Privacy Policy

Aleriya Tea & Co. ("we," "us"), acting as the Data Fiduciary, is deeply committed to upholding the privacy and security of the personal data of our users ("Data Principals," "you"). This Privacy Policy is formulated in strict adherence to India's Digital Personal Data Protection Act (DPDPA), 2023. It articulates our practices concerning the lawful collection, processing, and protection of your data when you interact with our website, www.aleriyatea.in (the "Website").

By visiting this Website, you agree to be bound by the terms and conditions of this Privacy Policy. If you do not agree, please do not use or access our Website. By mere use of the Website, you expressly consent to our use and disclosure of your personal information in accordance with this Privacy Policy.

To provide you with a seamless shopping experience, we collect the minimum data necessary. The types of personal data we may collect include:

• Identity & Contact Data: Includes your full name, billing address, delivery address, email address, and telephone number.
• Financial Data: We do not store any credit/debit card or net banking details. All payments are processed securely through our and our third-party payment gateways.
• Transactional Data: Includes details about your orders, payments, and the products you have purchased.
• Technical Data: Includes your IP address, browser type and version, time zone setting, and operating system. We use this to do internal research on our user's demographics and to help diagnose problems with our server.
• Marketing and Communications Data: Includes your preferences in receiving marketing from us, which is collected only with your explicit consent.

We process your personal data only for specified, explicit, and legitimate purposes, based on the following lawful grounds:

• To Fulfill a Contract: Processing your orders, handling payments, and arranging for delivery.
• With Your Explicit Consent: Sending you promotional emails and offers about new products or special deals. You can withdraw this consent at any time.
• For Legitimate Interests: Improving our website, preventing fraud, and ensuring the security of our services.
• To Comply with a Legal Obligation: Fulfilling our tax and accounting duties as required by Indian law.

We use data collection devices such as "cookies" on certain pages of the Website to help analyse our web page flow, measure promotional effectiveness, and promote trust and safety. "Cookies" are small files placed on your device's storage that assist us in providing our services.

• What are cookies? A "cookie" is a small piece of information stored by a web server on a web browser so it can be later read back from that browser.
• Why we use them: We offer certain features that are only available through the use of a cookie. We also use cookies to allow you to enter your password less frequently during a session. They can also help us provide information that is targeted to your interests.
• Your Choices: Most cookies are "session cookies," meaning that they are automatically deleted from your hard drive at the end of a session. You are always free to decline our cookies if your browser permits, although in that case you may not be able to use certain features on the Website.

We do not sell your personal data. We may, however, share your data with trusted third parties (Data Processors) to perform services on our behalf. These include:

• Logistics Partners: To deliver your orders.
• Payment Gateways: To securely process your payments.
• Marketing Platforms: To manage our email communications, only if you have consented.

We ensure that all third parties respect the security of your data and treat it in accordance with the law, under a valid contract.

Security: We have implemented a robust framework of technical and organizational security measures, including encryption and access controls, to protect your data from unauthorized access, alteration, or disclosure. Our Website has stringent security measures in place to protect against the loss, misuse, and alteration of the information under our control.

Retention: We retain your data only for the duration necessary to fulfill the purposes for which it was collected, as outlined in this policy, or as required by applicable laws. Even if we delete your data, it may persist on backup or archival media for audit, legal, tax, or regulatory purposes for a limited period.

Under the DPDPA, 2023, you possess the following rights over your personal data:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction & Erasure: You can request to correct, update, or delete your personal data, subject to legal and contractual restrictions.
• Right to Nominate: You have the right to nominate another individual who can exercise these rights on your behalf in the event of your death or incapacity.
• Right of Grievance Redressal: You have the right to lodge a complaint with our Data Protection Officer. We will address any grievance you raise within 30 days.

As a Data Principal, you also have a duty not to impersonate another person, not to suppress any material information while providing your personal data, and not to register any false or frivolous grievance.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us immediately so that we can take necessary actions to delete that information.

Our Website may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Our Privacy Policy is subject to change at any time without notice. We may update this policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the changes on this page, and the revised version will be effective as of the "Last Updated" date.

For any inquiries, requests to exercise your rights, or grievances related to this Privacy Policy or your personal data, please contact our designated Data Protection Officer. All communications will be treated with confidentiality and addressed promptly.