This Privacy Policy (“Policy”) explains how FRESH FRONTIER TECHNOLOGIES PRIVATE LIMITED (“we,” “us,” or “our”), a company incorporated under the laws of India with its registered office at OFFICE NO. 509, 5th FLOOR LUNKAD SKY STATION, NEAR HDFC BANK, VIMAN NAGAR, PUNE - 411014 collects, uses, discloses, stores, and protects your personal data when you access or use our website (freshfrontier.in) and mobile application (the “App”) (collectively, the “Platform”).

We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and comply with the DPDP Act, the Information Technology Act, 2000, and applicable rules. By using the Platform, placing an order, or providing any personal data, you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

We may update this Policy from time to time. The updated version will be posted here with a new “Last Updated” date. Your continued use of the Platform after changes constitutes acceptance of the revised Policy.

1. Information We Collect

We collect the following categories of personal data:

A. Personal Information You Provide

• Name, email address, phone number, date of birth, gender

• Delivery address, billing address

• Payment details (card information, UPI ID, bank details – processed via secure third-party gateways)

• Order details, preferences, feedback, reviews, and support queries

B. Automatically Collected Information

• Location data (GPS, IP address, precise location during delivery tracking)

• Device information (device ID, model, OS version, browser type)

• Usage data (pages visited, time spent, clicks, searches, order history)

• Cookies, web beacons, and similar tracking technologies

C. Information from Third Parties

• Data from payment processors, delivery partners, or analytics providers (with your consent or as permitted by law)

2. Purposes of Processing Your Data

We process your personal data only for specified, lawful purposes, including:

• Creating and managing your account

• Processing orders, payments, and quick commerce deliveries (30-60 minutes)

• Real-time order tracking and route optimization using location data

• Customer support, grievance redressal, and refunds/returns

• Improving our services, analytics, and product recommendations

• Sending order updates, promotional offers, and newsletters (you can opt out anytime)

• Complying with legal obligations, preventing fraud, and ensuring safety

• Any other purpose for which you give explicit consent

We will not process your data for any purpose incompatible with the above without fresh consent.

3. Legal Basis for Processing

Under the DPDP Act, we rely on:

• Your consent (which is free, specific, informed, unconditional, and unambiguous)

• Performance of contract (order fulfillment)

• Legitimate interests (fraud prevention, service improvement)

• Legal obligations

You may withdraw consent at any time, but this may affect your ability to use certain features (e.g., delivery).

4. Sharing and Disclosure of Your Data

We share personal data only when necessary and with safeguards:

• Service Providers: Delivery partners, logistics companies, payment gateways, cloud storage, analytics tools (all bound by confidentiality and DPDP-compliant agreements)

• Affiliates and Group Companies: For operational purposes

• Legal Authorities: When required by law, court order, or government request

• Business Transfers: In case of merger, acquisition, or sale of assets (with notice to you where required)

We do not sell your personal data to third parties.

5. Data Security

We implement reasonable security practices and procedures, including:

• Encryption of data in transit and at rest

• Secure payment gateways (PCI-DSS compliant)

• Access controls and regular security audits

• Employee training on data protection

While we strive to protect your data, no system is 100% secure. In case of a personal data breach, we will notify you and the Data Protection Board as required under the DPDP Act.

6. Data Retention

We retain personal data only as long as necessary for the purposes stated or as required by law (e.g., 7 years for accounting records). Once no longer needed, we securely delete or anonymize it.

7. Your Rights under the DPDP Act

As a Data Principal, you have the following rights (exercisable free of charge, subject to verification):

• Right to access and obtain a copy of your data

• Right to correction, completion, or updating of inaccurate data

• Right to erasure (“right to be forgotten”)

• Right to nominate another person to exercise rights in case of death or incapacity

• Right to withdraw consent

• Right to grievance redressal

To exercise any right, email us at frontierfresh1@gmail.com with your Order ID or registered phone number. We will respond within the timelines prescribed under the DPDP Act (generally 30 days).

8. Cookies and Tracking Technologies

We use essential cookies for site functionality, analytics cookies (e.g., Google Analytics), and marketing cookies. You can manage cookie preferences through your browser or App settings. Disabling certain cookies may affect your experience.

9. Children’s Privacy

Our services are not directed at children under 18. We do not knowingly collect data from children. If we become aware of such data, we will delete it immediately. Verifiable parental consent is required for any processing involving children (as per DPDP Act).

10. Third-Party Links and Services

The Platform may contain links to third-party sites or apps. We are not responsible for their privacy practices. Please review their policies separately.

11. International Data Transfers

All data is processed and stored within India. In limited cases where international transfer is required, we ensure adequate safeguards (e.g., contracts) as per DPDP rules.

12. Grievance Officer

For any privacy-related grievance, please contact our Grievance Officer:

• Email: frontierfresh1@gmail.com (subject: “Privacy Grievance”)

• Phone: 8676864772

• Address: FI 303, Heaven Height, Sr 65/6B/6A/4, Hadapsar, Pune City, Pune-411028, Maharashtra, India

We will acknowledge your grievance within 48 hours and resolve it within 30 days (or as per DPDP timelines). If unsatisfied, you may approach the Data Protection Board of India.

13. Changes to This Policy

We may revise this Policy to reflect changes in our practices or legal requirements. Significant changes will be notified via email, in-app banner, or on the Platform.

Contact Us

For any questions about this Privacy Policy, please reach out to:

• Email: frontierfresh1@gmail.com

• Phone: 8676864772

• Address: OFFICE NO. 509, 5th FLOOR LUNKAD SKY STATION, NEAR HDFC BANK, VIMAN NAGAR, PUNE - 411014

Thank you for trusting Fresh Frontier with your data. We are committed to protecting your privacy while delivering fresh organic products to your doorstep.