Last Updated: 20 FEB 2026
This Privacy Policy describes how NUTTDRY, a business registered in Delhi, India, with its registered office at Zeenat Collection, Kh. No. 28/18, Street No. 5, Sangam Vihar, Delhi-110084 (“Company”, “we”, “our”, or “us”), collects, uses, processes, stores, and protects your personal data when you visit www.nuttdry.com (the “Website”) or purchase products from us.
This Policy is published in accordance with:
- The Information Technology Act, 2000
- IT Rules, 2011
- The Digital Personal Data Protection Act, 2023 (DPDP Act)
- Applicable laws of India
By accessing or using our Website, you consent to the practices described in this Policy.
1. Definitions
- Personal Data: Any data about an individual who is identifiable by or in relation to such data.
- Sensitive Personal Data (SPDI)(as per IT Rules, 2011): Includes passwords, financial information, biometric data, etc.
- Data Principal: The individual to whom the personal data relates (you).
- Data Fiduciary: The entity determining the purpose and means of processing personal data (us).
2. Information We Collect
A. Personal Information
When you use our Website, we may collect:
- Full name
- Mobile number
- Email address
- Billing and shipping address
- PIN code
- Order details
- Account login credentials
- Communication records
B. Sensitive Personal Data (SPDI)
We may collect:
- Payment information (processed securely via third-party payment gateways)
- Passwords (stored in encrypted format)
We do not store full debit/credit card details on our servers.
C. Automatically Collected Data
- IP address
- Device type
- Browser type
- Location data (approximate)
- Website usage data
- Cookies and tracking data
3. Lawful Basis for Processing (Under DPDP Act, 2023)
We process personal data based on:
- Your consent
- Performance of contract (order fulfillment)
- Compliance with legal obligations
- Legitimate business purposes
You may withdraw consent at any time by contacting us.
4. Purpose of Collection
We collect and process your information to:
- Process and deliver your orders
- Manage returns and refunds
- Provide customer support
- Send order updates via SMS/Email/WhatsApp
- Improve website performance
- Detect and prevent fraud
- Comply with Indian tax and legal requirements
- Send marketing communications (only with consent)
5. Sharing of Information
We do not sell personal data.
We may share your data with:
A. Payment Gateways
Razorpay, PayU, Stripe, UPI processors, banks (as applicable)
B. Logistics & Delivery Partners
Courier companies for order fulfillment
C. IT & Hosting Providers
Cloud storage and website hosting services
D. Government Authorities
When required by law or court order
All third-party processors are required to maintain reasonable security practices.
6. Data Storage and Retention
- