Privacy Policy

Effective Date: 25th July, 2026
Last Updated: 25th July, 2026
Version: 2.0

1. Introduction

Welcome to GrowBags.in (hereinafter “the Website”), an initiative by Vividh Prakriti Organic Ventures (hereinafter “we,” “us,” “our,” or “Company”).

Your privacy is critically important to us. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you visit our website, make purchases, interact with our customer service, subscribe to our newsletters, or otherwise engage with us.

We are committed to transparent and responsible data practices. This policy is designed to help you understand:

• What information we collect and why
• How we use and protect your information
• Your rights regarding your personal information
• How to contact us with privacy concerns

Please read this Privacy Policy carefully. By accessing or using GrowBags.in, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use our Website.

2. Information We Collect

We collect information about you in various ways. The types of information we collect include:

2.1 Information You Provide Directly

Personal Identification Information

When you create an account, make a purchase, or contact us, we collect:

• Full name
• Email address
• Phone number / WhatsApp number
• Postal address (including city, state, and PIN code)
• Billing and shipping addresses (if different)
• Date of birth (optional)
• Gender (optional)

Payment Information

• Credit/debit card numbers (processed securely via PCI-DSS compliant payment gateways; we do not store full card details)
• Bank account information (for NEFT/RTGS transfers, if applicable)
• Payment history and transaction records
• Billing amount and currency

Communication Information

• Messages you send via contact forms, email, WhatsApp, or chat
• Feedback, reviews, and ratings you provide
• Correspondence regarding orders, complaints, or returns
• Any attachments or documents you submit

Account Information

• Username and password (encrypted)
• Account preferences and settings
• Wishlist or saved items
• Order history and purchase frequency

2.2 Information Collected Automatically

Usage Information

When you visit our Website, we automatically collect:

• Device Information: Device type, operating system, device ID, mobile network information
• Browser Information: Browser type, version, language preferences, referring website
• IP Address: Used to determine approximate location, detect fraud, and understand traffic patterns
• Browsing Behavior: Pages visited, time spent on each page, click patterns, search queries, products viewed
• Interaction Data: Forms completed, buttons clicked, items added to cart (whether purchased or not)
• Timestamp Information: Date and time of access

Location Information

• Approximate location based on IP address (city/state level)
• GPS location (only if you grant permission on your mobile device)
• Shipping address location (inferred from provided addresses)

Note: We do not collect precise real-time location data without your explicit consent.

Technical Information

• Cookies and similar tracking identifiers
• Session information
• Error logs and crash reports
• Performance metrics (page load times, responsiveness)

2.3 Information from Third Parties

We may receive information about you from:

• Payment Processors: Transaction verification, fraud prevention data
• Shipping/Logistics Partners: Delivery status, address corrections
• Social Media Platforms: If you link your account or login via social media (name, profile picture, email)
• Public Sources: Court records, land registry, or business registrations (for B2B customers, if applicable)
• Other Users: If someone refers you to our Website or sends you a gift

2.4 Sensitive Personal Information

We do not intentionally collect the following sensitive categories of personal data:

• Biometric data (fingerprints, facial recognition)
• Genetic data
• Medical/health information
• Religious or political beliefs
• Racial or ethnic origin
• Sexual orientation
• Caste information

If you voluntarily provide any sensitive information (e.g., in customer support messages), we will handle it with extra care and only use it as necessary to address your concern.

3. Legal Basis for Data Collection and Processing

Under Indian data protection principles and international standards, we collect and process your information based on the following legal grounds:

1. Consent: You have explicitly agreed to data collection (e.g., by checking consent boxes during signup)
2. Contractual Necessity: Processing is necessary to fulfill your purchase order, delivery, or service agreement
3. Legal Obligation: We are required by law to collect and retain certain information (e.g., tax records, consumer complaints)
4. Legitimate Business Interests: We process data to improve our services, prevent fraud, or ensure website security
5. Compliance with Regulations: Including the Information Technology Act, 2000, and the Consumer Protection Act, 2019

You have the right to withdraw consent at any time by contacting us (see Section 11).

