Privacy Policy

1. Introduction & Scope

Geodhara Private Limited, operating under the brand name “Geodhara Farm” (“Geodhara Farm”, “Company”, “we”, “us”, or “our”), is a private limited company with its registered office/principal place of business at Raparthi Nagar, Khammam, Telangana 507002, India (CIN: [to be added]). This Privacy Policy explains how we collect, use, disclose, and protect the personal information of visitors to our website and customers who order or subscribe to milk delivery through us (together, “you”).

This Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, to the extent applicable to a business of our size and nature.

By using our website, contacting us on WhatsApp or by phone, or placing an order, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use our website or services. This Policy should be read together with our Terms & Conditions.

2. Information We Collect

We collect information you choose to give us, through the following channels:

Website order/payment form: your name, email address, mobile number, delivery address, any additional notes, and a screenshot of your UPI/PhonePe payment confirmation.
Partner enquiry form: your name, email address, phone number, and message.
WhatsApp and phone: anything you share with us to place an order, confirm your delivery address and serviceability, or ask a question.
Anything you volunteer: such as household milk preferences or standing delivery instructions.

Drafting note for the site owner: this Policy describes the information fields our website forms currently ask for. If a backend, CRM, or third-party form service is added later so that submissions are stored automatically rather than confirmed manually over WhatsApp, please review and update this Policy to match.

We do not currently use cookies, web analytics, advertising pixels, or any other tracking technology on our website. We do not automatically collect browsing behaviour, device identifiers, or location data. If this changes in future, we will update this Policy and, where required by law, seek your consent first.

3. How We Use Your Information

We use the information you provide to:

confirm whether we can deliver to your address and set up your order or subscription;
process and verify your UPI/PhonePe payment and match it to your order;
communicate with you about your order, delivery schedule, subscription status, or any issue with your milk;
respond to enquiries submitted through our Partner With Us page;
maintain records required for accounting, tax, and food-safety traceability purposes under applicable law; and
occasionally share offers or updates relevant to your subscription, where you have not opted out.

We do not use your information for automated profiling, and we do not use it to make any decision that produces a legal or similarly significant effect on you.

We do not sell, rent, or trade your personal information. We only share it:

with our own delivery personnel, to the extent necessary to deliver milk to your address;
with payment platforms (such as PhonePe/UPI, the National Payments Corporation of India, and your bank), which independently process your payment under their own privacy policies - we never receive or store your UPI PIN, bank login, or card details, since these are entered directly in your own payment app;
with WhatsApp/Meta, when you choose to contact us over WhatsApp, subject to WhatsApp’s own privacy policy;
where required to comply with a court order, lawful government request, or applicable law, including the Food Safety and Standards Act, 2006, for traceability purposes; or
with a professional advisor (such as our accountant), strictly for accounting, tax, or legal-compliance purposes, under an obligation of confidentiality.

5. Payment Screenshots

When you upload a screenshot of your UPI/PhonePe payment, we use it only to confirm that your payment was made and to match it against your order. We recommend avoiding screenshots that show your bank account number or other sensitive banking details beyond the transaction confirmation itself. We retain payment screenshots only for as long as reasonably necessary to confirm and reconcile your order, and for the record-keeping period described in Section 7.

6. Cookies & Tracking Technologies

As noted above, our website does not currently set cookies or use third-party analytics or advertising tools. Standard, non-personal server/hosting logs generated automatically by our web-hosting provider may exist purely for the security and technical operation of the website; we do not use these to identify you individually.

7. Data Storage, Retention & Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction, consistent with the “reasonable security practices” standard expected under Indian law. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy:

for active customers, for the duration of your subscription plus a reasonable period thereafter to handle follow-up queries;
for accounting, invoicing, and tax records, for the period required under applicable Indian tax and company record-keeping laws (generally up to eight years); and
for enquiry-form submissions that do not convert into an order, for a reasonable period, after which they may be deleted.

You may ask us to delete your information earlier, subject to Section 8 below.

8. Your Rights

Under the DPDP Act, 2023, you have the right, as a Data Principal, to:

obtain a summary of the personal information we hold about you and the processing activities carried out;
request correction, completion, or updating of your personal information;
request erasure of your personal information, except where we are required to retain it by law (for example, tax or food-safety records);
withdraw any consent you have given us, at any time, without affecting the lawfulness of processing carried out before withdrawal;
nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and
register a grievance with us (see Section 12) and, if unresolved, approach the Data Protection Board of India as and when it becomes operational.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within a reasonable time and, in any case, within the timeline prescribed under applicable law.

9. Children’s Privacy

Our services are intended for individuals who are at least 18 years old and capable of entering into a valid contract under the Indian Contract Act, 1872. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Third-Party Links

Our website may contain links to third-party platforms, such as WhatsApp or your UPI payment app. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The “Last Updated” date at the top of this page indicates when it was last revised. Continued use of our website or services after an update constitutes acceptance of the revised Policy.