ಗೌಪ್ಯತೆ · Privacy
Privacy Policy
We collect the least amount of personal data needed to send you your coffee — nothing more. This policy explains what we collect, why, and the choices you have.
Last updated: (to be set). This page is a working template shared in good faith and is pending the owner's legal review. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act); marked placeholders will be finalised before go-live.
1. Who we are (the Data Fiduciary)
Giri Coffee Works (ಗಿರಿ ಕಾಫಿ ವರ್ಕ್ಸ್), 80, N/27, Nazarbad, Pette Road, Doora, Mysuru, Karnataka 570010, is the data fiduciary responsible for your personal data. You can reach us on +91 96320 01818 or via WhatsApp.
2. What personal data we collect, and why
We collect only what we need to take and fulfil your order:
- Your name — to address and prepare your order.
- Contact details (phone / WhatsApp number, and email if you give one) — to confirm the order, share tracking and reach you if there is a problem.
- Shipping address — to deliver your coffee.
- Order details — the items, quantities and any preferences you tell us.
We collect this data to fulfil your order and provide customer support, and to meet our legal and tax obligations.
3. Lawful basis — your consent
We process your personal data on the basis of your consent, which you give when you place an order and provide these details. Where the law allows, we may also process data as needed to perform the order you asked for. You can withdraw consent at any time (see Your rights); withdrawing it may mean we can no longer fulfil an open order.
4. Data minimisation & no card data
We practise data minimisation: we ask only for what an order requires. We do not collect or store your card, bank or UPI credentials. When online payments go live, they will be handled by a secure third-party payment gateway that processes payment data under its own privacy terms.
5. Who we share data with
We share only what is necessary: your name and address go to India Post for delivery, and, once live, payment details are handled by the payment gateway. We do not sell your personal data or share it for advertising.
6. How long we keep it (retention)
We keep order and contact data only as long as needed to fulfil your order, provide support, and meet legal, accounting and tax requirements — after which it is deleted or anonymised. (Exact retention periods to be confirmed on legal review.)
7. How we protect it (security)
We apply reasonable security safeguards to protect your data against loss, misuse and unauthorised access, and limit access to the people who need it to serve you. No method of transmission or storage is completely secure, but we take care to protect what you share with us.
8. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you.
- Correct or update data that is inaccurate or incomplete.
- Erasure — ask us to delete your data where it is no longer needed and no law requires us to keep it.
- Withdraw consent at any time.
- Grievance redressal — raise a concern with our grievance officer (below).
To exercise any of these, contact us on +91 96320 01818 or via WhatsApp.
9. Cookies
We use only essential cookies needed to run the shop and remember your cart. We do not use advertising or third-party tracking cookies.
10. Children
Our shop is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.
11. Grievance officer
If you have a question or complaint about how we handle your data, please contact our grievance officer:
(Grievance Officer — to be provided)
Email: (to be provided)
Phone: +91 96320 01818