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Core Business Functions

• Order Processing & Fulfillment: Processing your purchase, arranging payment, and arranging shipment
• Delivery & Logistics: Sharing your address with shipping partners to deliver products
• Invoicing & Accounting: Generating invoices, maintaining financial records, and tax compliance
• Return & Refund Management: Processing returns, issuing refunds, and resolving disputes

4.2 Customer Service & Support

• Customer Support: Responding to your inquiries via email, WhatsApp, phone, or chat
• Order Updates: Sending you confirmation emails, shipment tracking, and delivery notifications
• Complaint Resolution: Addressing complaints, managing returns, and processing refunds
• Warranty & Guarantee: Managing product warranties or satisfaction guarantees

4.3 Legal & Compliance

• Regulatory Compliance: Complying with GST, tax reporting, and other legal requirements
• Consumer Protection: Responding to consumer complaints filed with authorities
• Fraud Prevention: Detecting and preventing fraudulent transactions or misuse
• Legal Defense: Protecting our legal rights if disputes arise
• Security: Monitoring for unauthorized access, data breaches, or cyber threats

4.4 Marketing & Communication

• Marketing Communications: Sending promotional offers, growing guides, seasonal planting tips, exclusive deals, and newsletters (only with your consent)
• Personalization: Recommending grow bag sizes and types based on your browsing and purchase history (e.g., tomato bags if you browsed tomato content)
• Growing Guidance: Sharing expert growing tips and free guidance content (with or without consent, as this is core service)
• Surveys & Feedback: Requesting reviews, ratings, and growing success stories to improve our services and help other gardeners
• Re-engagement Campaigns: Reminding you about abandoned items in your cart (if you consent); seasonal planting reminders for your region
• Seasonal Alerts: Notifying you about monsoon, spring, or festival gardening seasons relevant to your location

4.5 Analytics & Business Improvement

• Website Analytics: Understanding how users navigate our site, which products are popular, and where improvements are needed
• Trend Analysis: Identifying seasonal demand, customer preferences, and product performance
• A/B Testing: Testing different website designs or features to improve user experience
• Quality Improvement: Using feedback to enhance product quality and customer service

4.6 What We Do NOT Use Your Information For

• Selling or renting your personal information to third parties for their marketing
• Using sensitive data for purposes other than addressing your concern
• Creating detailed personal profiles beyond what’s necessary for transactions
• Automated decision-making that significantly affects you (e.g., credit scoring) without human review

5. Information Sharing & Disclosure

5.1 Third Parties We Share Information With

We may share your information with the following categories of third parties:

Service Providers

We share necessary information with vendors who help us operate our business. These include:

• Payment Processors: Razorpay, PayU, or similar PCI-DSS compliant gateways (card details only when necessary)
• Shipping & Logistics Companies: FedEx, Delhivery, or local couriers (name, address, phone for delivery)
• Email Service Providers: For sending order confirmations and newsletters (if you consent)
• Website Hosting & IT Services: Cloud infrastructure providers, security providers
• Customer Support Tools: Chat software, ticketing systems for managing your inquiries
• Analytics Services: Google Analytics, Mixpanel (anonymized usage data only)

All service providers are contractually bound to use your information only as necessary and maintain confidentiality.

Legal & Regulatory Authorities

We may disclose your information when legally required:

• Tax Authorities: Filing GST returns, income tax reports, or other regulatory filings
• Law Enforcement: If required by court order, police investigation, or warrant
• Consumer Protection Authorities: Responding to complaints filed with Consumer Redressal Commissions
• RBI/Banking Regulators: If you dispute a transaction or initiate a chargeback
• Cybersecurity Agencies: Reporting data breaches or cyber incidents (if required)

5.2 Third Parties We Do NOT Share Information With

We explicitly do NOT:

• Sell your personal information to data brokers, marketing agencies, or advertisers
• Share your information with unrelated businesses for their marketing (without explicit consent)
• Disclose financial information to credit bureaus (except in fraud cases or legal proceedings)
• Share sensitive personal data with any third party without your explicit consent

5.3 Business Transfers

If GrowBags.in or Vividh Prakriti Organic Ventures is acquired, merged, or undergoes asset sale, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

6. Data Retention

We retain your information for as long as necessary to:

• Fulfill your purchase and provide service
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Pursue legitimate business interests

Specific Retention Periods

After the retention period expires, we securely delete or anonymize your information, except where legal obligation requires longer retention.

7. Data Security

7.1 Security Measures We Implement

We implement comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

Technical Security

• SSL/TLS Encryption: All data transmitted between your browser and our server is encrypted using HTTPS
• Payment Gateway Security: PCI-DSS Level 1 compliant payment processors; card details are never stored on our servers
• Firewalls & Intrusion Detection: Network firewalls and intrusion detection systems monitor for unauthorized access
• Access Controls: Passwords, multi-factor authentication, and role-based access for employees
• Database Encryption: Sensitive data is encrypted at rest using industry-standard encryption
• Regular Backups: We maintain secure backups to prevent data loss

Administrative Security

• Employee Training: Staff are trained on data protection and confidentiality obligations
• Confidentiality Agreements: Employees and contractors sign NDAs requiring data protection
• Limited Access: Only authorized personnel can access personal information, and only when necessary
• Audit Logs: We maintain logs of who accesses sensitive information and when

Physical Security

• Secure Facilities: Servers are housed in data centers with restricted access, surveillance, and environmental controls
• Visitor Policies: Third-party access to facilities is restricted and monitored

7.2 Limitations of Security

While we implement strong security measures, no system is 100% secure. The internet carries inherent risks. We cannot guarantee absolute security against sophisticated cyberattacks, insider threats, or unforeseen vulnerabilities.

Your Responsibilities:

• Use a strong, unique password for your account
• Do not share your login credentials with others
• Log out after accessing your account, especially on shared devices
• Keep your device and software updated with security patches
• Report suspicious activity immediately to info@growbags.in

7.3 Data Breach Notification

In the event of a confirmed data breach that compromises your personal information, we will:

1. Notify you without unreasonable delay (within 72 hours if legally required)
2. Provide details of the breach and information affected
3. Explain steps you should take to protect yourself
4. Provide our contact information for questions

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and track your activity. We use cookies to enhance your browsing experience and understand how you use our Website.

8.2 Types of Cookies We Use

8.3 Third-Party Tracking

Our Website may include pixels, beacons, or tags from third parties:

• Google Analytics: Analyzes website usage (anonymized data)
• Facebook Pixel: Enables retargeting ads on Facebook/Instagram
• Payment Processors: Track transaction success/failure
• Shipping Partners: Track delivery status

These third parties have their own privacy policies and are not our responsibility. We recommend reviewing their policies.

8.4 Disabling Cookies

You can control cookies through your browser settings:

• Chrome, Firefox, Safari, Edge: Settings → Privacy & Security → Cookies
• Most Browsers: Accept All, Reject All, or Customize by cookie type

Note: Disabling cookies may affect website functionality (e.g., you may need to log in repeatedly).

8.5 Do-Not-Track Signals

Some browsers include “Do Not Track” (DNT) features. We currently do not respond to DNT signals, but we respect your cookie preferences if you disable them manually.

9. Your Rights & Choices

9.1 Rights Under Indian Law

Under Indian data protection principles and the Consumer Protection Act, 2019, you have the following rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this within 30 days of your request in a structured, commonly used format.

Right to Correct/Update

You can request correction of inaccurate, incomplete, or outdated information. Contact us with details of the information to be corrected, and we will update it within 30 days.

Right to Deletion

You have the right to request deletion of your personal information in the following cases:

• Your information is no longer necessary for the purpose it was collected
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate interests apply
• Your information was collected from a minor without proper consent

Exceptions: We may retain information if legally required (tax, regulatory compliance, dispute resolution).

Right to Data Portability

You can request your personal information in a portable, machine-readable format (e.g., CSV) to transfer to another service provider. We will provide this within 30 days.

Right to Object

You can object to:

• Direct marketing and promotional communications
• Processing for analytics or profiling
• Use of cookies for non-essential purposes

Right to Withdraw Consent

You can withdraw consent for any non-essential processing at any time. This does not affect the lawfulness of processing done before withdrawal.

