preferences, saved cart items, coupon codes used, and newsletter subscription status.
We do not collect sensitive personal data such as Aadhaar numbers, PAN numbers, financial account details, biometric data, caste, religion, or health information unless explicitly required and disclosed.
We collect personal data through the following means:
Directly from you
When you place an order, fill in the contact form, subscribe to our newsletter, or message us via WhatsApp or email.
Automatically
When you browse our website, cookies and analytics scripts (Vercel Analytics) automatically collect technical and usage data.
From payment processors
Razorpay shares transaction confirmation data (amount, status, reference ID) with us after a payment is processed. We do not receive your card or bank credentials.
From WhatsApp (Meta)
When you message us on WhatsApp Business, Meta's platform delivers the message content and your WhatsApp profile name and number to our system.
From third-party logistics
Courier partners may share delivery confirmation data (delivery timestamp, recipient signature if applicable) with us.
We use your personal data only for the purposes for which it was collected and always within the bounds of applicable law:
| Purpose | Legal Basis |
|---|---|
| Process and fulfil your orders | Contractual necessity |
| Send order confirmations, dispatch, and delivery updates | Contractual necessity |
| Process payments via Razorpay | Contractual necessity |
| Respond to customer service enquiries | Legitimate interest / Consent |
| Send promotional emails or WhatsApp messages (with opt-in) | Consent |
| Analyse website usage to improve performance | Legitimate interest |
| Detect, prevent, and investigate fraud or abuse | Legitimate interest / Legal obligation |
| Comply with applicable Indian laws and regulations | Legal obligation |
| Manage returns, refunds, and disputes | Contractual necessity / Legal obligation |
We will never sell your personal data to third parties or use it for any purpose not disclosed in this Privacy Policy without your explicit consent.
This section specifically addresses our use of Meta's WhatsApp Business Cloud API and is provided in compliance with Meta's Platform Terms and Business Messaging Policy.
We use the WhatsApp Business Platform (powered by Meta) to communicate with customers. When you send a message to our WhatsApp Business number or when we message you (with your consent), the following data is processed:
Your WhatsApp phone number
Used to identify you as a contact and link your messages to your order history.
Your WhatsApp display name
Used to personalise our responses to you.
Message content
The text of messages exchanged is stored in our secure database (hosted on Supabase, located in data centres compliant with applicable security standards) for the purpose of providing customer support and maintaining conversation history.
Message timestamp and status
Delivery and read receipts provided by Meta are used to confirm message delivery.
What we do not do:We do not use your WhatsApp data for advertising, profiling, or sharing with any third party outside of what is required to operate the WhatsApp Business service (i.e., Meta's infrastructure as the platform provider). We do not access your WhatsApp contacts, media library, or any data beyond what you directly share with our business number.
WhatsApp message data is retained for a maximum of 12 months from the date of the last interaction, after which it is permanently deleted unless required to be retained for legal or dispute resolution purposes.
Meta's own data practices are governed by Meta's Privacy Policy available at facebook.com/privacy/policy. Our use of WhatsApp Business is subject to Meta's Business Messaging Policy and WhatsApp Business Terms of Service. You may opt out of WhatsApp communications from us at any time by sending "STOP" to our business number or by emailing narpadhamfoods@gmail.com.
All payment transactions on our website are processed by Razorpay Software Private Limited, a PCI-DSS Level 1 certified payment gateway licensed and regulated by the Reserve Bank of India (RBI) as a Payment Aggregator.
We do not store, process, or transmit your payment card number, CVV, net banking credentials, UPI PIN, or any other sensitive payment credentials on our servers. This information is entered directly into Razorpay's secure environment and never passes through our systems.
The data we receive from Razorpay after a completed transaction is limited to:
Razorpay's privacy practices are governed by their Privacy Policy available at razorpay.com/privacy. By making a payment on our website, you also agree to Razorpay's terms of service.
We do not sell, rent, or trade your personal data. We share your data only with the following categories of third parties, strictly for the purpose of delivering our services:
Razorpay (Payment Processing)
India (RBI regulated)Name, email, phone, and order amount - to process your payment.
Courier & Logistics Partners
IndiaName, delivery address, phone number, and order details - to ship and deliver your order.
Meta (WhatsApp Business Platform)
USA / Global (Meta Infrastructure)Phone number and message content - to facilitate WhatsApp customer communications.
