Effective 22 July 2026
Privacy Policy
Written to be read. If anything here is unclear, ask us and we will explain it in plainer words.
The short version. We collect your name, contact details and delivery address because we cannot deliver flour without them. We never see your card details. We do not sell your information to anybody. You can ask us to correct or delete what we hold, and the person to ask is named at the bottom of this page.
1. Who this policy is from
This website, https://shrichand.in, is operated by Shri Chand Atta, trading as Shri Chand Atta Chakki, at Budh Vihar Ph-1, New Delhi-110086. Where this policy says "we", "us" or "the mill", it means that business.
This policy explains what we do with personal information collected through this website, over WhatsApp and telephone, and in person at the mill. It is written with reference to the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
2. What we collect, and why
We collect only what an order actually requires. Nothing on this site asks for information we do not have a use for.
| What | Why we need it |
|---|---|
| Name | To address you, and so the delivery reaches the right person. |
| Phone number | To confirm the order, and to call you if the address is hard to find. This is the detail we use most. |
| Email address | To send your order confirmation. Optional — you can order with a phone number alone. |
| Delivery address, city, pincode | To bring you the flour. |
| What you ordered | To mill and pack it, and to answer questions about a past order. |
| Payment reference | A transaction ID from the payment gateway, so we can match a payment to an order and issue a refund if needed. |
| Password (accounts only) | Stored as a one-way bcrypt hash. We cannot read it, and neither can anyone who obtains the database. |
| Anything you type in a message | To answer you. Please do not send us information you would not want kept. |
3. What we do not collect
Card numbers, CVV, UPI PIN or netbanking passwords never touch this website. When you pay online, the payment window belongs to Razorpay and your details go directly to them. We receive a yes or no, and a reference number. This is not a courtesy — it is how the system is built, and it means a breach of our server could not expose your card.
We do not collect your date of birth, gender, income, occupation, government ID numbers, location tracking, or anything about your health. We have no use for any of it.
4. Who else sees your information
Only the parties that make an order happen. Each receives the minimum they need.
- Razorpay — the payment gateway. Receives your name, email, phone and the amount, so the payment can be processed and matched.
- Our delivery staff or courier — name, phone and address, printed on the packing slip.
- Email, SMS and WhatsApp providers — whichever service sends your order confirmation receives the address or number it is being sent to, and the message itself.
- Our web host — the server storing the website and its database.
- Government authorities — only where we are legally required to produce records.
We do not sell, rent, trade or share personal information for advertising. There are no advertising trackers on this site.
5. Cookies
This site sets one essential cookie, PHPSESSID. It keeps you logged in and keeps
your order form intact between pages. It contains no personal information — only a random
identifier — and it expires when you close your browser.
If the owner has enabled analytics, those services set their own cookies; you can block them in your browser without breaking the site. Ordering, however, will not work with cookies disabled entirely, because the security token that protects your order form depends on the session.
6. How long we keep things
- Order records — retained for the period required by Indian tax and accounting law. We cannot delete these on request while that obligation stands.
- Account details — kept while your account is open. Ask us to close it and we remove your address and contact details.
- Enquiries and messages — kept while a conversation is open, then periodically cleared.
- Notification logs — a record of which confirmations were sent, kept briefly so we can investigate a message that never arrived.
7. How it is protected
The site runs over HTTPS, so information is encrypted in transit. Passwords are stored as bcrypt hashes rather than text. Database access is restricted, forms are protected against cross-site request forgery, and the admin area requires a separate login.
No system is beyond compromise, and anyone promising otherwise is overselling. If a breach ever affected your information, we would tell you and the Data Protection Board of India as the DPDP Act requires, rather than hoping it went unnoticed.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask what we hold about you, and receive a summary of it.
- Correct anything wrong — a misspelt name, an old address.
- Ask for erasure of information we no longer need, subject to the retention periods above.
- Withdraw consent to messages at any time. Withdrawing consent to order confirmations means we cannot practically process online orders for you, and we will say so plainly.
- Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
- Complain to us first, and to the Data Protection Board of India if we fail you.
To use any of these, contact the Grievance Officer below. We will respond within a reasonable period and never charge you for a request.
9. Children
This site is not intended for anyone under 18, and we do not knowingly collect information about children. If you believe a child has given us personal information, tell us and we will delete it.
10. Changes
If this policy changes materially, the effective date at the top changes with it and, where the change affects how we use information you have already given us, we will tell you directly rather than quietly editing the page.
11. Grievance Officer
Shivam Sharma
Owner, Shri Chand Atta Chakki
admin@shrichand.in
9136550369
Budh Vihar Ph-1, New Delhi-110086
Complaints are acknowledged within 48 hours and resolved within one month, as required by the Consumer Protection (E-Commerce) Rules, 2020.
Common questions
Do you store my card details?
No. Card and UPI details are entered on Razorpay's payment window, not on our website, and they never pass through our server. We store only a payment reference number so we can match your payment to your order.
Will you sell my phone number?
No. We do not sell, rent or trade personal information to anyone, for any amount. The only parties who receive your details are the ones needed to deliver your order — listed in full below.
Can I order without creating an account?
Yes. Guest checkout works exactly the same. An account only saves your address so you do not retype it, and lets you see your past orders.
How do I get my data deleted?
Email the Grievance Officer named on this page. We will delete what we are able to delete, and explain what we must keep — tax law in India requires us to retain invoice records for several years, and we cannot delete those on request.
Related: Terms & Conditions · Disclaimer · Contact us