Sidhant Spices 1008

Privacy Policy

Last updated: 18 August 2026

Sidhant Spices 1008 (“Sidhant Spices 1008”, “we”, “us”, “our”) is a manufacturer and B2B supplier of spices, flours, edible oils and pulses, based at DBN Road adjoining SBI building, Batala, 143505, Punjab, India. This Privacy Policy explains, in detail, how we collect, use, store, share and protect personal data submitted through sidhantspices1008.in (“this website”), and the rights available to you under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). We have written this policy to be read easily by a visitor, while covering every obligation the DPDP Act places on us as a “Data Fiduciary”.

1. Our Commitment to the DPDP Act, 2023

India’s Digital Personal Data Protection Act, 2023 gives individuals (“Data Principals”) specific, enforceable rights over their personal data, and places specific obligations on any business (“Data Fiduciary”) that processes it. Sidhant Spices 1008 is a Data Fiduciary for the personal data collected through this website, and we process that data strictly for lawful purposes and in the manner described below. We do not sell personal data, we do not use it for purposes you have not consented to, and we give you clear, working tools to access, correct or erase your data at any time.

2. Key Terms Used in This Policy

  • Data Principal, the individual to whom the personal data relates, i.e. you.
  • Data Fiduciary, the person or business that decides why and how personal data is processed; that is Sidhant Spices 1008 for data collected on this website.
  • Personal data, any data about an individual who is identifiable by or in relation to that data.
  • Processing, any operation performed on personal data, such as collecting, storing, using, sharing or deleting it.
  • Consent, your free, specific, informed, unconditional and unambiguous agreement to a specific instance of processing, given through a clear affirmative action such as ticking a checkbox.
  • Data Protection Board of India, the independent statutory body established under the DPDP Act to hear complaints and enforce the Act.

3. What Personal Data We Collect

We only collect personal data that you choose to give us. We do not use hidden trackers, third-party data brokers, or any technique to infer personal data you have not directly provided. Specifically, we collect:

3.1 Data You Submit Through Our Forms

  • Full name, collected via our Contact form and Become a Distributor form, so we know who we are speaking with.
  • Email address, collected so we can reply to your enquiry.
  • Phone number and/or WhatsApp number, collected, where you choose to share it, so we can call or message you back about pack sizes, pricing and availability.
  • The content of your message or enquiry, whatever details you choose to share about your business, location, products of interest or expected volumes.
  • Your consent record, whether and when you ticked the consent checkbox on our forms, which we retain as proof of consent as required under Section 6(10) of the DPDP Act.

3.2 Data Collected Automatically

  • Standard server/technical logs, our hosting provider automatically logs information such as IP address, browser type and pages visited, for security, fraud-prevention and performance purposes. We do not use this data to build a profile of you.
  • Cookies, see Section 10 below.

3.3 What We Do NOT Collect

Because this website is an enquiry-only product catalog and not an online store, we do not collect or store payment card details, bank account information, or login credentials, we have no checkout, cart, or user-account system that processes such data. We also do not knowingly collect personal data from children (see Section 15).

4. Legal Basis and Purpose of Processing

Under Section 4 of the DPDP Act, we may only process your personal data for a lawful purpose and either with your consent or for a “certain legitimate use” recognised under Section 7 of the Act. We process your personal data on the basis of your consent, for the following specified purposes only:

  • To respond to product, pricing and pack-size enquiries you send us;
  • To process and follow up on distributor / partnership applications submitted through our “Become a Distributor” form or pop-up;
  • To contact you by phone, email or WhatsApp regarding an enquiry you have raised;
  • To maintain a record of business communications for our own legitimate record-keeping and accounting purposes.

We will not process your personal data for any new purpose that is not compatible with the above without asking for your fresh, specific consent first, as required under Section 6(1) of the DPDP Act.

5. Notice and Consent, How We Ask for Your Permission

In line with Sections 5 and 6 of the DPDP Act, every form on this website that collects personal data is accompanied by a clear notice, in plain language, not legal jargon, telling you what data is being collected and why, before you submit it. Consent is captured through an unticked, opt-in checkbox that you must actively select; we never pre-tick a consent box or bundle consent with unrelated permissions. Our consent request:

  • Is free, you are never denied basic access to browse our catalog for declining to submit a form;
  • Is specific, it names the exact purpose (responding to your enquiry);
  • Is informed, it links directly to this Privacy Policy and our Terms and Conditions;
  • Is unconditional and unambiguous, there is no pressure, dark pattern, or default “yes”;
  • Requires a clear affirmative action, ticking the box yourself.

You may access this notice and any request for consent in English. If you would like it in another language listed in the Eighth Schedule to the Constitution of India, please contact us and we will do our best to accommodate this.

6. Withdrawing Your Consent

You have the right, under Section 6(4) of the DPDP Act, to withdraw your consent at any time, as easily as you gave it. To withdraw consent, simply email us at sidhantspices1008@gmail.com with the subject line “Withdraw Consent”, or call us on the number below. Once we receive your request, we will, within a reasonable time, stop processing your personal data for the purpose you originally consented to, and instruct any service provider processing that data on our behalf to do the same, unless the law requires or permits us to continue (for example, to comply with a legal or accounting obligation). Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it, and does not undo any reply, quotation or communication we already sent you as a result of your earlier enquiry.

7. Sharing and Disclosure of Your Personal Data

We do not sell, rent or trade your personal data to any third party for marketing or any other purpose. We only share personal data with the following categories of service providers, strictly to the extent necessary for them to help us run this website and respond to you, and under confidentiality obligations:

  • Web hosting provider, stores the website and any form submissions on secure servers.
  • Form and email delivery services (WPForms and our transactional email provider), process the enquiry you submit and deliver it to our inbox.
  • WhatsApp Business, if you choose to click a “WhatsApp us” link or enquire via WhatsApp, your message is handled per WhatsApp/Meta’s own privacy terms once it leaves our website; we do not control that platform.

We may also disclose personal data where required by law, for example in response to a valid order of a court or government authority, or where necessary to enforce our legal rights, consistent with the exemptions recognised under Section 17 of the DPDP Act.

8. Cross-Border Data Transfer

Section 16 of the DPDP Act allows the Central Government to restrict transfer of personal data to specific countries or territories by notification; as of the date of this policy, no such restriction affects our service providers. Some of our service providers (for example, our hosting or email delivery infrastructure) may process or store data on servers located outside India. Where this happens, we take reasonable steps to use reputable providers with appropriate security practices, and we will comply with any government restriction on cross-border transfer that comes into effect.

9. How We Protect Your Data (Security Measures)

In line with Section 8(5) of the DPDP Act, we take reasonable technical and organisational measures to protect personal data in our possession, including:

  • Serving this entire website over an encrypted HTTPS connection;
  • Restricting access to form submissions and website administration to authorised personnel only;
  • Using reputable, security-maintained hosting and plugin infrastructure, kept up to date;
  • Self-hosting website fonts locally rather than loading them from third-party font servers, so your browser does not send data to an external font provider simply by visiting our site.

No method of transmission or storage is 100% secure, but we continuously work to protect your data against unauthorised access, alteration, disclosure or destruction.

10. Cookies and Similar Technologies

We use a limited number of cookies necessary for this website to function, for example, to remember your cookie preference itself. Where our use of any non-essential cookie requires your consent under applicable guidance, we present a cookie banner (styled to match this website) that lets you Accept, Reject, or set detailed Preferences before any non-essential cookie is set. You can change your cookie choice at any time by reopening the cookie preferences panel available on this website.

11. Data Retention, How Long We Keep Your Data

In line with Section 8(7) and 8(8) of the DPDP Act, we do not keep personal data for longer than necessary. As our stated retention policy:

  • We retain enquiry and distributor-application data for up to 24 months from your last interaction with us, after which it is securely deleted or anonymised;
  • If you withdraw your consent or request erasure earlier, we erase your personal data within a reasonable time of that request, unless a longer period is required to comply with a legal, tax or accounting obligation;
  • Where we are legally required to retain certain business records for a longer statutory period (for example, under tax law), we retain only what that law requires, for only as long as it requires.

