Privacy Policy

1. Who We Are

GinFarm is an artisan perfume brand based in India, selling long-lasting fragrances online. Our website is ginfarm.in (or your live URL). For any privacy-related queries, contact us at privacy@ginfarm.in.

2. Information We Collect

2.1 Information You Provide Directly

• Name and contact details — first name, last name, email address, phone number
• Billing and shipping address — street address, city, state, pincode, country
• Order information — products purchased, order value, special instructions
• Account information — if you create an account, your login credentials (password stored in encrypted form)
• Communications — messages, queries, or feedback you send us via email or contact forms
• Newsletter subscription — email address if you subscribe for offers and updates

2.2 Information Collected Automatically

• Device and browser information — IP address, browser type and version, operating system
• Usage data — pages visited, time spent on pages, links clicked, referring URLs
• Cookies and similar technologies — as described in Section 8 below
• Location data — approximate location based on your IP address

2.3 Information from Third Parties

• Payment processors — Razorpay provides us with transaction confirmation and limited payment metadata (we never store your full card details)
• Delivery partners — shipping and delivery status updates
• Social media platforms — if you follow or interact with us on Instagram, Facebook, etc.

3. How We Use Your Information

We use your personal information for the following purposes:

• Order fulfilment — processing, packaging, shipping, and delivering your orders
• Payment processing — securely processing your payments via Razorpay
• Customer support — responding to your queries, complaints, and requests
• Account management — if you create an account, to manage your profile and order history
• Marketing communications — sending promotional emails, offers, and new product launches (only if you have opted in)
• Legal compliance — maintaining records required under applicable Indian laws including the Income Tax Act, GST Act, and Consumer Protection Act
• Fraud prevention — detecting and preventing fraudulent transactions and security threats
• Website improvement — analysing usage patterns to improve our website and customer experience

4. How We Share Your Information

We share your information only in the following limited circumstances:

• Payment Processor (Razorpay) — to securely process your payments. Razorpay is PCI-DSS compliant. Their privacy policy is available at razorpay.com/privacy.
• Logistics / Delivery Partners — your name, phone number, and delivery address are shared with our courier partners (e.g., Shiprocket, Delhivery, India Post) to fulfil your order.
• Legal Requirements — if required by law, court order, or government authority under applicable Indian law.
• Business Transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• Service Providers — we may use third-party tools (e.g., email marketing, analytics) who process data on our behalf under strict confidentiality obligations.

5. Payment Security

All payments on GinFarm are processed through Razorpay, a secure and RBI-compliant payment gateway. We do not store, process, or have access to your full credit/debit card numbers, CVV, or UPI PINs at any time. All payment data is encrypted using SSL/TLS technology.

GinFarm is PCI-DSS compliant through our payment processor and we follow industry best practices for data security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Fulfil the purposes outlined in this policy
• Comply with legal obligations (e.g., GST records for 7 years as per Indian tax law)
• Resolve disputes and enforce our agreements

After the retention period, your data is securely deleted or anonymised.

7. Your Rights

As a customer, you have the following rights regarding your personal data:

• Right to Access — request a copy of the personal data we hold about you
• Right to Correction — request correction of inaccurate or incomplete data
• Right to Deletion — request deletion of your personal data (subject to legal obligations)
• Right to Withdraw Consent — opt out of marketing communications at any time by clicking "Unsubscribe" in any email
• Right to Portability — receive your data in a machine-readable format

To exercise any of these rights, email us at privacy@ginfarm.in. We will respond within 30 days.

8. Cookies Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Types of cookies we use:

• Essential Cookies — required for the website to function (e.g., cart, session)
• Analytics Cookies — help us understand how visitors use our website (e.g., Google Analytics)
• Marketing Cookies — used to display relevant ads on social media platforms

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

9. Children's Privacy

Our website is not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with their data, please contact us immediately at privacy@ginfarm.in.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, blogs). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes your acceptance of the revised policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the name and contact details of our Grievance Officer are:

13. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in [Your City], India.