Your data
Privacy Policy
संक्षेप में: ऑर्डर पूरा करने के लिए जो ज़रूरी है वही लेते हैं, उससे ज़्यादा कुछ नहीं — और उसमें से कुछ भी बेचते नहीं।
Last updated: 18 October 2026
Who we are
This website is run by Shri Hari Kripa Foods, a proprietorship firm trading as Shri Gau Kripa, of 4, Bicholi Mardana, Indore, Madhya Pradesh 452001, India (GSTIN 23AWAPT5915F1ZN). In this policy “we” and “us” mean Shri Hari Kripa Foods. It explains what personal information we collect when you use this site or buy from us, why, who else sees it, and the choices you have. It is published under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.
What we collect
- Your account. Your name, and the email address or mobile number you sign in with. Passwords are stored only as a one-way (bcrypt) hash — no one, including us, can read yours.
- Your addresses. The delivery addresses you save, with the name and phone number for each, so you do not have to type them again.
- Your orders. What you bought, the price, the delivery address and the order’s status. A copy of the address is kept on the order itself, so deleting a saved address never changes where a past parcel was sent.
- Payments. Online payments are taken by our payment partner, Razorpay. We never see or store your card number, CVV, UPI PIN or net banking password — you enter those on Razorpay’s own secure form. We keep only Razorpay’s reference numbers for the payment and any refund, the amount and its status.
- Reviews and messages. Reviews you post (shown with your first name and initial) and anything you write to us.
- Technical information. Your IP address and basic request details, kept briefly in our server logs and used only to keep the site secure and to stop abuse such as repeated failed sign-ins. If a page fails to load, the error is reported to us without any personal details.
How we use it
- To create and run your account, and to take, pack and deliver your orders.
- To take payments and make refunds.
- To send the emails an order or account needs — a sign-up verification code, a password reset link, an order confirmation. We do not send marketing email.
- To answer your questions and complaints.
- To prevent fraud and misuse, and to keep the records tax law requires.
Who we share it with
We do not sell, rent or trade your personal information, and we run no advertising trackers on this site. We share only what each of these needs to do its job for us:
- Razorpay (Razorpay Software Pvt. Ltd.) — to process online payments and refunds, under its own privacy policy and RBI’s rules.
- Courier partners — your name, delivery address and phone number, to deliver your parcel.
- Our email provider — your email address and the message, to send the emails listed above.
- Hosting and database services that store this site and its data on our behalf. They may store data on servers outside India, under their own security commitments.
- Government authorities — only when the law requires it.
Cookies and storage in your browser
We set one cookie, which keeps you signed in. It is httpOnly (no script on the page can read it) and expires after seven days; signing out clears it at once. If you shop without signing in, your cart is kept in your own browser’s storage, on your device, and is moved to your account when you sign in. There are no advertising or analytics cookies.
How long we keep it
- Your account and saved addresses — until you ask us to delete them.
- An email sign-up that is never verified — deleted automatically after 48 hours.
- Orders, invoices and payment records — for as long as GST and income-tax law requires us to keep them, and then removed.
How we protect it
The whole site is served over HTTPS. Passwords are hashed, the sign-in cookie cannot be read by scripts, verification codes and reset links expire within minutes, and only the shop’s administrators can see orders. No system is perfectly secure, but we would tell you promptly if your information were ever exposed.
Your choices and rights
You can see and change your name, contact details and addresses on your account page, and delete any saved address there. You can ask us to tell you what we hold about you, to correct it, or to delete your account — write to shreegaukripa@gmail.com. We will act on it within 30 days, keeping only the order records the law requires.
Children
This site is meant for adults. If you are under 18, please shop with a parent or guardian.
Grievance officer
If you have a concern about how your information is handled, contact our Grievance Officer. We acknowledge every complaint within 48 hours and resolve it within one month.
Changes to this policy
If we change this policy, we will post the new version here with a new date at the top. The version in force when you place an order applies to that order.
