Policies

1. IntroductionSHRIHARI SUPER MARKET (“SHRIHARI SUPER MARKET”, “we”, “us”, or “our”) respects the privacy of customers and visitors and recognizes the importance of responsible handling of personal information.This Privacy Policy explains how SHRIHARI SUPER MARKET may collect, use, store, disclose and protect information obtained through its retail operations, website, customer-support channels, WhatsApp Business communications, RCS communications and other digital services.This Policy is intended to provide transparency regarding the categories of information we may process and the purposes for which such information may be used.Where applicable, our processing practices are designed with reference to India’s Digital Personal Data Protection Act, 2023 and other applicable laws and regulations. The DPDP Act establishes requirements concerning lawful processing, notice, consent, security safeguards, retention and rights of individuals in relation to digital personal data.Third-party platforms, including Meta/WhatsApp, Google, telecom operators, payment providers and technology providers, may have their own privacy policies and terms. Their processing of information may be governed by their respective terms in addition to this Privacy Policy.

2. Information We CollectSHRIHARI SUPER MARKET may collect information that is reasonably necessary for providing retail services, customer support, communications, transaction processing and legitimate business operations.A. User InformationDepending on how you interact with us, we may collect:Name;Mobile number;Email address;Delivery or communication address where required;Purchase or order information;Customer-support enquiries;Feedback;Communication preferences;Information voluntarily provided through forms or messages; andOther information reasonably necessary for a requested service.We do not seek to collect information that is unnecessary for the relevant purpose.B. Device InformationWhen you interact with our website or digital services, certain technical information may be collected automatically by our website, hosting provider, analytics tools or other technology providers.This may include:IP address;Browser type;Device type;Operating system;Approximate technical location information where provided by the technology;Access time;Referring page;Website activity; andTechnical logs.The exact information collected depends upon the technologies implemented on the applicable website.C. CookiesOur website may use cookies and similar technologies to:Keep websites functioning;Remember preferences;Understand website usage;Improve performance;Maintain security;Measure website traffic; andSupport permitted analytics or marketing activities.Cookies may be first-party cookies operated by SHRIHARI SUPER MARKET or third-party cookies operated by technology providers.Users can generally control cookies through their browser settings, although disabling certain cookies may affect website functionality.D. Message DataWhen you communicate with SHRIHARI SUPER MARKET through WhatsApp, RCS, SMS, email, web forms or other digital channels, we may process information contained in those communications.Depending on the communication, this may include:Your telephone number;Name or profile information made available to us;Message content;Order-related information;Product enquiries;Customer-support information;Attachments or media voluntarily submitted by you;Communication timestamps;Delivery or interaction information made available through the relevant platform; andOpt-in or opt-out records.Customers should avoid sending unnecessary sensitive information through ordinary messaging channels.

3. Purpose of Data CollectionSHRIHARI SUPER MARKET may process personal data for purposes including:Processing or facilitating purchases;Responding to customer enquiries;Providing customer support;Sending transaction-related communications;Sending receipts or confirmations;Managing customer requests;Providing information about products or services;Sending promotional communications where appropriate consent or another lawful basis exists;Preventing fraud and misuse;Maintaining business records;Meeting accounting, taxation and legal obligations;Improving customer experience;Maintaining website and system security;Managing WhatsApp and RCS communications;Handling complaints and disputes; andProtecting the rights, property and safety of SHRIHARI SUPER MARKET, customers and others.The Business aims to limit processing to information reasonably necessary for the relevant purpose.

4. Consent for WhatsApp & RCS Data ProcessingWhere consent is required for a particular processing activity, SHRIHARI SUPER MARKET will seek consent through an appropriate mechanism.For WhatsApp communications, customers may provide their telephone number and separately indicate that they wish to receive communications from SHRIHARI SUPER MARKET. WhatsApp’s Business Messaging Policy states that businesses should have the recipient’s number and appropriate opt-in permission before contacting the person through WhatsApp, and businesses are expected to honor requests to stop or block communications.For RCS communications, SHRIHARI SUPER MARKET will use the applicable RCS for Business requirements, including requirements relating to consent, accurate business identification, messaging practices and opt-out mechanisms. Google’s current RCS Acceptable Use Policy requires transparency regarding data practices and appropriate user consent for specified uses of user data.Consent may be collected through a website form, in-store process, digital interaction, WhatsApp interaction, RCS interaction, SMS or another lawful mechanism.Where consent is the applicable legal basis, you may withdraw it, subject to applicable legal exceptions and the practical consequences of stopping the relevant service.

