Privacy Policy
This policy explains how PlantsGiftCart handles personal data. It needs review by your own legal advisor against the Digital Personal Data Protection Act, 2023 before the site goes live, and the placeholders in square brackets must be completed.
Who we are
PlantsGiftCart is operated by [Registered company name], [registered address]. For any data question, contact [privacy email].
What we collect
When you place an order
Name, billing and delivery address, email address, phone number, company name, GSTIN where supplied, and payment confirmation details. We do not store full card numbers, which are handled by the payment gateway.
When you send an enquiry
Name, company, email, phone number, quantity, occasion, budget and any message you write. This is stored so the gifting desk can respond and follow up.
Recipient address lists
For multi address corporate orders you may supply names, addresses and phone numbers of your employees or clients. We treat this data as belonging to you. We use it only to fulfil that specific delivery, we do not add these individuals to any marketing list, and we delete the list 90 days after the final delivery unless you ask us to retain it for a repeat programme.
When you browse the site
Standard analytics data including pages viewed, approximate location derived from IP address, device type and referring source. Cookies used for the shopping cart and session management are essential and cannot be disabled without breaking checkout.
Why we use it
- To process and deliver your order.
- To respond to enquiries and issue quotations.
- To issue invoices and meet tax and accounting obligations.
- To notify you about the status of an order.
- To improve the website, using aggregated analytics rather than individual behaviour.
We do not sell personal data to anyone, and we do not use recipient address lists for our own marketing.
Who we share it with
- Courier partners, who receive the delivery name, address and phone number needed to deliver.
- Payment gateways, who process your payment.
- Our accountants, for tax and statutory filing.
Each of these receives only the data needed for that function.
How long we keep it
| Data | Retention |
|---|---|
| Order and invoice records | 8 years, as required for tax records |
| Enquiry records | 24 months from last contact |
| Recipient address lists | 90 days after final delivery, unless a repeat programme is running |
| Marketing subscriptions | Until you unsubscribe |
| Website analytics | 26 months, in aggregated form |
Your rights
You may request access to the personal data we hold about you, ask for corrections, ask for deletion where we are not required to retain it, and withdraw consent for marketing at any time. Write to [privacy email] and we will respond within 30 days.
Security
The site runs over HTTPS. Access to order and enquiry data is restricted to staff who need it. Address lists supplied for bulk orders are stored separately from general customer data and deleted on the schedule above.
Cookies
Essential cookies manage your cart and login session. Analytics cookies help us understand which pages are useful. You can block non essential cookies in your browser without affecting your ability to place an order.
Changes
We may update this policy. The current version is always the one published on this page.