Privacy Policy

1. Data Controller

Golden Route Spices Traders, Nagavara, Bangalore, Karnataka 560045, India, is the data controller for personal information collected through this website. You can reach our data-protection contact at admin@goldenroutespices.co.in.

2. Information We Collect

We collect only the information required to fulfil your orders, respond to your enquiries and improve our service. This includes:

• Contact details you submit — name, email address, phone / WhatsApp number, company (optional).
• Shipping details for orders — postal address, city, state, pincode, country.
• Order history — items purchased, order value, payment status, delivery status.
• Account details — when you sign in with Google, we receive your name, email and profile picture from Google. We do not receive or store your Google password.
• Technical data — IP address, browser type, device, and pages visited (collected via Google Analytics for aggregated analytics).

3. How We Use Your Information

• To process your order, arrange delivery and provide after-sales support.
• To respond to quote requests and B2B enquiries.
• To send transactional emails such as order confirmations, dispatch notices and invoices.
• With your explicit opt-in only — to send you our newsletter and promotional offers. You can unsubscribe at any time.
• To comply with legal obligations (GST invoicing, tax filings, FSSAI recordkeeping).
• To improve our website and product mix using aggregated, anonymised analytics.

4. Payment Data

We do NOT store your card number, UPI PIN, CVV or expiry date on our servers. All payments are processed by Razorpay (a PCI-DSS Level 1 certified payment gateway) directly between your bank/UPI app and Razorpay. We receive only a transaction reference and status confirmation.

5. Cookies & Tracking

We use a small number of cookies:

• A session cookie (session_token) to keep you signed in — set only if you choose to sign in with Google. This cookie is httpOnly, secure and expires after 7 days.
• localStorage entries for your cart contents and saved shipping address to speed up re-checkout. These stay on your device only.
• Google Analytics 4 cookies (via measurement ID G-D65QPN6BNX) for aggregated site analytics. IP addresses are anonymised.

6. Sharing With Third Parties

We share your data only with the service providers who help us run this store, and only to the extent needed:

• Razorpay — for payment processing.
• Our logistics partners (Delhivery / Shiprocket / India Post / DHL / FedEx as applicable) — for shipping and tracking.
• Google — for Google Sign-In and Google Analytics.
• Our email / CRM provider (once integrated) for transactional and marketing emails.

7. Data Retention

Order and invoice data is retained for 8 years to meet Indian GST and Companies Act requirements. Marketing preferences and account data are retained until you request deletion. Analytics data is anonymised and retained for 26 months.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Ask us to correct or update inaccurate information.
• Ask us to delete your account and personal data (subject to legal retention obligations).
• Withdraw consent for marketing communications at any time by clicking 'unsubscribe' or emailing us.
• Export your order history in a machine-readable format.

To exercise any of these rights, email admin@goldenroutespices.co.in. We respond within 30 days.

9. Security

The website runs over HTTPS with TLS encryption. Passwords are never stored (we use Google's authentication). Sessions are stored as httpOnly, secure, sameSite=None cookies. We follow reasonable industry practices to protect your data but no online transmission is ever 100% secure.

10. Children

Our services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The 'Last updated' date at the top of this page will reflect the effective date. Continued use of the site after an update constitutes acceptance.