Who we are

Swiss Green Agro (“we”, “us”) operates this website and sells packaged makhana. For the purposes of India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary for the personal data described here, and you are the Data Principal.

What we collect

We collect only what a purchase or an enquiry actually requires.

Consent, and when we do not need it

Where we rely on consent, it is specific, informed and freely given, and we ask for it separately rather than burying it in other terms. Marketing is strictly opt-in — you will not be added to a list because you bought something.

Some processing does not depend on consent because it is a “legitimate use” under the DPDP Act: fulfilling an order you placed, meeting our obligations under tax, FSSAI and consumer protection law, and protecting against fraud or security incidents.

You can withdraw consent at any time, and it must be as easy to withdraw as it was to give. Email us, or use the unsubscribe link in any marketing message. Withdrawing consent does not affect processing already carried out, and we may still need to keep records the law requires us to keep.

Who we share it with

We do not sell your personal data. We share it only with the service providers who make an order possible, and only the minimum each one needs:

• Our e-commerce platform, which hosts the store and processes orders.
• Payment gateways, to take payment and issue refunds.
• Courier and logistics partners, who receive your name, address and phone number to deliver.
• Communication tools, for order emails and SMS or WhatsApp updates.
• Analytics, in aggregated form, to understand how the site is used.
• Our accountants and auditors, and government authorities where the law requires it.

Each provider is engaged under a contract requiring them to protect your data, use it only for the purpose we specify, and apply appropriate security measures.

Cookies

We use cookies and similar technologies to keep your cart working, remember your session, and measure site usage. Essential cookies are required for the site to function. Analytics and marketing cookies are optional and set only where you allow them.

You can clear or block cookies in your browser settings. Blocking essential cookies will break checkout.

How long we keep it

Where an account has been unused for a prolonged period, we will give you advance notice before erasing the data, except where we are legally required to retain it.

Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct data that is inaccurate, and complete or update data that is out of date.
• Erase your data where we no longer need it for the purpose it was collected and no law requires us to keep it.
• Withdraw consent at any time.
• Nominate another person to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance with us, and escalate to the Data Protection Board of India if we do not resolve it.

To exercise any of these, email swissgreenagro@gmail.com from the address on your order. We respond within 30 days. There is no charge.

Children

This site is not directed at children, and we do not knowingly collect data from anyone under 18 without verifiable consent from a parent or legal guardian, as the DPDP Act requires. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children.

If you believe a child has given us personal data, contact us and we will delete it.

How we protect it

Our site runs over HTTPS, payments are handled by PCI-DSS compliant gateways, and access to order data is limited to the people who need it to do their job. Accounts with administrative access use strong authentication.

No system is perfectly secure, and we will not claim otherwise. In the event of a personal data breach we will notify affected users and the Data Protection Board of India without delay, describing what happened, the likely consequences, what we are doing about it, and what you should do.

Transfers outside India

Some of our service providers process data on servers outside India. The DPDP Act permits such transfers except to countries the Central Government restricts. Where data leaves India, it remains subject to the protections described in this policy and to our contracts with those providers.

Changes to this policy

We will update this page when our practices change or as the DPDP Rules phase in. The “last updated” date at the top always reflects the current version. For material changes affecting how we use your data, we will notify you directly.