DPDP ACT, 2023 COMPLIANT

Digital Privacy & Data Protection Notice

Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India. Learn how SANOI Organic Foods collects, safeguards, and respects your personal data.

Effective Date: August 2026 | Version 2.0 (DPDP India Standard)
Data Fiduciary Commitment

SANOI Organic Foods (“SANOI”, “we”, “us”, or “our”) acts as a Data Fiduciary under Section 2(i) of the Digital Personal Data Protection Act, 2023. As a customer, visitor, or registered patron (“Data Principal”), your personal data is collected solely for explicit, lawful purposes with your clear consent.

1. Itemized Notice of Personal Data Collected

In compliance with Section 5 of the DPDP Act 2023, the table below provides an itemized summary of personal data items collected and their specific, limited processing purpose:

Personal Data ItemSpecific PurposeLegal Basis (DPDP)
Full NameCustomer identification, invoice generation, delivery labels.Consent & Contract Fulfillment
Mobile NumberOrder dispatch updates, delivery coordination by courier, customer support.Consent & Legitimate Fulfillment
Email AddressOrder receipts, GST tax invoices, account security alerts, newsletter (opt-in).Consent & Statutory Compliance
Delivery Address & PINPhysical fulfillment and doorstep courier delivery across India.Contract Fulfillment
Payment Reference IDTransaction verification via licensed gateways (Razorpay / PhonePe). SANOI never stores card numbers or CVV.Contract & Financial Compliance

2. Free & Informed Consent (Section 6)

By using sanoi.in, submitting orders, or registering a patron account, you grant free, specific, informed, and unconditional consent to the processing of your digital personal data as detailed herein.

Right to Withdraw Consent: Under Section 6(4) of the DPDP Act, you have the right to withdraw your consent at any time as easily as it was given. To withdraw consent, email us at grievance@sanoi.in. Upon receipt, we will cease processing your personal data unless required for legal, tax, or accounting retention.

3. Your Rights as a Data Principal

The DPDP Act, 2023 grants you enforceable statutory rights regarding your digital personal data:

A. Right to Access Information (Section 11):
You may request a summary of the personal data being processed, the identities of all third-party processors (such as courier partners), and any other relevant processing details.
B. Right to Correction & Erasure (Section 12):
You have the right to correct inaccurate data, complete incomplete information, update outdated records, or request complete erasure of your personal data when it is no longer necessary for order fulfillment or statutory compliance.
C. Right to Grievance Redressal (Section 13):
You have the right to readily accessible grievance redressal mechanisms regarding any act or omission by SANOI concerning your personal data.
D. Right to Nominate (Section 14):
You have the right to nominate any other individual who, in the event of your death or incapacity, shall exercise your data rights in accordance with the law.

4. Protection of Children & Minors (Section 9)

In strict compliance with Section 9 of the DPDP Act 2023:

  • SANOI does not knowingly collect personal data from minors (under 18 years of age) without verifiable consent from a parent or legal guardian.
  • SANOI does not engage in behavioral tracking, profiling, or targeted advertisements directed at children.
  • All purchases of children's nutritional items (e.g. Baby Protein Powder, Ragi Mixes) must be conducted by adult parents or guardians.

5. Reasonable Technical & Organizational Safeguards

Under Section 8(5) of the DPDP Act, SANOI implements robust technical safeguards to protect personal data against unauthorized access, loss, alteration, or disclosure:

  • Encryption in Transit: End-to-end 256-bit TLS/SSL encryption for all data submitted across sanoi.in.
  • Payment Security: PCI-DSS certified gateway routing (Razorpay / PhonePe). We never store sensitive banking credentials or CVV numbers.
  • Access Control: Administrative access to order records is strictly restricted and protected with multi-factor authentication.
  • Breach Notification: In the unlikely event of a personal data breach, SANOI will promptly intimate the Data Protection Board of India (DPBI) and affected Data Principals as mandated by Section 8(6) of the Act.

6. Cookies & Local Storage Policy

We use cookies and local storage tokens to deliver essential store functionality:

• Essential Cookies: Required for shopping cart persistence, secure checkout, and CSRF token verification.
• Functional Cookies: Remember your regional delivery PIN, avatar badges, and language settings.
• Analytics & Performance: Anonymous page load telemetry used to optimize website performance.

You can manage your cookie choices at any time via the floating banner or your browser privacy settings.

7. Designated Data Protection & Support Contact

In accordance with Section 8(9) and Section 13 of the Digital Personal Data Protection Act, 2023, the designated contact for SANOI Organic Foods is:

Contact Person: Malkayagaari Swapna
Designation: Data Protection & Customer Support Lead
Entity: SANOI Organic Foods
Contact / WhatsApp: +91 95026 49999
Registered Address: Plat No. 41, SYNO 196, Teacher Colony, Shadnagar, Telangana – 509216, India
Response Timeline: All data grievances and erasure requests are acknowledged within 24 hours and addressed within the statutory period. If an issue remains unresolved, you have the right to escalate to the Data Protection Board of India (DPBI).