Omjee Rice Mill ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and while interacting with our business.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, contact us for business inquiries, make purchases, or interact with us in any manner.

By accessing and using our website or services, you signify that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

This Privacy Policy is aligned with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India, along with other applicable data protection laws.

2. Information We Collect

We collect information in various ways, including information you provide directly, data collected automatically, and information received from third parties.

2.1 Personal Information Directly Provided by You

When you interact with Omjee Rice Mill, we may collect the following personal data:

• Contact Information: Name, email address, phone number, postal address, city, state, and PIN code.
• Business Information: Company name, designation, GST number, business registration details.
• Transaction Information: Purchase history, payment details, invoice records, delivery preferences.
• Communication Data: Feedback, inquiries, complaints, and correspondence through email, phone, or contact forms.
• Banking Information: Bank account details for payment and refund processing (handled securely through authorized payment gateways).

2.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect:

• Technical Information: IP address, browser type, operating system, device information, internet service provider (ISP).
• Usage Data: Pages visited, time spent on each page, links clicked, search queries, referral sources.
• Cookies and Tracking Technologies: Cookies and similar technologies to enhance your experience and analyze website performance.
• Location Data: General location information based on IP address (not precise personal location).

2.3 Information from Third Parties

We may receive your information from:

• Logistics and shipping partners (for delivery tracking).
• Payment gateway providers (for transaction verification).
• Business associates and distributors.
• Government and regulatory authorities (when required by law).

3. Purpose of Collecting Personal Information

We collect and process your personal data for the following legitimate purposes:

• Order Processing and Fulfillment: Processing your purchases, managing delivery, and providing product information.
• Payment Processing: Collecting and processing payments through secure payment gateways.
• Customer Service: Responding to inquiries, addressing complaints, and providing technical support.
• Communication: Sending order updates, product information, promotional materials (with your consent), and service-related notices.
• Business Operations: Managing inventory, analyzing sales trends, and improving our products and services.
• Legal Compliance: Meeting statutory obligations, tax requirements, and regulatory compliance.
• Quality Assurance: Analyzing customer feedback to improve our website functionality and service quality.
• Security and Fraud Prevention: Protecting against unauthorized access, fraud, and maintaining network security.
• Marketing and Analytics: Understanding customer preferences and personalizing your experience (only with your consent).

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Authorized Service Providers

We share personal data with trusted third-party service providers who assist us in operating our website and conducting our business, including:

• Payment Gateway Providers: Razorpay, PayU, and other authorized payment processors.
• Logistics Partners: Shiprocket and other courier services for order delivery.
• Website Hosting and Technical Providers: For server management and website functionality.
• Cloud Storage Providers: For secure data storage within India.

All service providers are contractually obligated to maintain confidentiality and use personal data only for specified purposes.

4.2 Legal Requirements

We may disclose your personal data when:

• Required by law, court order, or government authority.
• Necessary to enforce our Terms of Service and other agreements.
• Needed to protect the rights, property, or safety of Omjee Rice Mill, our users, or the public.
• To comply with tax, regulatory, or compliance requirements.

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4.4 Your Explicit Consent

We may share your personal data with other parties when you explicitly consent to such sharing for specific purposes.

5. Data Retention and Deletion

5.1 Retention Period

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Customer Transaction Data: Retained for 7 years (for tax and compliance purposes as per Indian law).
• Transactional Email Records: Retained for 3 years.
• Website Analytics Data: Retained for 12 months.
• Cookies: Retained as per your browser settings (typically until you clear cookies).
• Marketing Consent Data: Retained until you withdraw consent or request deletion.

5.2 Right to Erasure

In accordance with the DPDP Act, 2023, you have the right to request deletion of your personal data when:

• The data is no longer necessary for the purpose it was collected.
• You withdraw your consent.
• You object to processing (if consent-based).
• You request erasure under applicable law.

To request data deletion, contact us at the address provided in Section 10 below. We will process your request within 30 days, subject to legal retention obligations.

6. Data Security and Protection

6.1 Security Measures

We implement comprehensive technical, organizational, and administrative measures to protect your personal information, including:

• Encryption: All sensitive data (payment information, banking details) is encrypted using SSL/TLS technology.
• Secure Payment Processing: We use PCI-DSS compliant payment gateways.
• Access Controls: Only authorized personnel have access to personal data on a need-to-know basis.
• Data Localization: Sensitive personal data is stored only within India in compliance with applicable regulations.
• Regular Security Audits: Periodic security assessments and vulnerability testing.
• Firewalls and Intrusion Detection: Advanced security systems to protect against unauthorized access.

6.2 Limitations

While we implement robust security measures, no method of data transmission over the internet or electronic storage is absolutely secure. We cannot guarantee 100% security of your information.

6.3 Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected individuals and the Data Protection Board of India as required by the DPDP Act.
• Provide details of the breach, affected data categories, and remedial actions.
• Notify within a reasonable timeframe after discovering the breach.

7. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request and obtain a copy of your personal data that we hold. We will provide this information in a clear, understandable format within 30 days of your request.

7.2 Right to Correction

You can request correction of inaccurate, incomplete, or outdated personal data. We will update your information within 30 days of verification.

7.3 Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the original purpose, subject to legal retention obligations.

7.4 Right to Restrict Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when the accuracy is disputed.

7.5 Right to Object

You have the right to object to:

• Processing of your data for marketing and promotional purposes.
• Processing based on legitimate business interests.
• Automated decision-making affecting you.

7.6 Right to Withdraw Consent

If you have provided consent for data processing, you can withdraw it at any time. We will stop processing your data after consent withdrawal, except where required by law.

7.7 Right to Grievance Redressal

You can lodge complaints regarding our data processing practices through the contact details provided in Section 10.

8. International Data Transfers

Our primary data storage and processing occurs within India. We do not routinely transfer personal data outside India without explicit consent.

If such transfer becomes necessary, it will comply with restrictions notified by the Indian Government, we will obtain explicit consent from you, and implement appropriate safeguards as prescribed under the DPDP Act.

9. Children's Privacy

Our website and services are not directed toward children below 13 years of age. We do not knowingly collect personal information from children without parental consent.

If we become aware that a child has provided us with personal information without parental consent, we will delete such information immediately. Parents or guardians who believe their child has provided information to us should contact us using the details in Section 10.

10. Contact Information and Grievance Redressal

For any questions about this Privacy Policy, to exercise your rights, or to lodge a complaint, please contact us:

Omjee Rice Mill
Address: [Insert Business Address], Bihar, India
Email: [Insert Email Address]
Phone: [Insert Contact Number]
Business Hours: [Insert Operating Hours]
Data Protection Officer / Designated Contact: [Insert Name and Contact Details]

We will acknowledge your request within 5 business days and resolve your grievance within 30 days of receipt.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or other factors.

When we make material changes, we will update the "Last Updated" date at the top of this document, notify you via email or prominent notification on our website, and seek your consent if required under applicable law.

12. Disclaimer

This Privacy Policy does not supersede any specific agreements or contracts you may have with Omjee Rice Mill. In case of any conflict between this Privacy Policy and other contractual obligations, the terms of the specific contract will prevail to the extent permitted by law.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000.

Any disputes arising from or related to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Bihar, India.