Privacy Policy & DPDP Notice
In full compliance with India's Digital Personal Data Protection (DPDP) Act, 2023.
1. Data Fiduciary Identity
Under the DPDP Act 2023, the Data Fiduciary responsible for your personal digital data is:
- Entity: Thara Plant Boutique & Cafe
- Address: DSF Grand Plaza, Victoria Extension Road, Thoothukudi, Tamil Nadu 628001, India
- Official Email: tharaplants@gmail.com
- Contact Phone: +91 99168 14991
2. What Personal Data We Collect
We only collect data strictly necessary to fulfill your plant orders and deliver nursery services:
Contact & Identity
Customer Name, Mobile Phone Number, and Email Address used for login and order communication.
Delivery Details
Shipping address, landmark, and postal code for accurate, safe doorstep botanical deliveries.
Order Preferences
Plant varieties, pot sizes, custom pot customization notes, and transaction timestamps.
3. Purpose of Processing (Why We Need It)
In accordance with Section 4 & Section 5 of the DPDP Act 2023, personal data is processed solely for:
- Processing and packing your botanical orders, bouquets, and custom planters.
- Dispatching packages and coordinating doorstep delivery via logistics partners.
- Sending instant order summaries, tracking links, and plant care instructions via WhatsApp and Email.
- Managing your personalized customer account, saved items, and shopping cart.
🚫 Zero Third-Party Advertising: We never sell, rent, or trade your personal data to external advertisers, telemarketers, or broker networks.
4. Data Security & Retention
We implement industry-grade technical and organizational safeguards:
- Encrypted Storage: Account data and order records are stored in encrypted cloud databases (PostgreSQL / Supabase) with SSL/TLS encryption in transit and AES-256 at rest.
- Access Control: Only authorized store personnel handling your specific order packaging have access to delivery details.
- Retention Limits: Data is retained only as long as necessary to provide warranty, return support, and tax/accounting compliance, after which it is safely purged.
5. Your Legal Rights Under DPDP Act 2023
As a Data Principal under Indian Law, you are entitled to the following fundamental rights:
Right to Access
Request a complete summary of the personal data we hold about you and how it is processed.
Right to Correction
Request correction or completion of inaccurate or outdated contact and address information.
Right to Erasure
Request complete deletion of your account and personal records from our active database.
Right to Withdraw Consent
Withdraw your consent at any time for non-essential communications with immediate effect.
6. Cookies & Local Storage
Our website uses minimal, strictly functional cookies and browser storage essential for keeping you logged in, maintaining your active shopping cart, and remembering your theme preferences. We do not run invasive cross-site tracking trackers.
7. Grievance Redressal Officer
In accordance with Section 13 of the DPDP Act 2023, if you have any questions, concerns, or wish to exercise your data rights (including data deletion), please contact our Grievance Officer:
- Designation: Data Grievance Redressal Officer
- Email: tharaplants@gmail.com
- Phone / WhatsApp: +91 99168 14991
- Response Window: Acknowledgement within 48 hours; resolution within 30 business days.
Need Help or Want to Request Data Deletion?
Contact our support and data grievance team directly. We are happy to help you with any inquiries or requests.