How we collect, use, store, and protect your personal data when you interact with Sahya Agro Organic Farms. Written in plain language because legal documents shouldn't feel hostile.
This Privacy Policy explains how Sahya Agro Organic Farms ("Sahya Agro," "we," "us," or "our") — a farm and food business operated from Saloni Village, Narnaul, Mahendragarh District, Haryana 123001, India — collects, uses, stores, shares, and protects the personal information of our customers, website visitors, subscribers, B2B clients, farm visitors, and any other individual who interacts with us through our website (sahyaagro.com), our WhatsApp Business number, our customer-support email addresses, our physical farm, or any other channel.
This policy is written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 read with the IT (Reasonable Security Practices) Rules 2011, and where applicable, equivalent regulations in jurisdictions where our customers are located, including the GDPR for European Union residents and the UAE's Federal Decree-Law No. 45 of 2021 on Personal Data Protection. By providing your personal information to us through any of these channels, you consent to the practices described below.
If anything in this policy is unclear, or if you would like more detail on a specific practice, write to our Grievance Officer (details in Section 13). We try to respond to substantive privacy questions within five working days.
We collect the minimum personal information necessary to fulfil orders, deliver eggs, run our subscription service, manage B2B accounts, and communicate with you. Specifically, the categories of personal data we may collect are:
We do not collect sensitive personal data as defined under DPDP Act 2023 (such as financial information beyond payment confirmation, biometric data, health records, sexual orientation, or political views) unless you voluntarily provide it for a specific purpose, such as a doctor's recommendation note attached to a bulk Omega Reserve order during pregnancy.
We collect personal data in three primary ways:
Directly from you when you place an order via WhatsApp, fill out our contact form, subscribe to our newsletter, book a farm visit, sign up for a recurring subscription, request a lab report, or otherwise communicate with us. This is the largest source of data we hold and the one over which you have the most control.
Automatically through our website when you visit sahyaagro.com. This includes server logs (IP, timestamp, requested URL), cookies set by our analytics partners (see Section 8), and event-level interaction data captured by Google Analytics 4 and Google Ads conversion tracking.
From third parties in limited circumstances — for example, when a courier partner shares delivery confirmation back to us, when a payment gateway confirms a successful transaction, or when a B2B referral partner introduces a new client to us with their consent. We do not buy or rent customer lists from any third party.
We collect personal data only for specified, lawful purposes. The legal basis varies by data type but generally includes contractual necessity (to fulfil your order), legitimate business interest (to operate efficiently and prevent fraud), legal obligation (to comply with FSSAI, GST, and tax requirements), and consent (for marketing communications, which you can withdraw any time). Specifically, we use your data to:
We do not use your personal data for purposes incompatible with these — for example, we do not profile you for behavioural advertising on third-party platforms beyond standard Google Ads remarketing, we do not sell your data to brokers, and we do not use your data to train artificial intelligence models.
We retain personal data only for as long as necessary to fulfil the purpose it was collected for, plus any period required by law. Specifically:
You can request earlier deletion of your data, subject to our legal obligation to retain certain records (see Section 7).
Under the DPDP Act 2023 and equivalent international frameworks, you have the following rights with respect to your personal data:
To exercise any of these rights, email privacy@sahyaagro.com or write to the postal address in Section 13. We will verify your identity before processing the request to protect your data from unauthorised access.
Our services are designed for adults aged 18 and above. We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you believe we have collected data from a minor without proper consent, please contact our Grievance Officer (Section 13) and we will delete it promptly.
Where parents place orders that benefit children — for instance, ordering Omega Reserve eggs for a school-going child — the data we collect (delivery address, parent's contact) is associated with the parent, not the child.
For Gulf-region customers (UAE, Saudi Arabia, Qatar, Kuwait, Oman, Bahrain), we transfer minimum necessary delivery data (name, address, phone) to our cold-chain freight forwarders and local last-mile delivery partners in those jurisdictions. These transfers are governed by data-processing agreements that require equivalent standards of protection. Our customer support and database operations remain in India.
For European Union residents, we rely on Standard Contractual Clauses (SCCs) for cross-border transfers from the EU to India. We do not currently target the EU market for new customers but maintain compliance for any existing residents.
We follow reasonable security practices and procedures as required under Section 43A of the IT Act 2000 and the Reasonable Security Practices Rules 2011. These include:
While we take security seriously, no system is perfectly secure. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India within 72 hours of becoming aware, in line with DPDP Act 2023 requirements.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or services. The "Last updated" date at the top of this page indicates the most recent revision. Material changes (those that meaningfully affect your rights or our practices) will be communicated to you via email if we have your contact details, and prominently flagged on our website for at least 30 days. Continued use of our services after the change constitutes acceptance of the revised policy.
An archive of previous versions is available on request — email privacy@sahyaagro.com.
For any question, concern, or request regarding this Privacy Policy or your personal data, contact our Grievance Officer:
As required under the DPDP Act 2023 and IT Rules 2011, we have appointed a Grievance Officer to receive and resolve privacy-related complaints.
If you are unsatisfied with our response, you have the right to escalate your complaint to the Data Protection Board of India once it is operational, or to the appropriate authority in your jurisdiction (such as the European Data Protection Board for EU residents).
For general (non-privacy) questions about our products or service, please use our standard channels: WhatsApp +91 90917 92917 or email info@sahyaagro.com.