Privacy Policy

1. Information We Collect

We collect only what is necessary to fulfil your order and communicate with you. This includes:

• Identity & contact details: Full name, email address, and phone number — provided by you at checkout or when contacting us.
• Delivery address: Your shipping address, including pin code — used solely for order fulfilment via our logistics partner Shiprocket.
• Order history: Products purchased, quantities, order values, and transaction status — stored in our Convex database to manage your orders and subscriptions.
• Payment data: Payments are processed entirely by Razorpay. We never see, receive, or store your card number, UPI VPA, or net banking credentials. Razorpay's own privacy policy governs payment data.
• Device & usage data: IP address, browser type, pages visited, and time on site — collected automatically via cookies and analytics tools (see Section 6).
• Communications: Messages you send us via the contact form, email, or WhatsApp.

2. How We Use Your Information

We use your data for the following purposes:

• Processing and fulfilling orders, including shipping via Shiprocket-integrated couriers.
• Sending order confirmation, dispatch, and delivery notifications via email (powered by Resend).
• Providing customer support in response to your queries.
• Sending marketing communications — newsletters, offers, and product updates — with your consent. You may opt out at any time via the unsubscribe link in any email.
• Improving our website, products, and user experience using aggregated, anonymised usage data.
• Complying with applicable Indian law, including the Consumer Protection Act, 2019, and the Information Technology Act, 2000.

3. Third-Party Service Providers

We share your information only with trusted vendors who help us run our business. Each provider has contractual obligations to protect your data.

We never sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

4. Data Retention

We retain your personal data for as long as your account is active and for a period of 3 years after your last transaction, in accordance with tax and accounting obligations under Indian law. Order-related data may be retained for up to 7 years as required by the GST Act. You may request deletion of marketing-related data at any time (see Section 5).

5. Your Rights

Subject to applicable Indian law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data where we have no legal obligation to retain it.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant authority if you believe your data has been misused.

To exercise any of these rights, email us at hello@organicyellow.ae with the subject line "Privacy Request". We will respond within 30 days.

6. Cookies

Our website uses cookies — small text files stored on your device — for the following purposes only:

• Session cookies: to keep your cart and login session active while you browse.
• Analytics cookies: to understand aggregate traffic patterns and improve the shopping experience (no personally identifiable data is used).

We do not use third-party advertising cookies or tracking pixels for retargeting. You can disable cookies in your browser settings, though some site features (such as the cart) may not function correctly.

7. Data Security

We implement industry-standard security measures including HTTPS encryption, access controls, and regular security reviews. However, no transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account and to contact us immediately if you suspect any unauthorised activity.

8. Children's Privacy

Our website is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time as our practices or applicable law changes. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify registered customers via email. Continued use of our website after such changes constitutes acceptance of the revised policy.

10. Contact Us

For any privacy-related queries or requests, contact our team at: