Privacy policy

What we collect

• Contact and account details: name, email address, mobile number and, if you create an account, a securely hashed password (or your Google sign-in identity).
• Delivery details: shipping and billing addresses, and GSTIN if you ask for a business invoice.
• Order details: what you bought, amounts, coupons used, delivery status and invoices.
• Payment details: handled entirely by Razorpay. We receive only a payment reference, status and method (e.g. “UPI”) — never your card number, CVV, UPI PIN or banking password.
• Messages and content: what you send through our contact form or email, and reviews or questions you post on product pages.
• Technical data: IP address, browser type and pages requested, kept in short-lived server logs to keep the site secure and prevent abuse.

Why we use it

• To process, ship and track your orders, issue invoices and handle cancellations, replacements and refunds.
• To reply to your messages and provide customer support.
• To run your account, saved addresses and order history.
• To prevent fraud and abuse, and to keep the website secure (for example, rate-limiting repeated sign-in attempts).
• To meet legal, tax and accounting obligations.
• To send you news and offers — only if you opt in. Every marketing email has an unsubscribe link.

Who we share it with

We share personal data only with service providers who help us run the store, and only what each one needs:

• Razorpay — payment processing.
• Shiprocket and its courier partners — your name, address and phone number to deliver your order.
• Brevo — sending transactional emails (such as replies to your messages) and, if you opted in, our newsletter.
• Google — only if you choose “Sign in with Google”.
• Our hosting provider — servers in data centres that store the website and its database.
• Authorities — when required by law, court order or to protect our rights and customers.

We do not sell or rent your personal data to anyone.

Cookies and local storage

We use only essential cookies: a secure session cookie to keep you signed in, and security cookies used during sign-in. Your cart is remembered in your browser's local storage. We do not use advertising or cross-site tracking cookies.

How long we keep it

• Order and invoice records: as long as tax and accounting laws require (generally 8 years).
• Account data: until you ask us to delete your account.
• Contact-form messages: up to 2 years after your query is resolved.
• Server logs: a few weeks.

How we protect it

The website runs only over HTTPS. Passwords are hashed with Argon2id, access to customer data is limited to our team, and payments never touch our servers. No system is perfectly secure, but we work hard to protect your data and will notify you and the authorities as required by law if a breach affects you.

Your rights

You can ask us to:

• give you a summary of the personal data we hold about you;
• correct or update inaccurate data (you can also edit addresses in My account);
• delete your data, except what we must keep by law;
• withdraw consent to marketing at any time; and
• nominate someone to exercise these rights on your behalf.

Write to support@swadsangam.in from the email address linked to your orders. We respond within 30 days.

Children

Our website is not directed at children under 18, and we do not knowingly collect their personal data.

Grievance officer

For any privacy concern or complaint, contact our Grievance Officer at support@swadsangam.in, or by post to SwadSangam Natural Products, C-403, Arise Ananta, S G Highway, Vasantnagar, Ahmedabad, Gujarat 382481, India. We acknowledge complaints within 48 hours and resolve them within one month.

Changes to this policy

We may update this policy. Significant changes will be highlighted on this page with a new “last updated” date.