Privacy policy

Effective Date: 1 September 2026

Last Updated: 1 September 2026

1. Introduction

Get Pured Foods LLP ("GetPured", "we", "us", "our") operates www.getpured.com and our WhatsApp ordering channel (together, the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you as a data principal.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Platform.

2. The Legal Framework This Policy Follows

We are an Indian company processing the personal data of individuals in India. This Policy is written to comply with:

The Information Technology Act, 2000, in particular Section 43A, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which are the data protection rules currently in operative force in India; and
The Digital Personal Data Protection Act, 2023 (“DPDPA”) and the Digital Personal Data Protection Rules, 2025, notified on 13–14 November 2025. Under the government's phased commencement schedule, provisions relating to the Data Protection Board of India are already in force; provisions relating to Consent Managers take effect from November 2026; and the remaining substantive obligations — including the detailed consent and notice architecture and most data-principal rights procedures — become fully effective on 14 May 2027.

We have designed our data practices, consent flows, and this Policy to already reflect DPDPA principles — purpose limitation, data minimisation, and a genuine ability to withdraw consent — ahead of that final commencement date, rather than waiting until the deadline to comply.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:

Contact and identity information: name, delivery address, billing address, phone number, email address.
Order and transaction information: products viewed, added to cart, or purchased; order history; returns and refund requests.
Payment information: payment method used and transaction status. We do not store your full card number, CVV, UPI PIN, or net banking credentials — these are collected and processed directly by our payment gateway partner, Razorpay, in a PCI-DSS compliant environment. We receive only a payment confirmation and a masked reference (e.g., last four digits of a card).
Account information: if you create an account on the Platform, your username and any preferences you set.
Communications: the content of messages you send us via email, WhatsApp, our contact form, or phone, including any query or complaint you raise.
Device and usage information: IP address, browser type, device identifiers, and how you interact with the Platform (pages viewed, time spent, referring links), collected automatically through cookies and similar technologies — see Section 6.
Marketing preferences: whether you have opted in to receive promotional messages, and your engagement with those messages.

We do not intentionally collect any Sensitive Personal Data or Information as defined under the SPDI Rules (such as health data, financial account passwords, or biometric information) beyond what is strictly necessary to process a payment, which is handled by our payment gateway partner as described above.

4. How We Collect Personal Data

Directly from you — when you browse the Platform, create an account, place an Order, contact customer support, or message us on WhatsApp, Instagram, or Facebook.
Automatically — through cookies and similar technologies when you visit the Platform (see Section 6).
From our service providers — for example, delivery confirmation from our logistics partner, or payment status from our payment gateway.

5. How We Use Your Personal Data

We use your personal data to:

process and fulfil your Orders, including generating GST-compliant invoices, arranging shipping, and handling returns or refunds;
communicate with you about your Order, account, or a support query;
send you marketing communications, where you have opted in, and let you manage or withdraw that consent at any time;
improve the Platform, our Products, and your shopping experience, including through aggregated or anonymised analytics;
detect and prevent fraud and protect the security of the Platform;
comply with our legal obligations, including under tax, consumer protection, and food safety law, and to respond to lawful requests from government or regulatory authorities.

We process your personal data on the basis of your consent (for example, for marketing communications), the performance of our contract with you (for example, to fulfil an Order), and our legal obligations (for example, retaining tax invoices).

6. Cookies and Similar Technologies

The Platform uses cookies and similar technologies to keep your cart contents, remember your preferences, understand how visitors use the Platform, and, where applicable, measure the performance of our marketing. These fall into three broad categories:

Essential cookies, required for the Platform and checkout to function — these cannot be switched off.
Analytics cookies, used to understand traffic and usage patterns in aggregate.
Marketing cookies, used when you interact with our content or advertising on third-party platforms such as Meta (Facebook and Instagram) — see Section 7.

We do not currently use any named third-party analytics or advertising tool beyond what is described in this Policy. If that changes — for example, if we adopt a dedicated analytics or advertising platform — we will name that tool specifically and update this Policy accordingly.

You can control or disable cookies at any time through your browser settings; disabling essential cookies may affect your ability to use the Platform, including checkout. We are working towards a dedicated cookie consent banner that will let you manage non-essential cookie preferences directly on the Platform.

