Privacy Policy

This Privacy Policy (“Policy”) is published by Taste of Tradition, a food brand based in Rupnagar, Punjab, India, operating an e-commerce platform for homemade pickles, traditional Indian foods, and festive food collections.

This Policy applies to:

• Every visitor who browses our website (including anonymous visitors).
• Every person who registers an account or places an order with us.
• Every individual who contacts us via WhatsApp, email, phone, or any contact form.
• Every subscriber to our newsletter or promotional communications.

This Policy is compliant with India’s Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection Act, 2019.

We collect information in three ways: information you provide directly to us, information collected automatically when you use our website, and information from trusted third parties involved in processing your order.

A. Information You Provide Directly

B. Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device type (mobile/desktop/tablet).
• Usage Data: Pages visited, time spent on pages, search queries within the website, clicks, scroll depth, and add-to-cart events.
• Cookies & Tracking: Session cookies, preference cookies, and analytics cookies. See Section 07 for full details.
• Referral Data: The URL from which you arrived on our website (e.g., Google, Instagram, direct link).
• UTM Parameters: Campaign source and medium information from ads or social media links (collected anonymously).

C. Information from Third Parties

• Payment Gateways (e.g., Razorpay): Transaction confirmation status, payment reference ID. We do not receive full card numbers or net banking credentials.
• Courier Partners: Shipment status, delivery attempt records, and return-to-origin (RTO) notifications.
• Google Analytics: Aggregated and anonymised website traffic data.

We use your personal data only for the purposes listed below. Each purpose has a clear legal basis under the Digital Personal Data Protection Act, 2023.

We may share your personal data with the following categories of third parties, strictly and only to the extent necessary to provide our services:

All third-party service providers we engage are contractually required to process your data only as instructed by us, to implement adequate security measures, and to not use your data for their own purposes.

• We will never sell your personal data to any third party, advertiser, data broker, or marketing company for commercial gain.
• We will never rent your data to mailing lists, telemarketing companies, or lead generation agencies.
• We will never share your data with competitors or any party whose commercial interests conflict with yours.
• We will never use your data for profiling without your explicit consent for that purpose.
• We will never share your data with social media platforms in ways that link your identity to your purchases, unless you explicitly share our content yourself.
• We will never transfer your sensitive financial data (card numbers, UPI details, net banking credentials) as we never store this information on our servers.

If you ever receive communications claiming to be from Taste of Tradition and requesting financial information, OTPs, or passwords, please treat these as fraudulent. We will never request such information over calls, SMS, or email.

• All online transactions are processed by Razorpay (or our current payment gateway partner), which is PCI-DSS Level 1 certified — the highest standard in payment security.
• Payment pages are served over SSL/TLS encrypted connections (HTTPS). Look for the padlock icon in your browser’s address bar.
• We receive only a transaction status (success/failure) and a payment reference ID upon completion. This is the only payment data stored in our system.
• COD advance payments made via UPI are processed through secure UPI rails governed by the Reserve Bank of India (RBI) and the National Payments Corporation of India (NPCI).
• If you suspect any unauthorised transaction, immediately contact your bank and report it to the RBI Ombudsman at rbi.org.in/CMS or call 14440.

Our website uses cookies to improve your browsing experience, remember your preferences, and understand how visitors interact with our site. Below is a transparent breakdown of every type of cookie we use.

You can control and delete cookies at any time through your browser settings. Note that disabling essential cookies may impair the website’s functionality (e.g., your cart may not persist). For Google Analytics opt-out, visit: tools.google.com/dlpage/gaoptout

We do not use cookies to track you across unrelated websites or to build detailed personal profiles for sale to advertisers.

By registering on our website, placing an order, or providing your contact details, you expressly consent to receive the following categories of communications from Taste of Tradition:

We keep our communication frequency reasonable and relevant. We will never flood you with unnecessary messages.

India’s Digital Personal Data Protection Act, 2023 (DPDPA) grants you specific rights as a “Data Principal” (the person whose data is processed). We are committed to honouring these rights promptly and transparently.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure, in accordance with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Despite our best efforts, no method of data transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable security measures, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Below is our data retention schedule:

Upon expiry of the retention period, data is securely deleted or anonymised so that it can no longer be linked to an individual. You may request early deletion of your account data at any time (subject to legal retention obligations).

If you are a parent or guardian and believe that your child under 18 has provided us with personal data without your consent, please contact our Grievance Officer immediately at [email protected]. We will take prompt action to delete such data from our records.

Our website may contain links to or embed content from third-party websites and services, including:

• Payment gateway pages (Razorpay / similar)
• Courier tracking portals (Delhivery, Shiprocket, DTDC, etc.)
• Social media platforms (Instagram, Facebook, YouTube)
• Google Maps (for address verification or store location)
• WhatsApp Business (for customer support)

Once you navigate to a third-party website or service, this Privacy Policy no longer applies. We strongly encourage you to review the privacy policies of those third-party websites before providing any personal data to them. We have no control over, and assume no responsibility for, the content, privacy practices, or actions of any third-party website or service.

Taste of Tradition is an India-based business. We primarily store and process your data within India. However, certain third-party service providers we use (such as Google Analytics and email delivery services) may process data on servers located outside India.

Where cross-border data transfers occur, we ensure that:

• The transfer is to countries or entities that provide a comparable level of data protection as required under Indian law.
• Appropriate data processing agreements are in place with third-party providers.
• Only the minimum data necessary for the specific service is transferred.

As India’s Digital Personal Data Protection Act, 2023 rules on cross-border transfer are notified by the Central Government, we will update our practices to remain compliant. Any significant changes will be communicated to you via this Policy and, where appropriate, by email.

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address your data privacy concerns, complaints, and rights requests.

We believe in complete transparency and want you to know your rights and the government resources available to you as an Indian consumer. If you are unsatisfied with our resolution, you are always entitled to approach the appropriate government authority.

We may update this Privacy Policy from time to time to reflect changes in our practices, new services, technological developments, or changes in applicable law. We encourage you to review this page periodically.

• The “Last Updated” date at the top of this page will always reflect the most recent revision.
• For material changes that significantly affect how we process your data, we will notify registered users by email or WhatsApp at least 7 days before the changes take effect.
• Your continued use of our website after the effective date of the revised Policy constitutes your acceptance of the updated terms.
• If you disagree with any changes, you have the right to request deletion of your account (subject to legal data retention requirements).

For any privacy-related queries, data access requests, erasure requests, consent withdrawals, or complaints, please reach out through the following channels: