Sridha & Sons ("SRIDHA", "we", "us") runs this website and our store at Shop No. 112 & 113, Ground Floor, Raahat Plaza, Vadapalani, Chennai - 600 026. This policy explains what personal data we collect, why, who we share it with, how long we keep it and the choices you have. We follow India's Digital Personal Data Protection Act, 2023.
What we collect, and why
- To deliver your order: your name, mobile number, delivery address and, if you give it, your email. We need these to pack, deliver and contact you about the order, and to issue a GST invoice.
- To run your account (optional): your name, mobile number, email, a scrambled (hashed) version of your password, saved addresses, wishlist and order history, and a profile photo if you add one (we keep a small square copy without location or camera details, and delete it if you remove it or delete your account). If you sign in with Google or Apple, we receive your name, email and an account ID from them.
- To keep the site secure: the devices you sign in from (browser type and a shortened IP address), shown to you under Profile & security, and short-lived one-time codes.
- Reviews: if you rate an order, your rating and comments. We only show them on the website if you tick the box that allows it.
- Campaign links: if you reach us through one of our tagged links (for example from Instagram), the campaign name is saved with your order so we know which posts work. It is kept in your browser tab only, not in a cookie, and is not linked to other websites.
- Visit statistics (only if you choose "Allow all"): which pages you open, where on a page you tap, how far you scroll, which products you look at or add to your basket, what you search for, and which link brought you here (for example a WhatsApp or Instagram share). A random visit id lasts while your browser tab is open. This tells us what to stock and how to make the shop easier to use.
- Repeat-visit code (only if you choose "Allow all"): a random code in a cookie (sridha_vid) so we can tell new visitors from returning ones. It contains nothing about you and lasts up to 1 year. If you then sign in or place an order, we link the code to your account or order, so that in our totals we can see how many visitors create accounts and buy, and what led them there. We use that only to improve the shop, never for advertising, and never share it.
- Visit records for every page request: like every website, our server notes each page request: the time, the page, the kind of visitor (a person's browser, a search engine, an AI assistant, a link preview, a monitoring tool or another automated program), the type of device, and an approximate place (country, region and city, worked out by our security provider from the connection). For people who choose "Allow all" and for automated programs we also keep a scrambled fingerprint of the network address, which lets us count different connections and spot abuse but cannot be turned back into the address. We keep the real network address only for programs that name themselves (for example Googlebot or an AI crawler) so we can verify or block them. We do not look people up by network address, and these page records are not linked to your name, orders or account.
We do not collect your date of birth, Aadhaar, PAN or any card or bank details. We do not use advertising or tracking companies, cameras, microphones or any biometric data, and we do not build profiles of you for advertising.
Why we use it, and on what basis
- Your consent: visit statistics, the repeat-visit code and the recently-viewed cookie, only after you choose "Allow all". You can change your mind at any time with Cookie settings in the footer, and we stop collecting.
- Running your order and account: to do what you asked, and to meet tax law.
- Keeping the site safe and working: the visit records and network fingerprints described above, to tell people from automated programs, to block abuse, and to keep the site fast. This is a reasonable use that does not go beyond what a visitor to a website expects.
We use this information to improve the shop, decide what to stock and understand how people find us, including through search engines and AI assistants. We do not use it to profile you for advertising, and we never sell it.
Where it is stored and who processes it
Visit records are stored on our own server. Our website runs behind Cloudflare, which may process connection details, including the network address and approximate location, in many countries to protect and speed up the site. Search engines and AI assistants that visit our pages act on their own behalf and have their own policies.
Payments
Online payments are processed by Razorpay. Your card, UPI PIN and bank details go directly to Razorpay. We never see or store them.
Who we share it with
Only what each service needs to do its job:
- Delivery partners: your name, mobile number and address, to deliver your order.
- Razorpay: order amount and contact details, to take your payment.
- SMS and email providers: your mobile number or email, to send sign-in codes and order updates.
- Google and Apple: only if you choose to sign in with them.
- Cloudflare: our website runs behind Cloudflare, which protects it from attacks. Pages you visit pass through its network.
- Government authorities: only when the law requires it, for example GST records.
We do not sell or rent your personal data to anyone.
How long we keep it
- Orders and invoices: for 8 years, because GST law requires us to keep tax records.
- Your account: until you delete it. You can do this any time from Profile & security.
- Sign-in codes: a few minutes. Device sessions: until they expire or you sign out.
- Baskets of visitors who never order: deleted after 60 days without activity.
- Visit statistics, visit records and repeat-visit codes: deleted automatically after 90 days.
Your rights
You can ask us to:
- show you the personal data we hold about you;
- correct or update it;
- delete it (we will keep only what the law makes us keep, such as invoices);
- withdraw any consent you gave, for example to show your review or to count your visits (use Cookie settings in the footer and choose "Essential only").
Signed-in customers can see and edit most details under Account → Profile & security, and can delete their account there. Anyone can send a request from our Privacy request page at /privacy-request, or contact our grievance officer: Pranav Srinivasan, COO, orders@sridhaandsons.in, 98424 59100 / 95241 79000. We reply within 7 days and act on the request within 30 days. If you are unhappy with our response, you may complain to the Data Protection Board of India.
Children
Our website is meant for adults. You must be 18 or older to create an account or place an order. We do not knowingly collect data from children. If you believe a child has given us their data, contact us and we will delete it.
Cookies
We use only the cookies the site needs to work, plus two optional cookies you can accept or refuse: one that remembers recently viewed products and one random code that tells us whether you are a new or returning visitor. See our Cookie Policy at /policies/cookies.
Security
Passwords are stored scrambled (hashed), all pages use HTTPS, and only authorised staff can see orders. If a data breach ever affects you, we will tell you and the authorities as the law requires.
Changes
We will update this page if our practices change and show the date at the top.