12. Personal Data Breach Notification

In the unlikely event of a personal data breach, Section 8(6) of the DPDP Act requires us to notify both the Data Protection Board of India and each affected Data Principal. If a breach affecting your personal data occurs, we will notify you without undue delay, describing what happened, what data was affected, and the steps we are taking in response, in the form and manner prescribed under the Act.

13. Children’s Data and Persons with Disabilities

This website is intended for use by business owners, distributors and adults acting in a business capacity, and is not directed at children. In line with Section 9 of the DPDP Act, we do not knowingly collect personal data of anyone below 18 years of age, and we do not carry out any tracking, behavioural monitoring, or targeted advertising directed at children. If a parent or guardian believes a child has provided us personal data, please contact us and we will promptly delete it. Where a Data Principal is a person with disability who has a lawful guardian, that guardian may exercise any of the rights described in Section 14 on their behalf.

14. Your Rights as a Data Principal

Under Chapter III of the DPDP Act, you have the following rights in respect of the personal data we hold about you. To exercise any of them, simply contact us using the details in Section 18 below, we do not charge a fee for a reasonable request.

14.1 Right to Access Information (Section 11)

You can ask us for a summary of the personal data we are processing about you, a description of the processing activities we have undertaken, and the identities of any other party we have shared it with.

14.2 Right to Correction, Completion, Updating and Erasure (Section 12)

You can ask us to correct inaccurate or misleading data, complete incomplete data, update outdated data, or erase your personal data entirely once it is no longer needed for the purpose it was collected, unless we are required by law to keep it.

14.3 Right of Grievance Redressal (Section 13)

You have the right to a readily available means of raising a grievance about how we have handled your personal data, and to receive a response within a reasonable period. See Section 17 below for our full grievance process.

14.4 Right to Nominate (Section 14)

You can nominate another individual who may exercise these rights on your behalf in the event of your death or incapacity. To register a nomination, write to us with the nominated individual’s name and contact details.

15. Duties of a Data Principal (Section 15)

The DPDP Act also places a few reciprocal duties on you when you interact with us: to provide accurate information and not impersonate anyone else while submitting a form, not to suppress material information, and not to register a false or frivolous complaint. We ask visitors to this website to act in good faith, just as we commit to doing the same.

16. Automated Decision-Making

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you. Every enquiry submitted through this website is read and responded to by a person on our team.

17. Grievance Redressal, How to Raise a Complaint With Us

If you believe we have not handled your personal data in accordance with this Policy or the DPDP Act, please contact us first using the details in Section 18. We aim to:

  • Acknowledge your grievance within 3 business days;
  • Resolve or substantively respond to it within 7–15 business days, depending on its complexity.

Under Section 13(3) of the DPDP Act, you are required to first exhaust this grievance process with us before approaching the Data Protection Board of India.

18. Grievance / Data Protection Contact

For any question, request or complaint about how we process your personal data, please contact:

Sidhant Spices 1008
Email: sidhantspices1008@gmail.com
Phone / WhatsApp: +91 70097 74407
Address: DBN Road adjoining SBI building, Batala, 143505, Punjab, India

19. Escalating to the Data Protection Board of India

If, after raising your grievance with us, you remain unsatisfied with our response, Section 27 of the DPDP Act gives you the right to file a complaint with the Data Protection Board of India, the independent body empowered to inquire into breaches of the Act and impose penalties.

20. Third-Party Links

This website may contain links to third-party platforms, such as WhatsApp or our social media pages. This Privacy Policy does not apply to those third-party platforms; please review their own privacy policies before sharing personal data with them.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our website, or applicable law, including any rules notified under the DPDP Act. The “Last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.

Scroll to Top