Right to Lodge a Complaint

If you believe we have violated your data privacy rights, you can file a complaint with:

• District Consumer Disputes Redressal Commission (for consumer disputes)
• National Consumer Disputes Redressal Commission (for appeals)
• State Government Data Protection Authority (if applicable)
• Central Government Cybersecurity Agencies (for data breaches)

9.2 Marketing Communications & Preferences

Opting Out of Marketing

If you no longer wish to receive promotional emails or SMS, you can:

• Click the “Unsubscribe” link at the bottom of any marketing email
• Reply “UNSUBSCRIBE” to any SMS
• Update your preferences in your account settings
• Email us at info@growbags.in with “Unsubscribe” in the subject

We will honor opt-out requests within 5 business days. Transactional emails (order confirmations, shipping updates) cannot be unsubscribed as they are legally required.

SMS Opt-In/Opt-Out

We will only send SMS if you explicitly consent. Standard messaging rates apply. Reply STOP to any SMS to unsubscribe.

Cookies & Targeted Ads

You can disable marketing cookies by:

• Adjusting browser cookie settings
• Using privacy browser extensions (e.g., uBlock, Privacy Badger)
• Visiting www.allaboutcookies.org or www.youronlinechoices.com for ad preference management

9.3 Account Deletion

You can request complete account deletion, which will:

• Delete your profile information and account data
• Retain transactional records as required by law for 6 years
• Not delete information necessary for legal compliance or dispute resolution

10. Children’s Privacy

10.1 Age Restriction

GrowBags.in is not intended for children under 18 years of age. We do not knowingly collect personal information from minors.

If you are under 18: Please do not provide your personal information. If you have done so inadvertently, contact us immediately at info@growbags.in, and we will delete your information.

If you are a parent/guardian: If you believe your child has provided information without your consent, please contact us immediately. We will take steps to delete the information and prevent future collection.

10.2 Parental Consent for Minors

If a minor (13–17 years) wishes to use GrowBags.in with parental consent:

1. A parent/guardian must provide explicit written consent
2. The parent retains all data subject rights on behalf of the minor
3. We recommend parental monitoring of account activity

11. International Data Transfers

If you access GrowBags.in from outside India, your information may be transferred to, stored in, and processed in India and other countries where we operate. These countries may have different data protection laws than your country of residence.

By using our Website, you consent to:

• Transfer of your information to India and other countries
• Processing under Indian and applicable international data protection standards
• Potential differences in data protection levels

We implement Standard Contractual Clauses (if applicable) and other safeguards to protect transferred data.

12. Third-Party Links & Services

Our Website may contain links to third-party websites, social media platforms, or payment gateways. This Privacy Policy does not apply to third-party sites.

Important:

• We are not responsible for the privacy practices of third-party sites
• Review their privacy policies before providing personal information
• Links do not constitute endorsement or affiliation

Common third-party services we use:

• Payment Gateways: Razorpay, PayU (review their privacy policies)
• Shipping: Delhivery, FedEx (review their privacy policies)
• Analytics: Google Analytics (view their policy at google.com/policies/privacy)

13. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

1. Notify you via email or prominent website notice
2. Update the “Last Updated” date at the top of this policy
3. Require your consent if the changes significantly alter how we use your data

Your continued use of our Website after updates constitutes acceptance of the revised Privacy Policy.

14. Contact Us

For Privacy Questions or Requests

If you have questions about this Privacy Policy, wish to exercise your rights, or have privacy concerns, please contact us:

Email: info@growbags.in
Response Time: We aim to respond to all inquiries within 5–7 business days

Mailing Address:
Vividh Prakriti Organic Ventures
[Complete Address]
[City, State PIN Code], India

Phone/WhatsApp: +91-[Your Number]

Escalation

If you are unsatisfied with our response, you may escalate your complaint to:

• District Consumer Disputes Redressal Commission (your jurisdiction)
• National Consumer Disputes Redressal Commission (for appeals)

15. Data Protection Officer (DPO)

For large organizations, appointing a Data Protection Officer is recommended. If you are a DPO for your organization and have questions about our data practices, please contact us.

Version: 2.0
Effective Date: 25th July, 2026
Last Updated: 25th July, 2026

By using GrowBags.in, you acknowledge that you have read, understood, and agree to this Privacy Policy.