Privacy Policy

1. Introduction

This Privacy Policy applies to www.panmans.com (the "Website") operated by Panmans Premium Dry Fruits ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data in accordance with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (when enforced)
• Consumer Protection Act, 2019
• Consumer Protection (E-Commerce) Rules, 2020

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register or place an order:

• Full name
• Email address
• Phone number
• Date of birth (optional)
• Gender (optional)
• Billing and shipping addresses
• PAN number (for high-value transactions if required)

2.2 Sensitive Personal Data

As defined under IT Rules 2011, we may collect:

• Password (stored in encrypted format)
• Financial information (credit/debit card details, UPI ID)
• Bank account details (for refunds)

2.3 Automatically Collected Information

• IP address
• Browser type and version
• Operating system
• Device information
• Location data (with permission)
• Cookies and similar technologies
• Pages visited and time spent
• Referring website

2.4 Information from Third Parties

• Payment gateway transaction details
• Delivery confirmation from shipping partners
• Social media profile (if you login via social media)

3. How We Use Your Information

3.1 Primary Purposes

• Process and fulfill your orders
• Provide customer support
• Send order updates and tracking information
• Process payments and refunds
• Verify your identity
• Maintain your account

3.2 Communication Purposes

• Send promotional emails (with consent)
• SMS notifications about orders
• WhatsApp updates (with consent)
• Customer satisfaction surveys
• Important service announcements

3.3 Legal and Security Purposes

• Comply with legal obligations
• Prevent fraud and unauthorized transactions
• Enforce our Terms and Conditions
• Resolve disputes
• Protect our rights and property

3.4 Business Purposes

• Analyze website usage and improve services
• Personalize your shopping experience
• Develop new products and services
• Conduct market research

4. Legal Basis for Processing

We process your personal data based on:

• Consent: For marketing communications and optional data collection
• Contract: To fulfill orders and provide services
• Legal Obligation: To comply with Indian laws and regulations
• Legitimate Interest: For fraud prevention and business improvement

5. Data Sharing and Disclosure

5.1 Service Providers

We share your information with trusted third parties who assist us:

• Payment Processors: Razorpay, PayU, Paytm, banks
• Shipping Partners: India Post, DTDC, Blue Dart, Delhivery
• Cloud Services: AWS, Google Cloud (data storage)
• Communication: SMS and email service providers
• Analytics: Google Analytics (anonymized data)

5.2 Legal Disclosure

We may disclose your information when required by:

• Court orders or legal proceedings
• Government authorities
• Law enforcement agencies
• Regulatory bodies

5.3 Business Transfers

In case of merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5.4 With Your Consent

We may share your information with other parties when you explicitly consent.

6. Data Security

6.1 Security Measures

We implement reasonable security practices as per IT Rules 2011:

• SSL encryption for data transmission
• Encrypted storage of sensitive data
• Secure payment gateways (PCI-DSS compliant)
• Regular security audits
• Access controls and authentication
• Firewall protection
• Regular data backups

6.2 Employee Access

• Limited access on need-to-know basis
• Confidentiality agreements with employees
• Regular training on data protection

6.3 Data Breach Protocol

In case of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required
• Take immediate steps to mitigate damage
• Investigate and prevent future breaches

7. Data Retention

8. Your Rights

Under Indian data protection laws, you have the right to:

8.1 Access Rights

• Request a copy of your personal data
• Know what data we hold about you
• Understand how we use your data

8.2 Correction Rights

• Correct inaccurate information
• Update outdated information
• Complete incomplete information

8.3 Deletion Rights

• Request deletion of your account
• Remove unnecessary personal data
• Withdraw consent for data processing

8.4 Other Rights

• Object to data processing
• Restrict processing in certain circumstances
• Data portability (receive your data in structured format)
• Opt-out of marketing communications
• File complaints with authorities

To exercise these rights, contact our Data Protection Officer at privacy@panmans.com

9. Cookies Policy

9.1 What are Cookies?

Cookies are small text files stored on your device when you visit our website.

9.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Performance Cookies: Help us understand website usage
• Functionality Cookies: Remember your preferences
• Marketing Cookies: Used for targeted advertising (with consent)

9.3 Managing Cookies

• You can control cookies through browser settings
• Disabling cookies may affect website functionality
• We respect "Do Not Track" browser signals

10. Children's Privacy

• Our services are not directed to individuals under 18 years
• We do not knowingly collect data from minors
• Parents/guardians may contact us to remove minor's data
• Age verification required for account creation

11. Third-Party Links

• Our website may contain links to third-party sites
• We are not responsible for their privacy practices
• Please review their privacy policies separately
• We don't endorse third-party websites

12. International Data Transfers

• Your data may be processed outside India
• We ensure adequate protection through contracts
• Data transfers comply with Indian law requirements
• Cloud services may store data globally

13. Marketing Communications

13.1 Opt-In

• We send marketing emails only with consent
• SMS marketing requires explicit opt-in
• WhatsApp communications need separate consent

13.2 Opt-Out

• Unsubscribe link in every marketing email
• SMS STOP to opt-out of SMS
• Contact customer support to update preferences
• Account settings to manage communications

13.3 National Do Not Call Registry

We comply with TRAI regulations and respect DND preferences.

14. Updates to Privacy Policy

• We may update this policy periodically
• Material changes will be notified via email
• Continued use implies acceptance of changes
• Previous versions available upon request

15. Grievance Redressal

As per Information Technology Act, 2000 and IT Rules 2011:

Grievance Officer / Data Protection Officer

Name: Mr. Rajesh Kumar
Designation: Chief Data Protection Officer
Email: privacy@panmans.com
Phone: +91 98765 43211
Address: Panmans Premium Dry Fruits, Thrissur, Kerala 680001
Working Hours: Monday to Friday, 10:00 AM to 6:00 PM IST

Grievances will be addressed within 30 days of receipt.

16. Contact Information

For privacy-related queries, contact us at:

• Email: privacy@panmans.com
• Phone: +91 98765 43210
• Postal Address: Panmans Premium Dry Fruits, Thrissur, Kerala 680001, India

Regulatory Authorities

You may also contact:

• Ministry of Electronics and Information Technology
• Data Protection Authority of India (when established)
• Consumer Forums under Consumer Protection Act

17. Consent

By using our website, you consent to:

• Collection and processing of your personal data as described
• Use of cookies and similar technologies
• Sharing of data with third parties as outlined
• Cross-border data transfers where applicable

You may withdraw consent at any time by contacting us, though this may affect service availability.