5. Legal Basis for ProcessingDepending on the circumstances, SHRIHARI SUPER MARKET may process personal data based on:Consent;A lawful purpose permitted by applicable law;Voluntary provision of information for a specified service;Fulfilment of a requested transaction or service;Compliance with legal obligations;Fraud prevention and security requirements;Other grounds recognized by applicable Indian law.The DPDP Act provides that personal data may be processed for a lawful purpose where the Data Principal has given consent or where a specified legitimate use applies. The Act also describes consent as requiring a clear affirmative action and provides for withdrawal of consent where consent is the basis of processing.

6. How We Use Collected DataSHRIHARI SUPER MARKET may use information for the purposes described in this Policy.For example, if a customer provides a mobile number while requesting a purchase-related receipt, that number may be used to deliver the requested receipt.If a customer voluntarily contacts SHRIHARI SUPER MARKET through WhatsApp to ask about a product, the Business may use the number and message information to respond to that request.If a customer separately opts into promotional messages, the Business may use the relevant contact information to send permitted promotional communications, subject to applicable law and platform policies.Information may also be used for internal recordkeeping, customer support, fraud prevention, system security, service improvement and legal compliance.SHRIHARI SUPER MARKET does not intend to use personal data for unrelated purposes without an appropriate lawful basis.

7. Data Retention & DeletionSHRIHARI SUPER MARKET will retain personal data only for as long as reasonably necessary for the purpose for which it was collected, unless longer retention is required or permitted by applicable law.Certain transaction, tax, accounting, financial, dispute or legal records may need to be retained for a longer period to comply with statutory obligations or protect legitimate legal interests.Where personal data is no longer necessary and there is no legal reason to retain it, SHRIHARI SUPER MARKET may delete, anonymize or otherwise dispose of it securely.Where consent is withdrawn, SHRIHARI SUPER MARKET will cease the relevant consent-based processing within a reasonable period, subject to processing that remains necessary or authorized under applicable law.The DPDP Act specifically provides for erasure where retention is no longer necessary, subject to situations where retention is required by law.

8. Data Sharing with Third PartiesSHRIHARI SUPER MARKET may use selected third-party service providers to operate its business.Depending on the services actually implemented, these may include:Meta / WhatsAppIf WhatsApp Business or the WhatsApp Business Platform is used, relevant information may be processed through Meta’s WhatsApp infrastructure in accordance with applicable Meta/WhatsApp terms and policies.Google / RCSIf RCS for Business is enabled, relevant information may be processed through Google and associated RCS infrastructure under applicable Google terms, policies and carrier arrangements.Google’s RCS terms recognize that the service operates together with applicable APIs, policies, service providers and other infrastructure.Telecom OperatorsRCS or other telecommunications messaging may involve mobile network operators or other telecommunications infrastructure providers responsible for delivering communications.Payment ProvidersWhere digital payments are used, payment information may be processed by the relevant payment provider according to its own terms and privacy practices.Technology and Hosting ProvidersWe may use website hosting, security, analytics, customer-support, database or software providers where reasonably necessary to operate our services.SHRIHARI SUPER MARKET seeks to use service providers under appropriate contractual and operational arrangements and expects them to process information only for authorized purposes.

9. Security Measures & EncryptionSHRIHARI SUPER MARKET takes reasonable measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, loss or destruction.Depending on the system involved, safeguards may include:Access controls;Password protection;Authentication controls;Secure hosting;Encryption or encrypted transmission where supported;Restricted administrative access;Device and account security;Backup procedures;Monitoring and security controls; andData deletion procedures.No internet or electronic storage system can be guaranteed to be completely secure.Where a third-party messaging platform provides encryption or other security mechanisms, those mechanisms are controlled by the relevant platform and may be subject to its own technical architecture and policies.The DPDP Act requires Data Fiduciaries to implement appropriate technical and organizational measures and reasonable security safeguards against personal-data breaches.If SHRIHARI SUPER MARKET becomes aware of a personal-data breach requiring notification under applicable law, it will take appropriate steps in accordance with the applicable legal requirements.

