Privacy Policy

Last updated: October 2026

1. Who we are

Paavni Organic Farms Private Limited (“Paavni”, “we”, “us”) is a company incorporated under the Companies Act 2013, operating from Patna, Bihar. We supply farm-fresh dairy and food products directly to consumers. We operate the website paavniorganic.com and the Paavni mobile application (together, “the Platform”).

Paavni is the Data Fiduciary for the personal data you provide through this Platform, as defined under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. What personal data we collect and why

We collect only the personal data necessary for the purposes described below. We do not collect personal data beyond what is reasonably required.

Personal Data Purpose
Name Customer identification, order and account management
Mobile number Delivery communication, order updates, customer support, service notifications
Delivery address / locality / PIN code Arranging and completing delivery to your home
Email address Account communication, order confirmations, customer support
Order history Order fulfilment, customer support, billing
Wallet and payment records Processing payments, recharges, refunds and billing
Device / IP / website usage data Website security, fraud prevention, service improvement
Marketing preference Sending promotional communications only where you have opted in

We do not collect education, occupation, gender, spending patterns, demographic profiling data or financial account details beyond what is necessary to process your payment through our payment gateway.

3. How we collect personal data

4. Lawful purposes

We process your personal data for the following lawful purposes under the DPDP Act:

(a) Consent-based purposes:

(b) Legitimate uses for which separate consent is not required:

5. Our data processors and service providers

We share your personal data with third-party service providers only to the extent necessary to provide our services. These parties act as our Data Processors and are required to handle your data appropriately.

Processor / Service Purpose Data shared
MilkMaster (ERP) Order management, subscription, delivery, wallet Name, address, phone, order data
Easebuzz Payment gateway — processing payments and refunds Payment transaction data
Brevo (Sendinblue) Email delivery for service notifications Name, email
AiSensy WhatsApp service notifications Name, phone number
Google Fonts / Font Awesome CDN Website display (font loading) Visitor IP address (technical)
WhatsApp / Meta Click-to-chat functionality Initiated by user action

We do not sell your personal data to any third party.

6. Data retention

Category Retention period
Customer account and order data Duration of account + 3 years after closure
Invoice and payment records 7 years (statutory requirement)
Enquiry / support records 2 years from closure
Marketing consent records Until withdrawal + 2 years
Website / security logs 90 days
Deleted account data Anonymised within 30 days of deletion request

7. Security

We maintain appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. However, no method of transmission over the internet is completely secure. If you suspect any data breach or misuse, please contact us immediately at alok@paavniorganic.com.

8. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

To exercise any of these rights, contact us at alok@paavniorganic.com. We will respond within a reasonable time and will tell you if we are unable to fulfil a request and the reason why.

9. Children

Our Platform and services are intended for adults aged 18 and above. We do not knowingly collect personal data from children. If we become aware that a child’s data has been collected without appropriate parental consent, we will take steps to delete it promptly.

10. Data breach

In the event of a personal data breach that is likely to affect you, we will take prompt steps to contain the breach and notify affected individuals in accordance with applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact and Grievance Officer

For privacy-related queries, complaints or to exercise your data rights:

Grievance Officer: Alok Kumar
Email: alok@paavniorganic.com
Company: Paavni Organic Farms Private Limited, Patna, Bihar

We aim to acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India once operational.