Last updated
What we collect
We collect only what an order actually requires, plus what you volunteer.
- Order data: name, delivery address, phone number and email address.
- Payment data: handled entirely by our payment gateway. We receive a transaction reference and the last four digits of a card — never the full number, expiry or CVV.
- Communications: the contents of emails, WhatsApp messages and contact-form submissions you send us.
- Marketing: your email address, if and only if you subscribe to the newsletter.
- Analytics: aggregated, non-identifying page and device data used to find broken pages and slow routes.
What stays on your device
Your basket, wishlist and recently-viewed list are stored in your browser’s local storage, not on our servers. We cannot read them, and clearing your browser data removes them permanently.
Why we process it
- To bake, pack, ship and — where necessary — refund your order. This is contractual necessity.
- To answer your questions. This is our legitimate interest in running a business people can talk to.
- To send marketing email, only with your consent, which you can withdraw from any email in one click.
- To meet tax, food-safety and accounting obligations under Indian law.
Who we share it with
We do not sell personal data. We never have and we are not going to.
We share the minimum necessary with: our courier partners (name, address, phone — they need this to deliver), our payment gateway, our email service provider for newsletters, and our accountants and tax authorities where law requires it.
How long we keep it
- Order and invoice records: 8 years, as required by Indian tax law.
- Customer service correspondence: 24 months.
- Newsletter subscription: until you unsubscribe, then deleted within 30 days.
- Analytics: aggregated at 14 months; no raw identifiers are retained.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email care@royaldesisnacks.com and we will respond within 30 days.
Note that we cannot delete records we are legally required to retain, such as tax invoices for completed orders. We will tell you clearly if that applies to your request.
Cookies
We use functional cookies and local storage to keep your basket and preferences between visits. These are essential to the site working and cannot be switched off without breaking checkout.
We do not run third-party advertising or cross-site tracking cookies. Embedded videos load only after you press play, and use the privacy-enhanced youtube-nocookie domain.
Children
Our store is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
If we change this policy materially we will update the date at the top of this page and, where the change affects how we use data you have already given us, notify subscribers by email.
