Grower Privacy Framework

Revision 26.1 · Effective 17 July 2026

1. Purpose

BASID NASIR SUMRA operates Bharat Roots as a flower seed retailer. This framework describes how we collect, use, store, and protect personal information connected to your shopping and support experience.

2. Categories of data

• Identity & contact: name, email, mobile number, and delivery addresses.
• Transaction records: order history, payment references, invoice details, and refund logs.
• Communication logs: emails, support tickets, and OTP verification events.
• Technical signals: IP address, browser metadata, and session tokens used for fraud prevention.

3. Lawful processing bases

We process data to perform our contract with you (order fulfilment), comply with tax and commercial record-keeping obligations, secure the platform, and respond to lawful requests from authorities when required.

4. Third-party processors

Courier partners receive name, phone, and address solely for delivery. Payment gateways process card or UPI details under their own PCI-compliant environments — we do not store full card numbers on our servers.

5. Retention schedule

Active account data persists until deletion is requested. Order and invoice records are retained for seven years unless a longer period is mandated. Marketing consent, where given, can be withdrawn at any time without affecting transactional messages.

6. Your controls

Request access, correction, portability, or deletion by emailing from your registered address. We respond within 30 days unless complex verification is required.