TUNGNATH ENTERPRISES

Pure Himalayan Honey

PRIVACY POLICY

Compliant with the Digital Personal Data Protection Act, 2023 (DPDPA)

1. About This Policy

This Privacy Policy describes how Tungnath Enterprises (“Tungnath”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you visit our website (https://tungnath.in/), place an order, or interact with us in any manner.

This policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the rules made thereunder. By using our website or services, you consent to the processing of your personal data as described in this policy.

2. Identity of the Data Fiduciary

Under the DPDPA, the entity that determines the purpose and means of processing personal data is called a Data Fiduciary. Tungnath Enterprises is the Data Fiduciary for personal data collected through this website.

3. Grievance Officer

In accordance with the DPDPA and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following person is designated as the Grievance Officer for addressing your data-related concerns:

4. Personal Data We Collect

We collect personal data that you voluntarily provide or that is automatically generated when you use our website. The categories of data and their purposes are set out below:

We do not collect sensitive personal data (as defined under applicable rules) such as financial account details, health data, biometric data, or political opinions.

5. Legal Basis and Consent

Under the DPDPA, we process your personal data on the following legal grounds:

• Consent: We process your personal data on the basis of free, specific, informed, unconditional, and unambiguous consent, obtained before collection. You may withdraw your consent at any time (see Section 9).
• Contractual Necessity: Processing is necessary to perform a contract with you — for example, to process and deliver your order.
• Legal Obligation: We may process data to comply with applicable Indian laws, court orders, or regulatory requirements.
• Legitimate Uses (State Functions): We may share data with government authorities where required by law.

We will always seek fresh consent if we intend to use your data for a new purpose not covered at the time of original collection.

6. How We Use Your Personal Data

We use your personal data strictly for the purposes for which it was collected. These include:

• Processing and fulfilling your orders and purchases
• Creating and managing your user account
• Sending transactional communications (order confirmation, dispatch, delivery updates)
• Responding to your customer service queries and grievances
• Sending promotional communications about our products and offers — only where you have opted in
• Improving the functionality, security, and content of our website
• Complying with legal, regulatory, and contractual obligations
• Fraud detection, prevention, and investigation

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

7. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We may share it in the following limited circumstances:

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:

Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data.

9. Your Rights as a Data Principal

Under the DPDPA, you have the following rights as a Data Principal (the person whose personal data is being processed). You may exercise these rights by contacting us at help@tungnath.in.

We will respond to your rights requests within 30 days of receipt. In exceptional circumstances, we may extend this by a further 30 days with written notice.

10. Cookies and Tracking Technologies

We use cookies and similar technologies on our website. A cookie is a small text file stored on your device. You can manage your cookie preferences through your browser settings.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the website to function (e.g., shopping cart, login session). These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, login details) to improve your experience.
• Analytics Cookies: Help us understand how visitors interact with our website. Data is aggregated and anonymised where possible. You may opt out.
• Marketing Cookies: Used to show relevant promotional content. Only activated with your explicit consent.

You may withdraw consent to non-essential cookies at any time by adjusting your browser settings or contacting us. Note that disabling certain cookies may affect the functionality of the website.

11. Children’s Privacy

Our services are not directed at children below the age of 18 years. In accordance with the DPDPA, we do not knowingly collect or process the personal data of children without verifiable parental or guardian consent.

If we become aware that we have inadvertently collected personal data of a child without appropriate consent, we will take immediate steps to delete such data from our systems. If you are a parent or guardian and believe your child’s data has been collected, please contact us at help@tungnath.in.

12. Security of Personal Data

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Access controls and authentication mechanisms for internal systems
• Regular security assessments and vulnerability testing
• Staff training on data protection and privacy obligations

In the event of a personal data breach that is likely to adversely affect your interests, we will notify you and the Data Protection Board of India as required under the DPDPA and applicable breach notification rules, without undue delay.

13. Transfer of Personal Data

Your personal data is primarily stored and processed within India. Where we engage third-party service providers located outside India (e.g., cloud hosting), we ensure that such transfers are in compliance with the DPDPA and any rules notified by the Central Government regarding cross-border data transfers.

We will not transfer your personal data to a jurisdiction that the Central Government has restricted by notification under the DPDPA.

14. Links to Third-Party Websites

Our website may contain links to third-party websites or services that are not operated by us. We have no control over, and accept no responsibility for, the privacy practices or content of such websites. We encourage you to review the privacy policy of any third-party website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated “Last Updated” date. Where changes are material, we will notify you by email or by a prominent notice on our website at least 15 days prior to the change taking effect.

Continued use of our website after the effective date of any changes constitutes your acceptance of the revised policy.

16. Data Protection Board of India

If you are not satisfied with our response to your grievance or complaint, you have the right to approach the Data Protection Board of India, established under Section 18 of the DPDPA. Details of the Board and the process for filing complaints will be available on the official website of the Ministry of Electronics and Information Technology (MeitY) at www.meity.gov.in.

17. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us: