Privacy Policy

Last Updated: November 2026 | Effective Date: November 2026

At Saati (“Saati”, “we”, “our”, or “us”), your privacy and data security are of fundamental importance. We are committed to safeguarding personal information entrusted to us by customers, visitors, and users of saati.in.

This Privacy Policy is formulated in strict compliance with:

• The Digital Personal Data Protection Act (DPDPA), 2023 (India);
• Section 43A of the Information Technology Act, 2000;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules);
• The Consumer Protection (E-Commerce) Rules, 2020.

1. Who We Are & Data Fiduciary Details

Under the DPDPA 2023, Saati acts as the “Data Fiduciary” responsible for determining the purpose and means of processing your personal data. Our operational headquarters are situated at:

2. Information We Collect

We only collect personal information strictly necessary to provide our dry fruits, nuts, and natural food delivery services:

• Identity & Contact Data: Full name, WhatsApp mobile number, shipping address, landmark, city, state, postal pincode, and email address.
• Order & Transaction Records: Products purchased, variant weights (e.g. 250g, 500g, 1kg), order value, invoice numbers, delivery preferences, and payment method selected (Prepaid UPI/Card or Cash on Delivery).
• Communications & Support Data: Inquiries, customer support chats via WhatsApp, email feedback, and delivery assistance logs.
• Device & Browsing Data: IP address, browser type, operating system, pages visited, and session cookies to ensure shopping cart persistence.

3. Purpose & Legal Basis for Processing (under DPDPA 2023)

We process your personal data exclusively on lawful grounds, including your explicit consent and legitimate fulfillment purposes:

• Order Fulfillment & Delivery: Printing shipping waybills, dispatching packages via licensed courier logistics partners, and delivering parcels to your doorstep.
• Transactional Communications: Sending WhatsApp OTPs for frictionless login, order confirmation notifications, dispatch tracking links, and delivery status alerts.
• Statutory Tax & Regulatory Compliance: Issuing valid GST tax invoices and maintaining statutory sales records under the Central Goods and Services Tax Act, 2017.
• Customer Care & Grievance Handling: Resolving order questions, transit delays, or replacement requests.
• Security & Fraud Prevention: Authenticating COD orders and detecting fraudulent transactions.

4. Our Strict Non-Sale Pledge & Data Sharing

Saati never sells, rents, leases, trades, or monetizes your personal data to any third party or marketing broker.

We only share essential information with trusted operational partners under strict confidentiality and data protection agreements:

• Courier & Logistics Partners: (e.g., Delhivery, Blue Dart, Shiprocket) — your recipient name, delivery address, pincode, and contact number solely for transit and delivery.
• Payment Gateways: (e.g., Razorpay) — transaction metadata to facilitate secure real-time clearance.
• Transactional SMS & WhatsApp Service Providers: for delivering transactional OTPs and order status notifications.
• Legal & Regulatory Authorities: only when mandated by court summons, law enforcement agencies, or applicable Indian statutory obligations.

5. Data Security & Storage

We adopt reasonable security practices and procedures as mandated under Section 43A of the IT Act, 2000 and IT SPDI Rules, 2011:

• 256-bit SSL / TLS end-to-end encryption for all web communications and data in transit.
• Database firewalls, strict principle-of-least-privilege access controls, and hashed password security.
• Encrypted storage of sensitive system tokens.
• Regular security auditing and vulnerability patching.

6. Data Retention Period

We retain your personal data only as long as necessary to fulfill the purposes for which it was gathered, including satisfying any legal, taxation, FSSAI traceability, accounting, or reporting requirements. Under Indian tax legislation, GST invoice transaction records are maintained for the statutory period of up to 8 years.

7. Your Rights under the DPDPA 2023

As a data principal under Indian law, you possess enforceable statutory rights:

• Right to Access: Request a summary of your personal data processed by Saati.
• Right to Correction & Rectification: Edit or update outdated delivery addresses and personal details directly from your My Account portal or by contacting support.
• Right to Erasure: Request deletion of your account and personal details, subject to statutory retention mandates for past financial transactions.
• Right of Grievance Redressal: Register any concerns regarding personal data processing with our designated Data Protection Officer.
• Right to Nominate: Nominate an individual to exercise your data rights in the event of death or incapacity.

8. Cookies & Local Storage

Our website utilizes necessary first-party session cookies to manage shopping cart contents and remember your logged-in state across page visits. We do not employ intrusive cross-site third-party advertising tracking cookies. You may disable cookies in your web browser settings at any time, though this may prevent the shopping cart and checkout from functioning smoothly.

9. Children's Privacy

Our website is not designed for individuals under the age of 18 without parental consent. We do not knowingly collect personal data from minors. If a parent discovers a child has provided us with personal information, please notify us immediately for prompt deletion.

10. Data Protection & Grievance Officer

For any inquiries regarding this Privacy Policy, your personal data, or to exercise your statutory rights under the DPDPA 2023, you may contact our designated Grievance & Data Protection Officer:

11. Updates to this Policy

We may update this Privacy Policy periodically to reflect technological, operational, or legal developments. When revised, the “Last Updated” date at the top of this document will be updated. Continued use of our platform constitutes your acceptance of the revised terms.