Privacy Policy

Aneet Singh, trading as Kabuli Tea Co., decides how and why your personal data is handled, and is responsible for it.

Legal name

Aneet Singh

Trading as

Kabuli Tea Co.

Constitution

Sole Proprietorship

GSTIN

03OPPPS6242G1ZB

Registered address

14, Loharka RoadImperial CityAmritsar, Punjab 143001

Email

contact@kabuliteaco.com

Telephone

+91 90234 99998

Four separate sets of data, kept apart from each other. Nothing here is combined into a single profile of you.

a. When you place an order

• Your name, email address and telephone number — to confirm the order, send your invoice, and reach you if there is a problem with delivery.
• Your delivery address — recipient name, telephone, address lines, city, state and PIN code. To deliver the tea, and to work out the shipping charge and the correct GST treatment for your state.
• Your order history — what you bought, when, and for how much. To support the order, handle returns, and because tax law requires us to keep records of what we have sold.
• A payment reference from Razorpay — so we can match a payment to an order and refund it if needed. See clause 4.

b. If you create an account

• Your email address and a password. The password is stored only as a one-way hash — we cannot read it, and neither can anyone who obtained a copy of our database.
• Your name and telephone number, and any delivery addresses you choose to save, so you do not have to retype them.
• Whether you have opted in to hearing from us, and when you last signed in. You can change the first and see the second in your account at any time.

c. If you write to us

• Your name, email address and message from the contact form, so we can reply and keep track of what was asked.
• Your browser’s user-agent string, and a hash of your IP address — used only to spot and slow down spam and abuse of the form. The hash is one-way and salted; we do not store the IP address itself and cannot recover it.

d. Visitor analytics

See clause 3 — this is the one worth reading properly.

To understand how the shop is used — which pages people visit, how they arrive, what sells — we run our own analytics on our own server. There is no Google Analytics, no Meta pixel, and no third-party tracker of any kind.

• We do not store your IP address. Your IP is used as one ingredient in a one-way hash that also mixes in a secret value and today’s date. The result is what we store. The IP itself is never written down and cannot be recovered from it.
• That identifier changes every day. Because the date is part of the hash, the code representing you today is different from tomorrow’s. It cannot be used to follow you from one day to the next, or to link your visits over time.
• No name, no email, no account link. Analytics is not joined to your order or your account.
• No cross-site tracking. Nothing is shared with advertising or social networks. It never leaves our server.
• We honour Do Not Track. If your browser sends that signal, we record nothing at all.

What we actually record is: the page path, the site you arrived from (the domain only), whether you are on a phone, tablet or desktop, and events such as viewing a page, adding tea to your bag, starting checkout, and completing an order.

Payments are handled by Razorpay. When you pay, your card or banking details are entered on Razorpay’s systems, not ours.

Razorpay handles your payment data under its own privacy policy and its obligations as a payment processor.

We use the minimum needed for the shop to work:

• Your bag — so the tea you have chosen is still there when you come back.
• Your sign-in session — so you stay signed in while you shop.
• An analytics session marker — as described in clause 3, tied to the daily-rotating code and nothing else.

There are no advertising cookies. Blocking or clearing these will sign you out and empty your bag, but will not otherwise stop you using the site.

We do not sell your data, and we do not share it for anyone else’s marketing. We pass on only what is necessary, to:

• Razorpay — to take payment and process refunds.
• Our delivery partners — the recipient name, address and telephone number, so they can deliver your parcel. Nothing else.
• Resend, our email provider — your email address and the contents of the message, to deliver order confirmations, invoices and account emails.
• Our hosting provider — which stores the site and its database on our behalf.
• Government authorities — where the law requires it, such as tax records.

• Order and invoice records are kept for as long as tax law requires us to keep them. We cannot delete these on request while that obligation stands.
• Account details are kept while your account is open, and removed when you close it — except for anything that forms part of an order record above.
• Contact-form messages are kept while we deal with your query and for a reasonable period afterwards, in case you write again about the same thing.
• Analytics holds nothing that identifies you, and its daily code is useless for identification after the day it was made.

You can ask us to:

• Tell you what we hold about you, and give you a copy.
• Correct anything wrong — you can also edit your name, telephone number and addresses yourself in your account.
• Delete your data, subject to the record-keeping obligations in clause 7.
• Stop sending you marketing — turn off the setting in your account, or just tell us. We will still send transactional emails about an order you have placed.

Write to contact@kabuliteaco.com from the address on your account and we will deal with it. We may need to check who you are before making a change.

India’s Digital Personal Data Protection Act, 2023 gives individuals rights over their personal data. Whatever the position under that Act, the requests above are ones we will honour.

The site is served over an encrypted connection. Passwords are stored as one-way hashes. Access to the database is restricted, and administrative pages require a separate sign-in.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data, we will tell you and the relevant authority without undue delay.

This site is not intended for anyone under 18, and we do not knowingly collect data about children. If you believe a child has given us personal data, tell us and we will delete it.

If we change how we handle data, we will update this page and change the date at the top. The current version is always the one published here.

For anything about your data, write to contact@kabuliteaco.com or telephone +91 90234 99998.

If you are not satisfied with our answer, our Grievance Officer will review it — see Grievance Redressal. We acknowledge every complaint within 48 hours and aim to resolve it within one month.