Privacy Policy

Welcome to Hare Krishna Enterprise ("we", "us", "our", or "Krishna Tea"). We operate the website harekrishnaenterprise.in and associated digital properties. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place an order, or interact with us in any other way.

By accessing or using our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not use our services.

This policy applies to all visitors, registered users, customers, and anyone who uses or interacts with our website, mobile applications, or any of our services. It governs all personal data we process as a data controller.

We collect information in two primary ways — directly from you when you interact with our services, and automatically when you use our website.

Information You Provide Directly

• Account Information: Full name, email address, phone number, and password when you create an account.
• Order & Billing Details: Delivery address, billing address, and payment method information when you place an order.
• Communication Data: Messages, feedback, reviews, and enquiries you send us via our contact form, email, or social media.
• Preferences: Your tea preferences, wishlist items, saved addresses, and marketing communication choices.
• Identity Verification: In limited cases such as bulk orders or distributor partnerships, we may request identity documents as required by Indian regulations.

Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, search queries within our site, and referral sources.
• Location Data: General geographic location inferred from your IP address (city/state level — not precise GPS).
• Cookies & Tracking: As detailed in Section 04 below.

We use your personal information only for legitimate, clearly defined purposes. We do not use your data in ways that would be unexpected or incompatible with the reason it was collected.

• Order Fulfilment: To process, confirm, ship, and deliver your orders and communicate relevant updates throughout the process.
• Account Management: To create and maintain your customer account, authenticate your identity, and enable you to manage your preferences and order history.
• Customer Support: To respond to enquiries, resolve disputes, and provide assistance when you contact our team.
• Payment Processing: To facilitate secure payment transactions through our authorised payment processors.
• Marketing & Promotions: With your consent, to send newsletters, product updates, seasonal offers, and promotional communications. You may opt out at any time.
• Personalisation: To tailor your website experience, product recommendations, and communications based on your preferences and behaviour.
• Analytics & Improvement: To understand how visitors use our website, identify issues, and continuously improve our products and services.
• Legal Compliance: To comply with applicable Indian laws, regulations, court orders, and other legal obligations.
• Fraud Prevention & Security: To detect, prevent, and investigate fraudulent transactions, security breaches, and other misuse of our services.

Our website uses cookies and similar technologies to enhance your experience, remember your preferences, and help us understand how visitors use our site. A cookie is a small text file placed on your device when you visit a website.

Types of Cookies We Use

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Essential cookies cannot be disabled as they are strictly necessary for the site to operate.

We do not sell, rent, or trade your personal information. We share your data only with trusted partners who help us deliver our services, and strictly only for the purposes described in this policy.

• Payment Processors: Secure payment gateways (such as Razorpay or Paytm) receive billing and transaction details to process payments. They operate under strict PCI-DSS compliance.
• Logistics & Delivery Partners: Courier and delivery companies receive your name, delivery address, and phone number to fulfil and track your orders.
• Cloud & Hosting Providers: Our website is hosted on secure cloud infrastructure. Data is stored in servers located in India.
• Email & Marketing Platforms: We use email service providers to send transactional and marketing emails. These providers are prohibited from using your data for their own purposes.
• Analytics Providers: Aggregated, anonymised usage data is shared with analytics tools (e.g., Google Analytics) to help us improve our services.
• Legal Authorities: We may disclose your data to government authorities, courts, or law enforcement agencies when legally required or to protect our rights and the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new entity, subject to the same privacy protections.

The security of your personal information is a top priority for us. We implement industry-standard technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security) / HTTPS.
• Encryption at Rest: Sensitive data, including passwords, is stored using strong one-way hashing algorithms (bcrypt). We never store plain-text passwords.
• Access Controls: Access to personal data is restricted to authorised staff on a strict need-to-know basis, with role-based access permissions.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration tests on our systems.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your data, we will notify you as required by applicable law.
• Payment Security: We do not store your full card details. Payment processing is handled by PCI-DSS Level 1 certified payment processors.

We respect your rights over your personal data. You may exercise any of the following rights at any time by contacting us at the details provided in Section 12.

We will respond to all legitimate requests within 30 days. In exceptional cases, this may be extended by a further 30 days, and we will notify you accordingly. There is no charge for exercising your rights unless requests are manifestly unfounded or repetitive.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements.

After the applicable retention period, your data will be securely deleted or anonymised so it can no longer identify you. You may request early deletion of your account and associated data by contacting us, subject to our mandatory legal retention requirements.

Our website and services are not directed to, and we do not knowingly collect personal information from, children under the age of 18 years. Our products and the process of creating an account require users to be adults capable of entering into a legally binding contract under the Indian Contract Act, 1872.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at the details in Section 12 and we will promptly address your concern.

Our website may contain links to third-party websites, social media platforms, and services — including Facebook, Instagram, Google, WhatsApp, and our payment gateway providers. These links are provided for your convenience and information only.

We have no control over and are not responsible for the privacy practices or content of any third-party websites. When you click on external links, you leave our website and your information is then subject to the privacy policy of that third-party site. We strongly encourage you to review the privacy policies of any website you visit.

• Social Media Plugins: Our website includes social sharing buttons. These may collect your IP address and set cookies. Their use is governed by the respective social platform's privacy policy.
• Payment Gateways: When you make a payment, you will be redirected to or interact with a third-party payment processor. We do not receive or store your full card details.
• Google Analytics: We use Google Analytics to analyse website usage. This may involve Google placing cookies on your device. You can opt out using the Google Analytics Opt-out Browser Add-on.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will always post the revised policy on this page and update the "Last Updated" date at the top of this document.

For significant changes that materially affect your rights or how we use your data, we will provide prominent notice — such as a banner on our website or a notification email to registered users — at least 14 days before the change takes effect. Your continued use of our website after any changes constitutes acceptance of the updated policy.

• Material changes will be notified via email to registered users.
• The "Version" number in the page header is updated with each revision.
• A summary of key changes will be provided where significant updates are made.
• Historical versions of this policy are available on request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to get in touch. Our dedicated privacy team will respond to all enquiries within 30 days.

For general queries about this policy, to exercise your rights, or to report a privacy concern, use any of the following: