Grower Privacy Framework

Revision 26.1 · Effective 17 July 2026

1. Purpose

APPILY TWENTYSIX FLORAL GERMINATION DESK PRIVATE LIMITED operates Appily Twentysix as a flower seed retailer. This framework describes how we collect, use, store, and protect personal information connected to your shopping and support experience.

2. Categories of data

• Identity & contact: name, email, mobile number, and delivery addresses.
• Transaction records: order history, payment references, invoice details, and refund logs.
• Communication logs: emails, support tickets, and OTP verification events.
• Technical signals: IP address, browser metadata, and session tokens used for fraud prevention.

3. Lawful processing bases

We process data to perform our contract with you (order fulfilment), comply with tax and commercial record-keeping obligations, secure the platform, and respond to lawful requests from authorities when required.

4. Third-party processors

Courier partners receive name, phone, and address solely for delivery. Payment gateways process card or UPI details under their own PCI-compliant environments — we do not store full card numbers on our servers.

5. Retention schedule

Active account data persists until deletion is requested. Order and invoice records are retained for seven years unless a longer period is mandated. Marketing consent, where given, can be withdrawn at any time without affecting transactional messages.

6. Your controls

Request access, correction, portability, or deletion by emailing seeds@appilytwentysix.com from your registered address. We respond within 30 days unless complex verification is required.