Privacy Policy

At CONSCIOUS SPROUTS ("we", "us", "our"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website conscioussprouts.com or purchase our sprouted ragi (finger millet) products.

1. Information We Collect

1.1 Information You Provide

• Personal Identity: Name, email address, phone number when you register an account or place an order
• Shipping Address: Full delivery address including house/flat number, street, city, state, PIN code
• Payment Information: Payment method selected (UPI, card, net banking, COD). We do NOT store card details — payments are processed securely through Razorpay/Juspay/Cashfree which are PCI-DSS compliant
• Communication Data: Messages sent via our contact form, WhatsApp, or email

1.2 Information Collected Automatically

• Device & Browser: IP address, browser type, operating system, screen resolution
• Usage Data: Pages visited, time spent, click patterns, referral source
• Cookies: Session cookies for login, analytics cookies (via Vercel Analytics), and essential cookies for cart functionality

1.3 Information from Third Parties

• Google (if you sign in with Google)
• Payment processors (Razorpay, Juspay, Cashfree) — transaction confirmation only
• Delivery partners (Delhivery) — tracking and delivery confirmation

2. How We Use Your Information

• Order Processing: To fulfill your orders, send shipping updates, and handle returns/refunds
• Account Management: To create and manage your account, maintain order history
• Communication: Order confirmations, shipping notifications, delivery updates via email/SMS/WhatsApp
• Customer Support: To respond to queries, complaints, and feedback
• Improvement: To analyze usage patterns, improve our website and products
• Legal Compliance: To comply with FSSAI regulations, Indian tax laws, and other applicable regulations
• Marketing: With your consent, to send promotional offers, new product announcements, and health tips

3. Data Storage & Security

Your data is stored on secure servers located in India (Mumbai region). We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit (HTTPS)
• Encrypted password storage using bcrypt hashing
• Role-based access control for our team
• Regular security audits and vulnerability assessments
• Secure payment processing via PCI-DSS compliant partners

Despite our best efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

4. Google AdSense & Third-Party Advertising

We use Google AdSense to display advertisements on our website. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

• Google AdSense cookies: Used to determine which ads to show, measure ad effectiveness, and prevent showing the same ad too many times
• DoubleClick (Google) cookies: Used for ad targeting and frequency capping
• Personalized ads: Ads may be personalized based on your browsing history. You can opt out at Google Ads Settings
• Non-personalized ads: Even if you opt out of personalized ads, you may still see non-personalized ads based on the page content you are viewing
• Ad revenue: We earn revenue when visitors view or interact with AdSense advertisements. This helps us keep our content free and continue providing quality health and nutrition information

For more information about how Google uses your data, please visit Google's Advertising Policies.

5. Data Sharing

We never sell your personal data. We share data only with:

• Payment Processors: Razorpay, Juspay, Cashfree — to process payments securely
• Delivery Partners: Delhivery — your name, phone, and shipping address for delivery
• Analytics Providers: Vercel Analytics — anonymized usage data
• Legal Authorities: If required by Indian law, court order, or government regulation

5. Your Rights (Indian Data Protection)

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Update or correct inaccurate personal data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Withdraw Consent: Opt out of marketing communications at any time
• Data Portability: Receive your data in a machine-readable format
• Grievance Redressal: Contact our Data Protection Officer for complaints

6. Cookies

We use cookies for:

• Essential: Session management, cart functionality, authentication
• Analytics: Vercel Speed Insights and Web Analytics (anonymized)
• Advertising: Google AdSense — personalized and non-personalized ads, uses cookies to serve ads based on visits (opt out at Google Ads Settings)
• Performance: Page load optimization and caching

You can disable cookies in your browser settings. Some features may not work properly without essential cookies. For Google AdSense cookies, you can opt out of personalized advertising at Google Ads Settings or the Network Advertising Initiative opt-out page.

7. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it promptly.

8. Data Retention

• Account Data: Retained while your account is active, plus 30 days after deletion request
• Order Data: Retained for 7 years as required by Indian tax laws (GST)
• Communication Data: Retained for 2 years for dispute resolution
• Analytics Data: Anonymized after 14 months

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance.

10. Contact Us

For privacy-related queries, data access requests, or complaints: