How Sattyo Foods handles your personal data

1. Introduction

Sattyo Foods (“Sattyo”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal information responsibly. When you visit our website, place an order, subscribe to updates, or contact customer support, we may process certain information about you as described in this Privacy Policy.

By using sattyo.com or purchasing from us, you acknowledge that you have read this policy. If you do not agree with how we handle personal information, please do not use our website or services.

This document is intended for customers in India and should be read together with our Terms & Conditions, Shipping Policy, and Returns & Refunds Policy.

2. Who we are

Sattyo Foods is a premium roasted snacks brand operating an ecommerce storefront at sattyo.com. For privacy-related requests, you may contact us using the details in Section 15 of this policy.

For the purposes of applicable data protection law in India, including the Digital Personal Data Protection Act, 2023 (DPDP Act) where applicable, Sattyo Foods acts as the data fiduciary responsible for determining how your personal data is processed in connection with our online store and customer relationships.

3. Information we collect

We collect information that you provide directly, information generated when you use our website, and limited information from third-party service providers.

3.1 Information you provide

• Account and profile details: name, email address, phone number, and password (if you create an account).
• Order and checkout details: shipping address, billing address, delivery instructions, order history, and product preferences.
• Payment-related information: transaction references, payment status, and limited billing details. Full card or UPI credentials are processed by our payment partners and are not stored by us.
• Customer support communications: messages, complaints, refund requests, photos of damaged deliveries, and any other information you choose to share with us.
• Marketing preferences: email address and consent choices when you subscribe to newsletters or prodival updates.

3.2 Information collected automatically

• Device and browser data: IP address, browser type, operating system, device identifiers, and general location derived from IP.
• Usage data: pages viewed, products browsed, time spent on site, referral source, and interaction with site features.
• Cookies and similar technologies: see Section 7 for more detail.

3.3 Information from third parties

• Payment gateways confirming whether a transaction succeeded or failed.
• Courier and logistics partners providing delivery status, tracking updates, and proof of delivery where available.
• Analytics, advertising, or email service providers that help us understand site performance and campaign effectiveness.

4. How we use your information

We use personal information for legitimate business purposes connected to operating an ecommerce food brand, including:

• Processing and fulfilling orders, including packing, shipping, delivery, and post-purchase support.
• Communicating about your order status, delivery updates, refunds, or service issues.
• Operating customer accounts, wishlists, carts, and repeat-purchase experiences where available.
• Preventing fraud, abuse, unauthorized transactions, and security incidents.
• Improving our website, product assortment, packaging, and customer experience through analytics and feedback.
• Sending marketing communications where you have opted in or where permitted by law.
• Complying with legal, tax, accounting, and regulatory obligations.
• Enforcing our Terms & Conditions and protecting our rights, customers, and business.

5. Legal basis for processing

Depending on the context, we process personal data on one or more of the following grounds:

• Contract: to process your order and provide the products or services you request.
• Consent: for optional marketing emails, certain cookies, or other activities where consent is required.
• Legitimate interests: to secure our platform, improve our store, prevent fraud, and understand customer needs in a balanced way.
• Legal obligation: to maintain records, respond to lawful requests, and meet applicable regulatory requirements.

Where consent is the basis for processing, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

6. How we share information

We do not sell your personal information. We may share limited data with trusted partners only where necessary:

• Payment processors: such as Razorpay, Stripe, or similar providers to authorize and settle transactions.
• Shipping and logistics partners: to deliver orders, provide tracking, and manage returns or replacements.
• Technology providers: hosting, email delivery, customer support tools, analytics, and website infrastructure vendors.
• Professional advisers: lawyers, accountants, or auditors where reasonably required.
• Authorities: if required by law, court order, or to protect rights, safety, and compliance.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

These partners are expected to process data only for the services they provide to us and in line with applicable confidentiality and security obligations.

7. Cookies and tracking technologies

We use cookies and similar technologies to keep the store functional and to understand how visitors use our site.

• Essential cookies: required for cart, checkout, security, and basic site operation.
• Performance cookies: help us measure traffic, page performance, and shopping behavior in aggregate.
• Preference cookies: remember choices such as region or session state where applicable.
• Marketing cookies: may be used to measure campaign effectiveness or deliver relevant ads on third-party platforms, where enabled.

You can control cookies through your browser settings. Disabling certain cookies may affect checkout, cart persistence, or other site features.

8. Data retention

We retain personal information only for as long as necessary for the purposes described in this policy, including:

• Order and transaction records for accounting, tax, and dispute resolution purposes.
• Customer support records for a reasonable period after your inquiry is resolved.
• Marketing records until you unsubscribe or withdraw consent.
• Website logs and analytics data for a limited period consistent with operational needs.

When data is no longer required, we take reasonable steps to delete, anonymize, or securely archive it.

9. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. These may include access controls, secure hosting environments, and contractual protections with vendors.

No method of transmission over the internet or electronic storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.

10. Your rights and choices

Subject to applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where permitted.
• Withdraw consent for marketing or other consent-based processing.
• Object to or restrict certain processing activities where applicable.
• Lodge a complaint with a relevant authority if you believe your rights have been violated.

To exercise these rights, contact us at hello@sattyo.com. We may need to verify your identity before responding, especially for order-related requests.

11. Marketing communications

If you subscribe to our newsletter or opt in to prodival messages, we may send you product launches, offers, journal content, and brand updates. You can unsubscribe at any time using the link in our emails or by contacting us directly.

Transactional messages related to your orders, delivery, or account are not marketing messages and may still be sent as needed.

12. Children’s privacy

Our website and products are intended for general consumers and are not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Third-party websites and links

Our website may contain links to third-party sites such as social media platforms or payment providers. This policy does not apply to those external sites, and we are not responsible for their privacy practices. We encourage you to review their policies before providing personal information.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The “Last updated” date at the top of this page will be revised when changes are posted. Material changes may also be communicated through the website or by email where appropriate.

15. Contact us

For privacy questions, data requests, or complaints, contact:

• Email: hello@sattyo.com
• Brand: Sattyo Foods
• Location: Kolkata, India

We aim to respond to verified requests within a reasonable timeframe and in accordance with applicable law.