Privacy

This policy covers Berries and More ("we") and this website. We follow India's Digital Personal Data Protection Act, 2023 and the IT Act, 2000.

What we collect

• When you order: your name, mobile number, email, delivery address and pincode, delivery notes, what you bought and when.
• If you make an account: your name, email, optional mobile number and a password. We store only a scrambled (hashed) form of the password, never the password itself.
• If you sign in with Google: your name, email address and a Google account ID. We never see your Google password.
• When you pay online: Razorpay handles your card, UPI or bank details. We receive only the payment reference, amount and whether it succeeded. Card numbers never reach our servers.
• When you use the site: your IP address and basic browser details, kept in our server logs for security.

We don't collect more than we need to deliver your fruit. We don't buy data about you from anyone.

Why we use it

• To take, deliver and support your order, including calling you on delivery day.
• To send order updates by email, and by WhatsApp if you said yes at checkout.
• To keep invoices and accounts as tax law requires.
• To protect the site and our customers from fraud and abuse.

We don't sell your data. We don't send marketing messages unless you've agreed to them, and every such message tells you how to stop them.

Who we share it with

Only the services we need to run the shop, and only what each one needs:

• Razorpay, to take payments and refunds.
• Our delivery riders: your name, phone, address and delivery notes for that order.
• Meta (WhatsApp), if you chose WhatsApp updates: your mobile number and the order update.
• Our email provider, to send order and account emails.
• Google, only if you choose to sign in with Google.
• Our hosting and backup providers, which store the site's data securely for us.

We'll also share data if the law requires it, for example with tax authorities or the police under a valid order.

Cookies

We use only the cookies the shop needs to work: one to remember your basket and sign-in, and one to protect forms against forgery. We don't use advertising or tracking cookies. If that changes, we'll update this page and ask first where the law requires.

How long we keep it

• Orders and invoices: for as long as Indian tax law requires us to keep them (currently up to 8 years).
• Your account: until you ask us to delete it.
• Server logs: only as long as we need them to keep the site secure.

Keeping it safe

The whole site uses HTTPS. Passwords are hashed. Only staff who need customer details can see them, and owner accounts use two-step sign-in. We back up data every night. No system is perfectly secure; if a breach affects your data, we'll tell you and the Data Protection Board as the law requires.

Your rights

You can ask us to show you the personal data we hold about you, correct it, or delete it (except what tax law makes us keep). You can also withdraw consent for WhatsApp messages at any time, and nominate someone to act for you. You can change your details and password yourself on My account. For anything else, contact us:

• Reply to your order confirmation and we'll pick it up.

Children

The shop is for adults. If you're under 18, please ask a parent or guardian to order for you.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you first.