Privacy Policy

This Privacy Policy explains how Saloni Agencies, the proprietor and owner of the Ashnoor brand (“Ashnoor”, “we”, “us”, or “our”), collects, uses, shares, and protects your personal data when you visit www.ashnoorfoods.com (the “Website”) or otherwise interact with us. In respect of the personal data described here, we act as the Data Fiduciary.

We are committed to handling your personal data responsibly, lawfully, and transparently, in accordance with applicable Indian law — including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and the rules made thereunder.

By using the Website or providing your personal data to us, you acknowledge that you have read and understood this Policy. Please read it together with our Terms & Conditions.

This Policy applies to personal data we collect through the Website and through your direct interactions with us — for example, our enquiry and contact forms, newsletter sign-up, email, telephone, and WhatsApp.

It does not cover third-party platforms. When you buy Ashnoor products from a third-party retailer or online marketplace (such as Amazon, Flipkart, BigBasket, JioMart, Blinkit, Zepto, or Swiggy Instamart), that platform collects and processes your data under its own privacy policy. We are not responsible for how those platforms handle your data. Please review their policies before you transact.

a) Information you give us

• Your name;
• Your email address;
• Your phone or WhatsApp number;
• Your city or location, when you share it;
• Business or trade details, if you make a trade, distribution, bulk, or HoReCa enquiry;
• The content of your message, enquiry, feedback, or review;
• Your email address when you subscribe to our newsletter;
• Any information you include in a job application or other correspondence with us.

b) Information collected automatically

• Your IP address and approximate location derived from it;
• Device and browser type, operating system, and language;
• Pages you view, links you click, referring and exit pages, and time and date of your visit;
• Information collected through cookies and similar technologies (see the Cookies section).

c) Information from third parties

• Aggregated or analytic information from analytics providers (such as Google Analytics);
• Limited information from social-media platforms if you interact with our pages or links there;
• Information from service providers who help us operate the Website.

We do not take payments on this Website. Because we do not sell products or process payments through the Website, we do not collect your card, bank, or UPI details here. Please do not send payment card numbers, passwords, one-time passwords (OTPs), government identifiers (such as Aadhaar or PAN), or health information through our forms or email.

We use cookies and similar technologies to help the Website function, to remember your preferences, and to understand how the Website is used so we can improve it. These generally fall into three groups: essential cookies (needed for the site to work), functional cookies (which remember your choices), and analytics / performance cookies (which help us measure and improve usage, for example through Google Analytics).

You can control or delete cookies through your browser settings, and you can set your browser to refuse some or all cookies. Please note that disabling certain cookies may affect how parts of the Website work. Where required by law, we will seek your consent before setting non-essential cookies.

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for these signals, the Website does not currently respond differently to them; we will update this Policy if that changes.

We use your personal data only for clear, specified purposes. The table below sets out what we do, the data involved, and the basis on which we do it.

We process your personal data on one or more of the following bases, as recognised under the DPDP Act:

• Your consent — given freely, for a specified purpose, when you contact us, subscribe, or otherwise share data with us;
• Certain legitimate uses permitted under the DPDP Act — for example, where you voluntarily provide data for a purpose and have not objected, or for specified operational purposes;
• Compliance with a legal obligation, such as record-keeping, tax, or responding to lawful requests;
• To protect and enforce legal rights, including preventing fraud and misuse.

Where we rely on your consent, you may withdraw it at any time (see “Consent & its withdrawal”). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

We do not sell your personal data. We do not sell, rent, or trade your personal data to anyone for their own marketing. We share it only where necessary, and only as described here.

We may share your personal data with:

• Service providers and processors who help us run the Website and our operations — such as website hosting, email delivery, analytics, IT support, and communications — who are permitted to use the data only on our instructions and under obligations of confidentiality and security;
• Professional advisers, such as lawyers, accountants, and auditors, where reasonably necessary;
• Authorities, courts, or regulators, where we are required to do so by law or to protect our rights, property, or safety, or those of others;
• A successor entity, in connection with a merger, acquisition, restructuring, or sale of business, subject to this Policy;
• Others with your consent or at your direction.

The Website may link to third-party websites, marketplaces, and social-media platforms that we do not control. This Policy does not apply to those services. We are not responsible for their content or privacy practices, and we encourage you to read the privacy policy of any third-party service you visit or transact with.

We maintain reasonable technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction — including encryption of data in transit (HTTPS/SSL), access controls, and limiting access to those who need it.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach, we will act in accordance with applicable law — including notifying the Data Protection Board of India and affected individuals where and as required under the DPDP Act.

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal, accounting, or reporting obligations. When your personal data is no longer needed, we will delete it or irreversibly anonymise it.

For example, we keep newsletter subscription data until you unsubscribe, and we keep enquiry correspondence for as long as reasonably needed to address your request and for a reasonable period thereafter.

As a Data Principal, and subject to the conditions and exceptions under the DPDP Act, you have the following rights in respect of your personal data:

• Right to access — to obtain a summary of the personal data we process about you and the processing activities;
• Right to correction and completion — to have inaccurate or incomplete data corrected, completed, or updated;
• Right to erasure — to have your personal data erased where it is no longer needed for the purpose or as permitted by law;
• Right to grievance redressal — to have your grievances addressed by us (see the Grievance section);
• Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity;
• Right to withdraw consent — to withdraw consent you previously gave, at any time.

To exercise any of these rights, please contact our Grievance Officer using the details below. We may need to verify your identity before acting on a request. We will respond within the timelines prescribed under applicable law.

The Website is intended for a general audience and is not directed at children under the age of 18. We do not knowingly collect personal data of a child without the verifiable consent of a parent or lawful guardian, as required under the DPDP Act. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete it.

We send newsletters and marketing communications only where you have chosen to receive them. Every marketing email includes an easy way to unsubscribe, and you can opt out at any time by using that link or by contacting us. We may still send you non-promotional, service, or transactional messages necessary to respond to a request you have made.

Your personal data is generally stored and processed in India. Where a service provider processes data outside India on our behalf, we take steps consistent with applicable law and this Policy to protect it, and we do not transfer personal data to any country or territory restricted for such transfers by the Government of India.

Where we rely on your consent to process personal data, that consent is voluntary and specific to the purpose for which it is sought. You may withdraw your consent at any time by contacting our Grievance Officer, and it will be as easy to withdraw consent as it was to give it.

If you withdraw consent, we will stop the relevant processing, unless we have another lawful basis to continue. Withdrawal will not affect the lawfulness of processing done before the withdrawal, and some consequences of withdrawal (such as no longer receiving updates you asked for) may follow.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The current version is always posted on this page with the “Last updated” date shown above. Where changes are material, we will take reasonable steps to notify you. Your continued use of the Website after an update means you acknowledge the revised Policy.

If you have any question, concern, or complaint about this Policy or about how we handle your personal data, or if you wish to exercise any of your rights, please contact our Grievance Officer, appointed in accordance with the DPDP Act and the Information Technology Act, 2000 and the rules made thereunder.

We will acknowledge your communication within a reasonable time (ordinarily within 48 hours) and work to resolve it within the timelines prescribed under applicable law. If you are not satisfied with our response, you may have the right to escalate the matter to the Data Protection Board of India.