Privacy Policy | Shine Gold Agro

01The short version

We collect what an order needs and very little else. We do not sell your data, we do not rent it to advertisers, and we do not build a profile of you to resell. Where a third party does see your details — a courier, a payment processor — it is because they are the ones actually delivering the parcel or moving the money.

The rest of this page is the specific version, because “we respect your privacy” on its own tells you nothing.

02What we collect

Account: Your name, email address and — once you add one — your mobile number. The email and password are held by our authentication provider; we never see your password, in any form.
Delivery addresses: Recipient name, address, PIN code and a contact mobile number for each address you save.
Orders: What you bought, what it cost, which coupon you used, the address it went to and any delivery note you wrote. Each order keeps its own frozen copy of the address, so editing a saved address later never rewrites an old invoice.
Payments: The payment reference, amount and outcome that Razorpay reports back to us. We never receive your card number, CVV, UPI PIN or bank credentials — those are entered on Razorpay's own form.
Reviews: Your rating, your written review and the display name shown beside it.
Cart, before you sign in: A list of product ids and quantities held in your own browser's local storage. It never reaches our servers until you sign in, and clearing your browser data removes it entirely.
Technical: Standard server logs — IP address, browser, the page requested and when. These exist to keep the site up and to investigate abuse.

03Why we hold it

Every field above earns its place by doing a job. If you can think of one that does not, tell us and we will drop it.

To deliver what you bought. An address and a working phone number are the two things a courier cannot do without.
To take payment and prove it happened. A payment reference is what lets us find your money if something goes wrong at the bank's end.
To meet legal obligations. Invoices and tax records have to be kept for a period set by law, not by us.
To answer you. Support cannot help with an order it cannot look up.
To keep reviews honest. We check an order exists before accepting a review, which needs a link between the two.

05How it is protected

The site is served over HTTPS, so nothing you type crosses the network in the clear.
Access to your data is enforced in the database itself, not only in application code. Another customer's order is not merely hidden from the interface — the database refuses to return it.
Invoices and product photographs live in private storage. Links to them are signed and expire, so a forwarded link stops working rather than becoming a permanent back door.
We never store card details, so there is nothing there for anyone to steal.

No system is beyond compromise. If one ever affects your data, we will tell you what happened and what to do about it, rather than hoping you do not notice.

06How long we keep it

Account details: Until you ask us to delete the account.
Orders and invoices: Eight years, as tax law requires. These survive account deletion because they have to.
Delivery addresses: Until you delete them. Past orders keep their own frozen copy.
Reviews: Until you delete them, or we remove them under our content rules.
Server logs: Ninety days.
Guest cart: In your browser only. It never reaches us until you sign in.

07What you can ask us to do

Under the Digital Personal Data Protection Act, 2023, you can ask us to show you what we hold, correct it, or erase it. You can do most of it yourself:

See and correct your name, phone and addresses from your profile.
Delete an address or a review from the screen it appears on.
Export or erase everything else — email us and we will answer within 30 days. Records the law requires us to retain are the one exception, and we will tell you exactly which those are.

You never need to justify the request, and asking will not affect how we treat you as a customer.

08Cookies and local storage

We use browser storage for two things, both of which the site needs to function:

Your session — so you stay signed in between pages instead of logging in on every click.
Your guest cart — so what you added survives a refresh before you have an account.

There are no advertising cookies, no third-party trackers and no cross-site pixels, which is why this site does not greet you with a consent banner. There is nothing to consent to.

09Children

This site is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us their details, write to us and we will remove them.

10Getting in touch

For anything on this page — a question, a correction, or a request to erase your data — write to privacy@shineagro.com or use the contact page.

If we have not resolved a privacy complaint to your satisfaction, you may raise it with the Data Protection Board of India.

01The short version

The rest of this page is the specific version, because “we respect your privacy” on its own tells you nothing.

02What we collect

Account: Your name, email address and — once you add one — your mobile number. The email and password are held by our authentication provider; we never see your password, in any form.
Delivery addresses: Recipient name, address, PIN code and a contact mobile number for each address you save.
Orders: What you bought, what it cost, which coupon you used, the address it went to and any delivery note you wrote. Each order keeps its own frozen copy of the address, so editing a saved address later never rewrites an old invoice.
Payments: The payment reference, amount and outcome that Razorpay reports back to us. We never receive your card number, CVV, UPI PIN or bank credentials — those are entered on Razorpay's own form.
Reviews: Your rating, your written review and the display name shown beside it.
Cart, before you sign in: A list of product ids and quantities held in your own browser's local storage. It never reaches our servers until you sign in, and clearing your browser data removes it entirely.
Technical: Standard server logs — IP address, browser, the page requested and when. These exist to keep the site up and to investigate abuse.

03Why we hold it

Every field above earns its place by doing a job. If you can think of one that does not, tell us and we will drop it.

To deliver what you bought. An address and a working phone number are the two things a courier cannot do without.
To take payment and prove it happened. A payment reference is what lets us find your money if something goes wrong at the bank's end.
To meet legal obligations. Invoices and tax records have to be kept for a period set by law, not by us.
To answer you. Support cannot help with an order it cannot look up.
To keep reviews honest. We check an order exists before accepting a review, which needs a link between the two.

05How it is protected

The site is served over HTTPS, so nothing you type crosses the network in the clear.
Access to your data is enforced in the database itself, not only in application code. Another customer's order is not merely hidden from the interface — the database refuses to return it.
Invoices and product photographs live in private storage. Links to them are signed and expire, so a forwarded link stops working rather than becoming a permanent back door.
We never store card details, so there is nothing there for anyone to steal.

No system is beyond compromise. If one ever affects your data, we will tell you what happened and what to do about it, rather than hoping you do not notice.

06How long we keep it

Account details: Until you ask us to delete the account.
Orders and invoices: Eight years, as tax law requires. These survive account deletion because they have to.
Delivery addresses: Until you delete them. Past orders keep their own frozen copy.
Reviews: Until you delete them, or we remove them under our content rules.
Server logs: Ninety days.
Guest cart: In your browser only. It never reaches us until you sign in.

07What you can ask us to do

Under the Digital Personal Data Protection Act, 2023, you can ask us to show you what we hold, correct it, or erase it. You can do most of it yourself:

See and correct your name, phone and addresses from your profile.
Delete an address or a review from the screen it appears on.
Export or erase everything else — email us and we will answer within 30 days. Records the law requires us to retain are the one exception, and we will tell you exactly which those are.

You never need to justify the request, and asking will not affect how we treat you as a customer.

08Cookies and local storage

We use browser storage for two things, both of which the site needs to function:

Your session — so you stay signed in between pages instead of logging in on every click.
Your guest cart — so what you added survives a refresh before you have an account.

There are no advertising cookies, no third-party trackers and no cross-site pixels, which is why this site does not greet you with a consent banner. There is nothing to consent to.

09Children

This site is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us their details, write to us and we will remove them.

10Getting in touch

For anything on this page — a question, a correction, or a request to erase your data — write to privacy@shineagro.com or use the contact page.

If we have not resolved a privacy complaint to your satisfaction, you may raise it with the Data Protection Board of India.

01The short version

02What we collect

03Why we hold it

04Who else sees it

05How it is protected

06How long we keep it

07What you can ask us to do

08Cookies and local storage

09Children

10Getting in touch

01The short version

02What we collect

03Why we hold it

04Who else sees it

05How it is protected

06How long we keep it

07What you can ask us to do

08Cookies and local storage

09Children

10Getting in touch