Privacy Policy
Your privacy matters to us. Learn how we collect, use, and protect your personal information.
Last Updated: January 23, 2026
About This Privacy Policy
This Privacy Policy explains how Pay Amrit Organic Farmer Producer Organisation ("Amrit Milk," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website amritmilkorganic.com or use our services.
This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
Information We Collect
Personal Information You Provide
- Identity Data: Full name, date of birth, gender
- Contact Data: Email address, phone number, delivery address
- Account Data: Username, password, account preferences
- Transaction Data: Order history, payment details, subscription information
- Communication Data: Messages, feedback, support requests
Automatically Collected Information
- Device Data: IP address, browser type, device identifiers
- Usage Data: Pages visited, time spent, click patterns
- Location Data: Approximate location based on IP address
- Cookie Data: Preferences, session information (see Cookie Policy below)
How We Use Your Information
We process your personal data only for specific, lawful purposes:
- Order Fulfillment: Processing orders, managing subscriptions, arranging deliveries
- Payment Processing: Completing transactions through Razorpay, CCAvenue, UPI, or COD
- Customer Service: Responding to inquiries, resolving complaints, providing support
- Communication: Sending order updates, delivery notifications, subscription reminders
- Marketing: Promotional offers, newsletters, product recommendations (with consent)
- Service Improvement: Analyzing usage patterns, improving website functionality
- Legal Compliance: Tax records, fraud prevention, regulatory requirements
Legal Basis for Processing
Under the DPDP Act 2023, we process your data on the following legal grounds:
- Consent: For marketing communications and non-essential cookies
- Contractual Necessity: To fulfill orders and subscription agreements
- Legal Obligation: For tax records, fraud prevention, regulatory compliance
- Legitimate Interests: For service improvement and security measures
Information Sharing & Disclosure
We share your personal information only with trusted service providers and as required by law:
- Payment Processors: Razorpay, CCAvenue for secure payment processing
- Delivery Partners: Our logistics team and third-party couriers for product delivery
- Analytics Providers: Google Analytics, Vercel Analytics for website performance
- Communication Services: WhatsApp, email service providers for notifications
- Legal Authorities: When required by law, court order, or government request
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account Data: Until account deletion or 3 years of inactivity
- Transaction Records: 7 years for tax and legal compliance
- Marketing Preferences: Until consent is withdrawn
- Analytics Data: 26 months from collection
- Support Communications: 2 years from last interaction
Your Rights Under DPDP Act 2023
As a data principal, you have the following rights under Indian law:
- Right to Access: Request a summary of your personal data and processing activities
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Withdraw Consent: Withdraw previously given consent at any time
- Right to Grievance Redressal: Lodge complaints with our Grievance Officer
- Right to Nominate: Nominate another person to exercise your rights
To exercise any of these rights, please contact our Grievance Officer (details below).
Cookie Policy
We use cookies and similar technologies to enhance your browsing experience:
Essential Cookies
Required for website functionality, shopping cart, user authentication. Cannot be disabled.
Analytics Cookies
Help us understand how visitors interact with our website (Google Analytics, Vercel Analytics).
Marketing Cookies
Used for targeted advertising and measuring ad campaign effectiveness (Facebook Pixel, Google Ads).
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.
Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
Data Security
We implement robust security measures to protect your personal information:
- Encryption: SSL/TLS encryption for all data transmission
- Secure Payment: PCI-DSS compliant payment processing through trusted gateways
- Access Controls: Role-based access to personal data
- Regular Audits: Periodic security assessments and updates
- Employee Training: Data protection training for all team members
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.
Grievance Officer
In accordance with the Information Technology Act 2000 and DPDP Act 2023, we have appointed a Grievance Officer to address your concerns:
Name: Grievance Officer, Pay Amrit Organic FPO
Email: grievance@amritmilkorganic.com
Phone: +91 81306 93767
Address: Pay Amrit Organic FPO, Lucknow, Uttar Pradesh, India
Response Time: Within 48 hours of receiving your complaint. Resolution within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.
Questions About Privacy?
If you have any questions about this Privacy Policy or our data practices, please reach out to us.