Privacy Policy

Information We Collect

We collect information you provide directly to us and information generated as you use our services:

• Account Information: Name, mobile number, email address, and password when you register.
• Order Information: Delivery address, billing details, and purchase history when you place an order.
• Payment Information: We do not store card or UPI details. All payment data is handled securely by Razorpay, our PCI-DSS compliant payment partner.
• Communications: Messages you send us via email, contact form, or support channels.
• Device & Usage Data: IP address, browser type, device identifiers, pages visited, time spent, and referring URLs — collected automatically when you visit our website.
• Location Data: Approximate location from IP address, or precise location if you grant permission through the delivery pincode feature.

How We Use Your Information

We use your personal data to:

• Process, fulfill, and deliver your orders
• Send order confirmations, shipping updates, and delivery notifications
• Verify your identity and authenticate transactions via Firebase OTP
• Provide customer support and respond to queries
• Improve our website, product range, and services
• Detect and prevent fraud or unauthorised activity
• Send promotional offers and newsletters — only with your consent, and you may unsubscribe at any time
• Comply with legal obligations under Indian law

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Sharing of Information

We share your data only in the following limited circumstances:

• Delivery Partners: Your name, address, and contact number are shared with our logistics partners solely to fulfil your order.
• Payment Processors: Razorpay receives transaction data to process payments. Please review Razorpay's privacy policy at razorpay.com.
• Firebase (Google): Mobile number is shared with Firebase for OTP authentication. Google's privacy policy applies.
• Legal Requirements: We may disclose information if required by law, court order, or government authority under Indian law.
• Business Transfer: In the event of a merger or acquisition, your data may be transferred as part of that transaction, subject to this policy.

Cookies & Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your cart and wishlist across sessions
• Understand how you navigate our website (analytics)
• Improve page load performance

You may disable cookies in your browser settings; however, some features like cart persistence may not function correctly without them.

Data Security

We implement industry-standard security measures including:

• HTTPS / SSL encryption on all pages
• Hashed and salted password storage (bcrypt)
• Secure OTP-based login via Google Firebase
• Access controls limiting employee data access on a need-to-know basis

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password and not share your login credentials.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services, handle disputes, and comply with legal obligations. Order records are retained for a minimum of 7 years as required under Indian tax and accounting laws.

You may request deletion of your account and personal data at any time by contacting us at privacy@gardenianurseries.com. Please note that some data may be retained for legal compliance even after deletion.

Your Rights

Under applicable Indian data protection law, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Update inaccurate or incomplete data via your account settings
• Deletion — Request erasure of your personal data
• Withdrawal of Consent — Unsubscribe from marketing communications at any time
• Grievance Redressal — Raise a complaint with our Grievance Officer

To exercise any of these rights, please contact us at privacy@gardenianurseries.com. We will respond within 30 days.

Third-Party Links

Our website may contain links to third-party websites (e.g., social media profiles). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies independently.

Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by placing a prominent notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision.

Continued use of our website after changes are posted constitutes your acceptance of the updated policy.