Privacy Policy

1. Introduction

Naatu Sandhai ("we," "us," or "our") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our e-commerce platform, engage with our services, or interact with us in any capacity. By using our Platform, you agree to the collection and use of information in accordance with this policy.

2. Scope

This Privacy Policy applies to all users of our Platform, including buyers, sellers, and visitors. It encompasses information collected through our website, mobile applications, and any related services we offer.

3. Information We Collect

We may collect the following types of information:

3.1 Personal Information

Identification Data: Name, email address, phone number, date of birth, gender, and any other information you voluntarily provide when creating an account or placing an order.
Address Information: Billing address, shipping address, and other location-related information necessary for fulfilling your orders.

3.2 Payment Information

Payment details such as credit/debit card numbers, expiration dates, and security codes, processed securely through our payment gateway (PhonePe). We do not store sensitive financial information.

3.3 Account Information

Credentials: Username, password, and other login information for your account.

3.4 Order Information

Transaction Data: Details of products purchased, order history, and preferences related to your orders.

3.5 Technical Data

Device Information: IP address, browser type, operating system, device type, and other technical identifiers.
Usage Data: Information about how you use our Platform, including pages visited, time spent on pages, and clickstream data.

3.6 Location Data

Geolocation Information: Information about your geographical location derived from your device settings or IP address.

4. Purpose of Data Collection

We collect and process your personal data for various legitimate purposes, including:

To Facilitate Transactions: To process and fulfil your orders, manage payments, and provide you with the products and services you request.
To Manage Your Account: To create and manage your account, provide customer support, and communicate with you regarding your account status or changes.
To Improve Our Services: To analyse usage patterns, improve our Platform, and develop new features or services.
To Personalize Your Experience: To tailor our content and recommendations to your preferences and enhance your overall experience.
To Send Marketing Communications: To provide you with information about our products, services, offers, and promotions. You can opt out at any time.
To Comply with Legal Obligations: To comply with applicable laws, regulations, or legal requests, and to protect the rights and safety of our users and the Platform.

5. Legal Basis for Processing Personal Data (GDPR Compliance)

If you are in the European Union (EU), we rely on the following legal bases to process your personal data:

Consent: When you have provided explicit consent for us to process your personal information for specific purposes.
Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party (e.g., processing your orders).
Legal Obligation: When we are required to comply with legal obligations.
Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your rights and interests.

6. Data Sharing and Disclosure

We may share your information in the following situations:

Service Providers: We may engage third-party vendors to assist in providing services, including payment processing, shipping, marketing, and IT support. These service providers have access to your personal information only to perform specific tasks on our behalf and are bound by confidentiality agreements.
Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.
Consent: We may disclose your personal information for any other purpose with your explicit consent.

7. User Rights (GDPR and CCPA Compliance)

You have certain rights regarding your personal information under applicable laws:

Right to Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
Right to Deletion: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.
Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time, where we rely on your consent to process your personal information.
CCPA Rights (California Residents): If you are a California resident, you have the right to:
- Request that we disclose to you the categories and specific pieces of personal information we have collected about you.
- Request that we delete any personal information we have collected from you.
- Opt out of the sale of your personal information.
To exercise any of these rights, please contact us at [email protected].

8. Data Security

We implement reasonable and appropriate security measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:

Data encryption during transmission.
Secure storage practices.
Regular security assessments and updates.
Employee training on data security protocols.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Cookies and Tracking Technologies

Our Platform uses cookies and similar tracking technologies to enhance your experience and collect data about usage patterns. Cookies are small data files placed on your device.

Essential Cookies: Necessary for the operation of our Platform.
Analytical Cookies: Help us understand how our visitors interact with the Platform.
Marketing Cookies: Used to deliver advertisements relevant to you and your interests.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect your ability to use certain features of our Platform.

10. Children's Privacy

Our Platform is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child, we will take steps to delete such information from our records.

11. International Data Transfers

If you are located outside of India and choose to provide information to us, please note that we transfer personal information to India and process it there. By using our Platform, you consent to the transfer of your information to India and its processing in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date at the top of this document. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Platform following the posting of changes constitutes your acceptance of such changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Address: Naatu Sandhai, 714 A, Swamimalai Main Road, Puliyencheri, Baburajapuram, Kumbakonam, Thanjavur District, Tamil Nadu, India - 612302