Privacy Policy

Last Updated: November 07, 2025

Entity: Fuelroots Microgreens, Kozhikode, Kerala

Website: www.fuelroots.com

1. Introduction

This Privacy Policy (“Policy”) describes how Fuelroots Microgreens (“Company”, “we”, “our”, or “us”) collects, uses, stores, shares, and safeguards your personal data when you access or use our website, place an order, subscribe to our communications, or otherwise interact with our services (collectively, the “Service”). By using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as set out herein.

2. Legal Basis and Governing Law

This Policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable data-protection regulations of India. The processing of personal data is based on one or more of the following lawful grounds:

• Performance of a contract (e.g., processing and delivering your order);
• Compliance with a legal obligation;
• Legitimate interests of the Company;
• Consent explicitly provided by you.

3. Definitions

For the purposes of this Policy:

• Account: A unique account created for you to access our Service.
• Personal Data: Any data relating to an identifiable individual, directly or indirectly.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• Data Principal: The individual to whom the personal data relates (“you”).
• Data Fiduciary: Fuelroots Microgreens, responsible for determining the purpose and means of processing.
• Data Processor: A third party processing data on behalf of the Data Fiduciary (e.g., payment gateways, couriers).
• Cookies: Small text files placed on your device to store preferences and enhance website functionality.

4. Categories of Data Collected

a. Personal Data

When you use our Service, we may collect the following information:

• Full name, email address, and phone number;
• Billing and shipping address;
• Payment information (handled securely by third-party payment processors);
• Order history and preferences;
• Communication records and support requests.

b. Automatically Collected Data (Usage Data)

We may collect information automatically when you access the website, such as:

• IP address, browser type, device information, and operating system;
• Date, time, and duration of website visits;
• Pages viewed, navigation paths, and referring URLs;
• Cookie identifiers and analytics data.

5. Purpose of Data Processing

Fuelroots Microgreens processes personal data for the following purposes:

• To process and deliver customer orders and payments;
• To provide customer service, order updates, and technical support;
• To send marketing communications and newsletters (only with consent);
• To improve website performance, products, and user experience;
• To prevent fraud, unauthorized transactions, or misuse of services;
• To comply with legal and regulatory obligations.

6. Use of Cookies and Tracking Technologies

We use session and persistent cookies to:

• Maintain your shopping cart and preferences;
• Authenticate users and enhance security;
• Analyze website traffic and performance.

You may disable cookies through your browser settings. However, doing so may limit functionality of the Service.

7. Data Storage and Retention

Personal data is stored on secure servers located in India. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal requirements. Upon expiration of the retention period or withdrawal of consent, data will be securely deleted or anonymized. Backup copies may be retained for limited periods for audit and disaster recovery purposes.

8. Data Sharing and Disclosure

Your personal data may be disclosed to:

• Payment Gateways (e.g., Razorpay, PayU) for processing secure online transactions;
• Delivery Partners for shipping and logistics;
• IT Service Providers for hosting and maintenance;
• Marketing and Analytics Partners (where you have opted in);
• Government Authorities or law-enforcement agencies if required by law.

All processors handling data on our behalf are bound by strict confidentiality and data-protection obligations consistent with this Policy.

9. Cross-Border Data Transfers

Where data is transferred outside India for legitimate processing (for example, cloud hosting), such transfers shall comply with the DPDP Act and occur only to jurisdictions ensuring comparable data-protection standards.

10. Security of Personal Data

We employ appropriate technical and organizational measures to protect personal data, including:

• SSL encryption for data transmission;
• Restricted access on a need-to-know basis;
• Firewalls, intrusion detection, and regular security audits;
• Employee confidentiality agreements and training.

While we take all reasonable precautions, no system is entirely immune from unauthorized access.

11. Rights of Data Principals

Under the DPDP Act, 2023, you have the following rights:

• Right to Access: Request a copy of personal data held about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of data once the lawful purpose has ended.
• Right to Consent Withdrawal: Withdraw consent for processing or marketing communications.
• Right to Grievance Redressal: File a complaint if you believe your data has been mishandled.

To exercise these rights, contact our Grievance Officer at info@fuelroots.com.