Supabase (Database Hosting)
USA / EU (AWS-based, ISO 27001 compliant)Encrypted order, customer, and conversation data stored in secure cloud infrastructure.
Vercel (Website Hosting & Analytics)
USA / Global Edge NetworkTechnical usage data and anonymised analytics (no personally identifiable information).
Email Service Provider
India / USAEmail address and order details - to send transactional and notification emails.
We may disclose your personal data to law enforcement authorities, courts, or government bodies if required by applicable Indian law or a valid legal order, without prior notice where legally required.
We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, in compliance with the IT (Reasonable Security Practices and Procedures) Rules, 2011.
HTTPS Encryption
All data transmitted between your browser and our website is encrypted using TLS/SSL.
Secure Database
Customer data is stored in encrypted databases hosted on Supabase with row-level security and access controls.
Access Controls
Only authorised personnel with a specific business need can access personal data. Admin access is protected by two-factor authentication.
Payment Security
No payment card data is stored on our servers. All payment processing is handled by PCI-DSS certified Razorpay.
Regular Reviews
We periodically review our security practices and update them in response to evolving threats and regulatory guidance.
Incident Response
In the event of a data breach that poses a risk to your rights, we will notify you and relevant authorities as required by applicable law.
While we take reasonable precautions, no internet transmission is 100% secure. You are responsible for keeping your account credentials confidential and for any activity that occurs under your account.
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (as required by Indian taxation and accounting laws) |
| Customer contact details | 3 years from last order, or until deletion requested |
| WhatsApp conversation data | 12 months from last interaction |
| Email communications | 2 years |
| Website analytics data | 13 months (anonymised) |
| Payment reference data | 7 years (as required by RBI and GST regulations) |
After the retention period expires, data is permanently deleted or anonymised so it can no longer be linked to you.
Under Indian law (IT Act, 2000 and the Digital Personal Data Protection Act, 2023), you have the following rights regarding your personal data. To exercise any of these rights, contact our Grievance Officer (Section 15).
Right to Access
You may request a copy of the personal data we hold about you.
Right to Correction
You may request that we correct any inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data, subject to our legal obligations to retain certain data (e.g., for tax or dispute resolution purposes).
Right to Withdraw Consent
Where we process your data based on consent (e.g., WhatsApp marketing), you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Grievance Redressal
You have the right to file a complaint with our Grievance Officer. If unsatisfied, you may approach the Data Protection Board of India (once operational under the DPDPA, 2023).
Right to Nominate
Under the DPDPA, 2023, you have the right to nominate an individual to exercise your data rights in the event of your death or incapacity.
We will respond to all verified data requests within 30 days. We may ask you to verify your identity before fulfilling any request.
Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember your cart, and analyse website usage. By continuing to use our website, you consent to our use of cookies as described below.
Essential Cookies
Required for the website to function. These include session cookies for your cart and login state. These cannot be disabled.
Analytics Cookies
We use Vercel Analytics to understand how visitors interact with our website. This data is anonymised and aggregated - we do not track individual users.
Preference Cookies
Used to remember your preferences such as language or display settings across visits.
You can manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality such as the shopping cart. We do not use third-party advertising cookies or tracking pixels.
Our website and services are not directed to children under the age of 18 years. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at narpadhamfoods@gmail.com and we will promptly delete such data.
Under the Digital Personal Data Protection Act, 2023, we are required to obtain verifiable parental consent before processing personal data of children under 18. We do not knowingly allow minors to register or place orders on our platform without guardian supervision.
We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on the website.
We encourage you to review this Policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated Policy.
In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer to address privacy-related concerns. You may contact the Grievance Officer for any complaints, requests to exercise your data rights, or questions about this Privacy Policy.
Grievance Officer
Name
Ms. M. Udayamathi
Designation
Co-Founder & Technical Head, Narpadham Foods
narpadhamfoods@gmail.com
Phone
+91 7550110383
Address
No. 6, Subramanya Nagar 1st Street, Thirumullaivoyal, Chennai – 600062, Tamil Nadu, India
Response Time
Within 30 days of receipt of complaint
If you are not satisfied with our response, you may approach the Data Protection Board of India (once established under the DPDPA, 2023), or file a complaint with the relevant Consumer Disputes Redressal Commission, or seek remedies before a court of competent jurisdiction in Chennai, Tamil Nadu.
© 2026 Narpadham Foods. All rights reserved.