7. How We Share Your Personal Data

We share personal data only with the following categories of recipients, and only as needed for the purposes described:

Payment processing: Razorpay, to process your payment securely.
Logistics and delivery: our courier and logistics partners, including Shiprocket, to deliver your Order and provide tracking updates.
Platform hosting and operations: Shopify, which hosts and powers the Platform.
Social media and messaging platforms: Instagram, Facebook, and WhatsApp, where you interact with us through those channels, or where we run marketing or advertising campaigns on Meta platforms (Facebook and Instagram). Those platforms process data in accordance with their own privacy policies, and Meta may use cookies or similar technology to measure the performance of our advertising and show you relevant ads; you can manage your ad preferences through your Meta account settings. If you contact us or place an order via WhatsApp, that communication is processed by WhatsApp (Meta) in accordance with WhatsApp's own privacy policy, and we retain a record of it for order fulfilment and customer support.
Professional advisors: our accountants, auditors, or legal counsel, where necessary.
Regulators and law enforcement: where required by Applicable Law, court order, or a valid request from a government authority.
In connection with a business transaction: such as a merger, acquisition, or sale of assets, subject to confidentiality safeguards.

We do not sell your personal data to third parties for their own independent marketing purposes.

8. Data Storage, Security, and Retention

8.1 We maintain reasonable security practices and procedures, as required under Section 43A of the IT Act and Rule 8 of the SPDI Rules, to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including access controls and secure transmission (HTTPS) for the Platform.

8.2 No method of transmission or storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security, and you share information with us at your own risk.

8.3 We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, including: order and transaction records for at least the period required under applicable tax law (currently up to eight years for GST records); and account information for as long as your account remains active, or as required to resolve disputes and enforce our agreements. Where you withdraw marketing consent, we stop using your data for marketing but may retain minimal records to honour that preference.

9. Where Your Data Is Stored

Our Platform is hosted on Shopify's infrastructure, which may store or process data on servers located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it continues to receive an appropriate level of protection, consistent with the DPDPA's approach of permitting cross-border transfer except to countries specifically restricted by the Central Government (no such restriction currently applies to our service providers). We currently ship Products only within India; this section concerns data storage by our technology partners, not the delivery of Products.

10. Children's Data

The Platform is not directed at, and is not intended to be used by, children. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, please contact us using the details in Section 14 and we will take steps to delete it.

11. Your Rights

Subject to Applicable Law, you have the right to:

Access the personal data we hold about you;
Correct inaccurate or incomplete personal data;
Withdraw consent to processing based on consent (such as marketing communications) at any time, without affecting the lawfulness of processing carried out before withdrawal;
Request erasure of your personal data, subject to our legal obligation to retain certain records (for example, tax invoices);
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, consistent with the DPDPA's nomination right;
Grievance redressal, as described in Section 14.

To exercise any of these rights, contact us using the details in Section 14. We will verify your identity before acting on your request and respond within a reasonable time, and in any event within the timelines prescribed under Applicable Law.

12. Marketing Communications

We will only send you promotional messages if you have opted in. You can withdraw this consent at any time by:

clicking "unsubscribe" in any marketing email, where applicable;
replying "STOP" to any marketing message on WhatsApp or SMS, where applicable; or
emailing info@getpured.com, or messaging us directly on Instagram, Facebook, or WhatsApp.

Withdrawing marketing consent does not affect transactional messages (such as order confirmations or delivery updates), which we send in the ordinary course of fulfilling your Order.

13. Third-Party Links

The Platform may contain links to third-party websites, including our Instagram and Facebook pages. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

14. Grievance Officer and Complaints

In accordance with Rule 5(9) of the SPDI Rules and in anticipation of the DPDPA's grievance redressal requirements, we have designated the following Grievance Officer for privacy-related complaints, who also serves as our Grievance Officer for consumer complaints generally:

Grievance Officer: Rajveer Hirawat

Email: info@getpured.com

Phone: +91-9330572346

Address: 4A, Mahendra Road, 1st Floor, Bhawanipore, Kolkata – 700025, West Bengal, India

We will acknowledge your complaint within a reasonable time and endeavour to resolve it promptly. Once the Data Protection Board of India is fully operational for complaint handling, you will also have the right to lodge a complaint with the Board; until then, complaints regarding data protection can be pursued through the adjudicating officer mechanism under the IT Act, 2000, or the consumer grievance route described in our Returns & Refund Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or Applicable Law — including as the DPDPA's remaining provisions come into force. We will post the revised Policy on this page with an updated "Last Updated" date, and will provide additional notice for material changes where required by Applicable Law.