Privacy Policy

1 Introduction

Sheranis Enterprises ("we", "our", "us", or "Company") is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you:

• Visit or interact with our website (udyog.sheranisgroup.in)
• Purchase our products through our website or via the Amazon.in marketplace
• Contact us by email, phone, or our enquiry form
• Otherwise engage with our business

We are a manufacturer, supplier, and wholesaler of 100% biodegradable eco-friendly disposable foodwares, based at 150, Sikta, Lauriya Nandangarh, Bihar 845453, India. We serve customers across West Champaran and PAN India.

By using our website or purchasing our products, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

This Policy is compliant with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

2 Applicability to Amazon India Marketplace

When you place an order on Amazon.in for products sold by Sheranis Enterprises, Amazon India acts as the marketplace platform and shares limited customer data with us solely for the purpose of fulfilling your order.

We affirm the following in accordance with Amazon's Marketplace Seller Agreement:

• We will not use any customer data received through Amazon.in for any purpose other than fulfilling your order and complying with applicable laws.
• We will not contact Amazon.in customers for marketing, promotions, or any off-Amazon purpose using data obtained via Amazon.
• We will not store, sell, transfer, or disclose Amazon customer data to any unauthorised third party.
• We comply fully with Amazon's Privacy and Data Protection policies for sellers.
• For all Amazon.in orders, Amazon's A-to-Z Guarantee and Amazon's Privacy Policy apply in addition to this Policy.

3 Information We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. The categories of data we may collect include:

3.1 Information You Provide Directly

• Full name and contact details (phone number, email address)
• Delivery address and billing information
• Order details, product preferences, and enquiry content
• Communications you send us via email, phone, or the website enquiry form
• Business details for wholesale or bulk enquiries (company name, GSTIN if provided)

3.2 Information Received via Amazon.in

• Name, delivery address, and order details — shared by Amazon solely to fulfil your order
• Payment confirmation status (we do not receive full payment card details from Amazon)

3.3 Information Collected Automatically (Website)

• IP address and browser type
• Pages visited and time spent on our website
• Device information and operating system
• Referral source (how you arrived at our website)
• Analytics data collected via Google Tag Manager (GTM-WWJGPM2) and Google Analytics

3.4 Sensitive Personal Data

We do not intentionally collect sensitive personal data such as financial account numbers, biometric data, health information, or government identification numbers. If any such data is inadvertently shared, it will be deleted promptly.

4 How We Use Your Information

We process your personal data only for specific, lawful purposes. Under the DPDP Act 2023, we act as a Data Fiduciary and process data on the basis of your consent and our legitimate business interests.

5 Sharing of Your Information

We do not sell, trade, or rent your personal data to third parties. We share your data only in the following limited, controlled circumstances:

• Delivery partners and logistics providers: to arrange pickup and delivery of orders to your address (e.g., India Post, courier partners)
• Payment processors: to securely handle transactions. We do not store full payment card details. For Amazon.in orders, payments are processed exclusively by Amazon Pay
• Amazon India: as the marketplace platform for orders placed on Amazon.in, Amazon may access order fulfilment data in accordance with their Seller Agreement
• Google LLC: analytics and behavioural data via Google Tag Manager and Google Analytics (data may be processed outside India — see Section 9)
• Legal and regulatory authorities: where required by law, court order, or government regulation in India
• Business transfers: in the event of a merger, acquisition, or sale of company assets, subject to confidentiality obligations

All third-party Data Processors with whom we share data are bound by appropriate confidentiality and data security obligations.

6 Cookies and Website Tracking

Our website uses cookies and third-party tracking technologies. Specifically, we use:

You may control, restrict, or disable cookies through your browser settings at any time. Disabling cookies may affect some functionality of the website. For Google's data practices, please review Google's Privacy Policy.

7 Cross-Border Data Transfers

Certain tools we use — specifically Google Tag Manager and Google Analytics — may transfer anonymised or pseudonymised browsing data to Google LLC's servers in the United States and other countries outside India.

We take reasonable steps to ensure such transfers are protected in accordance with applicable Indian data protection law, including the DPDP Act 2023. No identifiable personal information (such as your name, address, or order details) is transferred outside India by us directly.

Data received via Amazon.in is processed within Amazon India's platform infrastructure in accordance with Amazon's own international data transfer policies.

8 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including:

• Order records: retained for up to 7 years for accounting, GST, and legal compliance under Indian law
• Customer support communications: retained for up to 2 years after the last interaction
• Return and refund records: retained for up to 7 years in line with our Return & Refund Policy
• Website analytics data: retained as per Google Analytics default retention settings (14–26 months)
• Marketing consent records: retained until you withdraw consent

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised. You may request earlier deletion subject to legal retention requirements (see Section 10).

9 Data Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction, as required under the IT (SPDI) Rules, 2011. These include:

• Secure, encrypted email and communication practices
• Restricted access to customer data within our authorised team only
• No storage of full payment card details
• Regular review of our data handling and security processes
• Use of HTTPS on our website for encrypted data transmission

While we take every reasonable precaution, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, and you provide personal data at your own risk. In the event of a data breach that poses risk to your rights, we will notify you as required by applicable law.

10 Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights regarding your personal data:

• Right to Access: Obtain a summary of the personal data we hold about you and how it is being processed
• Right to Correction: Request correction of inaccurate, incomplete, or outdated personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Grievance Redressal: Have your grievances addressed by our Grievance Officer (see Section 13) within 30 days
• Right to Withdraw Consent: Withdraw consent for non-essential marketing or communications at any time, without affecting past processing
• Right to Nominate: Nominate another individual to exercise rights on your behalf in the event of death or incapacity

To exercise any of these rights, please contact our Grievance Officer using the details in Section 13. We will respond to all verified requests within 30 days.

11 Children's Privacy

Our services are not directed to individuals under the age of 18 years. We do not knowingly collect, process, or store personal data from minors without verifiable parental or guardian consent.

If you believe we have inadvertently collected personal data from a minor, please contact our Grievance Officer immediately (see Section 13) and we will take prompt steps to delete it.

12 Third-Party Websites and Links

Our website may contain links to third-party websites, including:

• Amazon.in — our marketplace seller page
• Google Reviews / Google Maps
• Other external sites referenced in our content

We are not responsible for the privacy practices, data handling, or content of any third-party websites. Clicking on a third-party link will direct you to that site, and this Privacy Policy will no longer apply. We encourage you to review the privacy policy of every site you visit.

13 Grievance Officer

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, we have appointed a Grievance Officer to address complaints and queries regarding this Privacy Policy and the handling of your personal data.

The Grievance Officer will acknowledge your complaint within 48 hours and resolve it within 30 days of receipt.

14 Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India, including but not limited to:

• The Information Technology Act, 2000 and rules framed thereunder
• The IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011
• The Digital Personal Data Protection Act, 2023
• The Consumer Protection Act, 2019

Any disputes arising from or relating to this Privacy Policy that are not resolved through our Grievance Officer shall be subject to the exclusive jurisdiction of the competent courts of Bagha, Bihar, India.

15 Amendments to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or Amazon's Marketplace policies. Any material changes will be published on this page with an updated effective date.

Continued use of our services or continued purchase of our products following any such changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. Where changes are significant, we will make reasonable efforts to notify you directly.