1. About This Policy
ORA Water (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what personal information we collect through shop.orawater.in, how we use it, who we share it with, and your rights under the Digital Personal Data Protection Act, 2023 (India).
2. Information We Collect
Information you provide
- Name, email, phone number, and password when you register.
- Delivery and billing addresses, pin codes, and location coordinates if you grant access.
- Company name and GSTIN for B2B customers.
- Order history, cart contents, wishlists, and subscription preferences.
- Customer support correspondence, product reviews, and feedback.
Information collected automatically
- Device type, browser, operating system, and IP address.
- Pages visited, search terms, and clickstream events.
- Cookies and similar technologies (see Cookie Policy).
Information from third parties
- Payment metadata from Razorpay (we do not store your full card or UPI credentials).
- Authentication data if you sign in with Google or another federated provider.
3. How We Use Your Information
- Process orders, payments, deliveries, returns, and refunds.
- Operate your account, subscriptions, loyalty points, and referrals.
- Send transactional messages (order updates, OTPs, invoices).
- Send promotional communication where you have opted in (you can opt out at any time).
- Personalise product recommendations and the storefront experience.
- Detect fraud, abuse, and security incidents.
- Comply with tax, accounting, and other legal obligations.
4. Legal Basis
We process personal data on the basis of (a) performance of the contract you enter with us when you place an order, (b) your consent for marketing communications and non-essential cookies, (c) our legitimate interests in operating and improving the service, and (d) compliance with legal obligations.
5. Sharing of Information
We share personal information only as required, with:
- Payment processors (Razorpay) to process payments and refunds.
- Logistics partners to deliver your orders.
- Communication providers for SMS, email, and WhatsApp notifications.
- Cloud infrastructure (Google Cloud / Firebase) where data is hosted.
- Analytics providers (Google Analytics) in pseudonymised form.
- Government authorities when required by law.
We do not sell your personal information to third parties.
6. Data Retention
We retain personal information for as long as your account is active and for the period required to meet tax and legal obligations (typically 8 years for invoices and order records under Indian law). You may request deletion of your account at any time — we will retain only the minimum data required by law.
7. Security
We implement industry-standard administrative, technical, and physical safeguards: encryption in transit (HTTPS), encrypted password storage, role-based access controls, audit logs, and rate limiting. No system is perfectly secure; please use a strong unique password and keep your login credentials confidential.
8. Your Rights
Subject to applicable law, you have the right to:
- Access and obtain a copy of your personal data.
- Correct or update inaccurate or incomplete data.
- Delete your account and associated data (subject to retention obligations).
- Withdraw consent for marketing communications at any time.
- Grievance redressal through our Grievance Officer (details below).
You can exercise most of these rights directly from My Profile, or by emailing us.
9. Children
Our service is not directed at persons under the age of 18. We do not knowingly collect data from minors. If we learn that we have collected information from a minor, we will delete it promptly.
10. International Transfers
Our infrastructure providers may process data in regions outside India. Where data is transferred internationally, we ensure appropriate safeguards as required by applicable law.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the website or by email. Continued use of the service after the effective date constitutes acceptance of the updated policy.
12. Grievance Officer
For privacy concerns, you may contact our Grievance Officer at info@orawater.in. We respond to all valid requests within 30 days as required by applicable law.