VEGRAS

Privacy Policy for Vegras Last Updated: August 29, 2025 At Vegras, we are dedicated to safeguarding the privacy and security of your personal and business information. As a leading supplier of raw food items, groceries, and pantry essentials to hotels, mess, paying guest (PG) accommodations, restaurants, and other food businesses in New Delhi and surrounding areas, we prioritize transparency, trust, and compliance with Indian data protection laws. This Privacy Policy outlines how we collect, use, store, disclose, and protect your information in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules, 2011), and the Digital Personal Data Protection Act, 2023 (DPDP Act). This policy applies to all users of our services, including business clients (e.g., hotels, restaurants, mess, PGs), individual customers, website visitors (www.vegras.com), and anyone interacting with our services via email, phone, WhatsApp, or other channels.

  1. About Vegras Vegras is a next-generation food and raw material supply brand, committed to delivering high-quality, fresh, and organic groceries, vegetables, spices, and other essentials to food businesses and individual customers. Our mission is to support the culinary operations of hotels, mess, PGs, and restaurants by providing timely delivery, transparent pricing, and exceptional service. Headquartered in New Delhi, we aim to be your trusted partner in sourcing premium ingredients for every dish you serve.
  2. Information We Collect To provide seamless services and enhance your experience, we collect various types of information, categorized as follows: a. Personal Information This includes data that identifies you as an individual or as a representative of a business:

Contact Details: Full name, email address, phone number, WhatsApp number, and delivery address provided during order placement, account registration, or customer inquiries. Business Information: Details about your organization, such as the name of the hotel, restaurant, mess, or PG, GST Identification Number (GSTIN), Food Safety and Standards Authority of India (FSSAI) registration details, or other business identifiers required for invoicing and compliance. Order Information: Details of products ordered (e.g., vegetables, spices, dairy, or custom orders via the “Write Your Order” feature), delivery schedules, and specific preferences (e.g., bulk quantities or packaging requirements). Payment Information: Bank account details, Unified Payments Interface (UPI) IDs, credit/debit card details (if applicable), or other financial information required to process payments for orders. Communication Records: Records of interactions via email (help.vegras9@gmail.com), phone (+917050462102), WhatsApp (+919508331748), or other channels for customer support or order management.

b. Sensitive Personal Data or Information (SPDI) As defined under the IT Rules, 2011, SPDI includes:

Financial information, such as bank account details, UPI IDs, or payment card details. Passwords or authentication credentials (e.g., for account access on our website). Any other sensitive information explicitly provided by you, such as special instructions in custom orders that may include personal preferences or dietary requirements.

We collect SPDI only with your explicit consent and ensure its protection as per Indian law. c. Non-Personal Information This includes anonymized or aggregated data that does not directly identify you:

Usage Data: Information about your interactions with our website, including IP address, browser type, operating system, device model, pages visited, time spent, and click patterns. Cookies and Tracking Technologies: Data collected via cookies, web beacons, or similar technologies to track user behavior, personalize content, and improve website functionality. Analytics Data: Aggregated insights about product preferences, order trends, or website performance, used to optimize our services.

d. Information from Third Parties We may collect information from third-party sources with your consent or as necessary for service delivery:

Payment Gateways: Transaction details from payment processors (e.g., Razorpay, Paytm, or bank APIs) to confirm payments. Delivery Partners: Delivery status updates or location data from logistics providers to track and fulfill orders. Business Partners: Information shared during collaborations, such as joint promotions or referrals from other food industry entities.

  1. How We Collect Information We collect information through the following methods:

Direct Interactions: When you place an order via our website, phone, WhatsApp, or email. When you register an account on www.vegras.com or submit inquiries through contact forms. When you provide business details for bulk orders or account setup (e.g., GSTIN or FSSAI details).

Website Interactions: Through forms, cookies, and analytics tools (e.g., Google Analytics, if implemented). Via the “Write Your Order” feature, where you may submit custom requirements in text or voice format.

Automated Technologies: Cookies and tracking technologies that collect usage data when you browse our website. Server logs that record IP addresses and access times for security and analytics purposes.

Third-Party Services: From payment processors for transaction verification. From delivery partners for order tracking and fulfillment. From social media platforms (e.g., Facebook, Instagram) if you interact with us via those channels.

  1. Purpose of Collecting Information We collect and process your information for the following legitimate purposes:

Order Processing and Fulfillment: To process orders for raw food items, groceries, spices, dairy, and other supplies. To coordinate delivery schedules and ensure timely delivery to your business or location. To manage custom orders submitted via the “Write Your Order” feature.

Customer and Business Support: To respond to inquiries, complaints, or feedback via email, phone, WhatsApp, or other channels. To provide personalized assistance to hotels, mess, PGs, and restaurants, including account management and order tracking.

Business Operations: To generate invoices, maintain transaction records, and comply with tax regulations (e.g., GST laws). To manage bulk order agreements and contracts with food businesses.

Service Improvement: To analyze website usage and customer preferences to enhance our offerings. To optimize product availability, delivery logistics, and website performance.

Marketing and Communication: To send promotional offers, newsletters, or updates about new products, seasonal items, or discounts (with your consent, where required). To notify you about order confirmations, delivery updates, or service changes.

Legal and Regulatory Compliance: To comply with Indian laws, including the IT Act, 2000, IT Rules, 2011, DPDP Act, 2023, and GST regulations. To maintain records for audits, tax compliance, or legal proceedings.

Security and Fraud Prevention: To protect against unauthorized access, fraudulent transactions, or misuse of our services. To ensure the integrity of our website and business operations.

  1. Legal Basis for Processing We process your personal data based on the following legal grounds, as per Indian law:

Consent: When you explicitly consent to data processing, such as for marketing communications, cookies, or sharing data with third parties. Contractual Necessity: To fulfill our obligations under contracts or agreements, such as processing orders or delivering supplies to your business. Legal Obligations: To comply with applicable laws, including tax regulations, data protection laws, and FSSAI requirements. Legitimate Interests: To improve our services, enhance website functionality, prevent fraud, and ensure the security of our operations, provided such interests do not override your rights.

  1. How We Use Your Information We use your information to deliver a seamless and efficient experience:

Order Management: Process, track, and deliver orders for raw food items, groceries, and pantry essentials to your specified location. Customer Communication: Send order confirmations, delivery updates, or responses to inquiries via email, phone, or WhatsApp. Personalization: Recommend products or services based on your order history or preferences (e.g., suggesting seasonal vegetables or bulk spices). Business Account Management: Maintain records for hotels, mess, PGs, and restaurants, including invoicing, payment processing, and contract management. Analytics and Insights: Analyze usage data to identify trends, optimize inventory, and improve delivery logistics. Marketing: Send promotional emails, WhatsApp messages, or newsletters about new products, discounts, or seasonal offerings (with your consent). Security: Monitor website activity to detect and prevent unauthorized access or fraudulent behavior. Compliance: Maintain records for tax purposes, comply with FSSAI regulations, and respond to legal requests from authorities.

  1. Sharing and Disclosure of Information We may share your information with trusted entities to deliver our services, but only as necessary and with appropriate safeguards:

Delivery Partners: To coordinate and track deliveries to your business or location. Payment Processors: To securely process payments via UPI, bank transfers, or third-party gateways (e.g., Razorpay, Paytm). Service Providers: Third-party vendors providing cloud hosting, analytics, customer support, or IT services, all of whom are bound by confidentiality agreements and comply with Indian data protection laws. Business Partners: With your consent, for joint promotions, collaborations, or referrals with other food industry entities. Legal Authorities: When required by law, such as for tax audits, GST compliance, or legal proceedings, in accordance with the IT Act, 2000, and DPDP Act, 2023. Successors: In the event of a merger, acquisition, or business transfer, your data may be transferred to the succeeding entity, subject to the same privacy protections.

We do not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

  1. Data Security We implement robust security measures to protect your personal and sensitive data, as required by the IT Rules, 2011, and DPDP Act, 2023:

Encryption: All sensitive data, including payment details, is encrypted during transmission using industry-standard protocols (e.g., SSL/TLS). Access Controls: Access to your data is restricted to authorized personnel who are trained in data protection and bound by confidentiality agreements. Secure Storage: Data is stored on secure servers located in India, with regular backups and restricted access. Regular Audits: We conduct periodic security audits and vulnerability assessments to ensure compliance with Indian data protection laws. Fraud Detection: We use monitoring tools to detect and prevent unauthorized access, fraudulent transactions, or misuse of our services. Employee Training: Our staff is trained on data protection best practices to ensure compliance with legal and ethical standards.

In the unlikely event of a data breach, we will notify affected users and the Data Protection Board of India within the timelines specified under the DPDP Act, 2023, and take immediate steps to mitigate the impact.

  1. Data Retention We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations:

Order and Transaction Data: Retained for 5 years from the last transaction to comply with GST laws and accounting requirements. Customer Support Records: Retained for 3 years to address follow-up inquiries or disputes. Marketing Data: Retained until you withdraw consent or unsubscribe from communications. Anonymized Data: Non-personal, aggregated data (e.g., analytics) may be retained indefinitely for business insights.

Upon expiration of the retention period, we securely delete or anonymize your data in accordance with Indian law.