10. Cookies & Tracking TechnologiesCookies and similar technologies may be used to provide essential website functions and understand how visitors interact with the website.Depending on implementation, cookies may help us:Maintain sessions;Remember preferences;Measure website traffic;Identify technical problems;Improve website performance;Protect against certain forms of misuse; andUnderstand the effectiveness of permitted communications.Third-party analytics or advertising technologies may have their own privacy practices.Users can control many cookie settings through their browser. However, blocking essential cookies may prevent portions of the website from operating correctly.

11. Data Transfer & Storage (India-Based)SHRIHARI SUPER MARKET intends to manage business records and customer information in accordance with applicable Indian law.However, certain technology providers, including global messaging, hosting, analytics, payment or cloud-service providers, may process or store information outside India depending on the infrastructure used by the Business.Where such processing occurs, SHRIHARI SUPER MARKET will seek to use appropriate contractual, technical and organizational measures and comply with applicable legal requirements.Because the Business may depend on third-party infrastructure, the exact physical location of every server used to deliver a particular communication may depend on the service provider.Accordingly, this Policy should not be interpreted as a representation that every byte of data will always remain physically within India unless SHRIHARI SUPER MARKET has specifically implemented and verified such India-only infrastructure.

12. User Rights — Access, Correction & DeletionSubject to applicable law and prescribed procedures, individuals may have rights concerning their personal data, including the ability to request:Information regarding personal data processing;Access to applicable personal information;Correction of inaccurate or incomplete information;Deletion of information where legally applicable;Withdrawal of consent where consent is the basis of processing; andGrievance redressal.Requests should be made using the contact details provided below.To protect customers against unauthorized requests, SHRIHARI SUPER MARKET may request reasonable information necessary to verify the identity or authority of the person making the request.Some information may not be immediately deleted where retention is required by law, necessary for a transaction, required for dispute resolution, or otherwise permitted by applicable law.The DPDP Act provides mechanisms concerning consent withdrawal, erasure, grievance redressal and related Data Principal rights.

13. Policy for ChildrenSHRIHARI SUPER MARKET does not intentionally seek unnecessary personal information from children.Under the DPDP Act, a child is an individual who has not completed eighteen years of age. The Act includes additional requirements concerning verifiable parental or lawful-guardian consent and restricts certain processing involving children.Where a service requires processing of a child’s personal data, SHRIHARI SUPER MARKET will follow applicable legal requirements.Parents or lawful guardians who believe that a child has provided personal information to SHRIHARI SUPER MARKET without appropriate authorization may contact us using the details in this Policy.We do not knowingly use personal information for activities that are prohibited by applicable child-data requirements.

14. Updates to Privacy PolicySHRIHARI SUPER MARKET may update this Privacy Policy from time to time.Updates may be necessary because of:Changes in our services;New digital communication channels;Changes to WhatsApp or RCS functionality;Changes in technology;Changes in applicable law;Changes in data-processing practices; orSecurity or operational improvements.The updated Privacy Policy will be published on the applicable website or otherwise made available through an appropriate channel.The “Effective Date” at the beginning of this Policy indicates the latest version.Customers are encouraged to review this Policy periodically.

15. Governing Law (India)This Privacy Policy is governed by applicable laws of India.Privacy and data-processing practices will be subject to applicable Indian legislation, rules, regulations, governmental notifications and other legally binding requirements as applicable from time to time.Where a particular third-party platform has its own terms governing its independent processing of information, those terms may also apply to the relevant interaction.Nothing in this Policy is intended to remove or restrict a right that cannot lawfully be removed or restricted under applicable law.

16. Contact InformationFor privacy questions, requests concerning personal information, correction requests, deletion requests, consent withdrawal or complaints concerning our handling of personal data, please contact:SHRIHARI SUPER MARKETAddress:
C S NO. 108/39, Shriram Colony, Yeola,
Janta College Samor, Vinchur Road,
Yeola, Maharashtra, Nashik – 423401Email: saranglute@gmail.com
Phone: 9011975687When submitting a privacy request, please provide sufficient information for us to understand the request. We may request reasonable verification before disclosing, correcting or deleting personal information.We will handle privacy-related requests in accordance with applicable law and the procedures applicable at the time the request is received.Last Updated: 28 September 2026