Privacy Policy

Last updated: 29 July 2026

This policy explains what personal data Saffron Town collects when you use https://www.saffron.town, why we collect it, who we share it with, and the choices you have. We are the data fiduciary for that data under India's Digital Personal Data Protection Act, 2023.

What we collect

Order and contact details — name, email address, phone number, delivery address and PIN code, plus any note you add to an order.
Order history — what you bought, the amount paid, order status, and how you told us you heard about us.
Enquiries — anything you send us by form, email, phone or the chat widget, including bulk-order enquiries.
Technical data — IP address, browser and device type, pages viewed, and referring links.
Payment status — confirmation of whether a payment succeeded, and the gateway's reference IDs.

We never see or store your full card details. Card, UPI and netbanking credentials are captured directly by our payment gateway on its own systems.

Why we use it

To process, pack, deliver and invoice your order, and to handle refunds or replacements.
To send transactional messages — order confirmation, dispatch and tracking updates.
To answer your questions and provide support.
To check whether we can deliver to your PIN code.
To detect and prevent fraud, abuse and payment disputes.
To measure how our website and advertising perform, so we can improve both.
To meet legal, tax and accounting obligations.

Who we share it with

We do not sell your personal data. We share the minimum necessary with service providers who help us run the shop:

Payment gateway (Razorpay) — to take payment and process refunds.
Courier partners — name, address and phone number, so your parcel can be delivered.
Email and messaging providers — to send order notifications.
Hosting, database and content providers — to run this website and store order records.
Analytics and advertising platforms — Google and Meta, as described below.
Chat support provider — if you start a chat with us on the site.

We may also disclose data where required by law, court order or a lawful government request, or to establish or defend a legal claim.

Advertising and measurement

We use Google Analytics and Google Ads to understand site traffic, and the Meta Pixel to measure the performance of our advertising on Facebook and Instagram. These tools set cookies and collect technical data about your visit.

Sharing purchase data with Meta. When an order is paid, we send a server-side event to Meta's Conversions API so we can measure which adverts led to sales. That event includes your email, phone number, name and PIN code in irreversibly hashed (SHA-256) form — never as plain text — together with the order value and identifiers from Meta's own cookies. Meta uses these hashes to match the purchase to an account where one exists, and processes the data under its own terms.

You can limit this by blocking cookies in your browser, using your device's tracking controls, or adjusting your ad preferences within Facebook, Instagram and Google. Blocking these tools does not affect your ability to place an order.

Cookies

Cookies are small files stored by your browser. We use them to keep the site working (for example, remembering your checkout selection), to measure traffic, and for advertising measurement. You can delete or block cookies in your browser settings; essential cookies are required for checkout to function.

How long we keep it

Order and invoice records are retained for as long as required by Indian tax and accounting law. Enquiries and chat transcripts are kept only as long as needed to deal with the matter and for a reasonable period afterwards. Technical and analytics data is retained according to the retention settings of the relevant platform.

Your rights

Under the DPDP Act, 2023 you may ask us to:

Confirm what personal data of yours we hold, and give you access to it.
Correct or complete inaccurate or outdated data.
Erase data we no longer need for the purpose it was collected, subject to our legal retention duties.
Withdraw consent for non-essential uses such as marketing.
Nominate another person to exercise these rights on your behalf.

Email orders@saffron.town and we will respond within a reasonable period. We may need to verify your identity before acting.

Marketing messages

If you opt in, we may send occasional messages about new harvests and offers. You can opt out at any time using the unsubscribe link or by replying to ask us to stop. Transactional messages about an order you have placed are not marketing and will continue.

Children

This site is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

Security

We use reasonable technical and organisational safeguards, including encrypted connections (HTTPS), access controls on our order database, and payment handling by a PCI-compliant gateway. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy as our practices or the law change. The current version is always published here, and was last updated on 29 July 2026.

Contact and grievances

For any privacy question or complaint, email orders@saffron.town or call +917006846538. See also our Terms of Use, Returns Policy and Shipping Policy.