  1. Your Rights Under Indian Law As a data principal under the DPDP Act, 2023, you have the following rights:

Right to Access: Request a summary of the personal data we hold about you, including how it is processed and shared. Right to Correction: Request correction or updating of inaccurate or incomplete personal data. Right to Erasure: Request deletion of your personal data, subject to legal obligations (e.g., tax records). Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format for transfer to another service provider. Right to Withdraw Consent: Withdraw consent for data processing (e.g., marketing emails or cookies) at any time, without affecting the lawfulness of prior processing. Right to Restrict Processing: Request restriction of certain data processing activities, where applicable. Right to Grievance Redressal: Raise concerns or complaints about our data handling practices. Right to Nominate: Designate a nominee to exercise your rights in case of incapacitation or death, as per the DPDP Act, 2023.

To exercise these rights, contact our Data Protection Officer (DPO):

Email: help.vegras9@gmail.com Phone: +917050462102 WhatsApp: +919508331748 Address: Vegras, New Delhi, India

We will respond to your request within 30 days, as mandated by the DPDP Act, 2023. In case of complex requests, we may extend the response time and inform you accordingly.

  1. Cookies and Tracking Technologies Our website uses cookies and similar technologies to enhance functionality and user experience:

Essential Cookies: Required for core website functions, such as navigation, order placement, and account management. Performance Cookies: Collect anonymized data about website usage to improve performance and user experience. Functional Cookies: Enable personalized features, such as remembering your delivery preferences or product recommendations. Marketing Cookies: Deliver targeted advertisements or promotional content, with your consent.

You can manage cookie preferences through your browser settings or our cookie consent popup (if implemented). Disabling cookies may affect certain website features, but essential cookies cannot be disabled as they are necessary for operation.

  1. Third-Party Links and Services Our website may include links to third-party websites or services, such as:

Payment gateways (e.g., Razorpay, Paytm). Social media platforms (e.g., Facebook, Instagram, Twitter). Delivery partner portals.

We are not responsible for the privacy practices or content of these third-party services. Please review their privacy policies before sharing personal information.

  1. Children’s Privacy Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at help.vegras9@gmail.com, and we will take steps to delete it promptly.
  2. International Data Transfers Vegras primarily operates in India, and your data is stored on servers located within India to comply with the DPDP Act, 2023. In rare cases, data may be transferred outside India (e.g., for cloud hosting or analytics services). In such cases, we ensure:

Compliance with Indian data protection laws. Use of service providers with adequate safeguards (e.g., Standard Contractual Clauses or equivalent measures). Your explicit consent, where required.

  1. Changes to This Privacy Policy We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. The updated policy will be posted on our website (www.vegras.com) with the revised “Last Updated” date. For significant changes, we will notify you via:

Email (to the address associated with your account). A prominent notice on our website or via WhatsApp.

We encourage you to review this policy periodically to stay informed about how we protect your data.

  1. Grievance Redressal If you have concerns about our data handling practices, please contact our Data Protection Officer:

Name: [Data Protection Officer] Email: help.vegras9@gmail.com Phone: +917050462102 WhatsApp: +919508331748 Address: Vegras, New Delhi, India

We will address your concerns within 30 days, as required by the DPDP Act, 2023. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India, established under the DPDP Act, 2023, for further redressal.

  1. Compliance with Indian Laws Vegras is committed to full compliance with Indian data protection laws, including:

Information Technology Act, 2000: Governs the collection, storage, and processing of electronic data. IT Rules, 2011: Specifies requirements for handling sensitive personal data or information (SPDI). Digital Personal Data Protection Act, 2023: Establishes rights for data principals and obligations for data fiduciaries like Vegras. GST and FSSAI Regulations: Ensures proper invoicing, tax compliance, and adherence to food safety standards for raw food supplies.

  1. Additional Information for Business Clients As a supplier to hotels, mess, PGs, and restaurants, we understand the unique needs of our B2B clients:

Bulk Order Privacy: We protect sensitive business information, such as order volumes, pricing agreements, or delivery schedules, with strict confidentiality. Account Management: Business accounts are secured with role-based access controls to ensure only authorized representatives can access or modify data. Custom Orders: Information provided via the “Write Your Order” feature is treated as confidential and used solely for fulfilling your specific requirements. GST Compliance: We maintain accurate records of transactions, including GSTIN details, to ensure compliance with tax regulations.

  1. Contact Us For any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

Email: help.vegras9@gmail.com Phone: +917050462102 WhatsApp: +919508331748 Address: Vegras, New Delhi, India (Delivery Available)

Our customer support team is available 24/7 to assist you with orders, inquiries, or data-related requests.

  1. Acknowledgment By using our website or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services. Thank you for choosing Vegras as your trusted partner for premium raw food items and groceries. We are committed to protecting your privacy while delivering exceptional quality and service to fuel your culinary success.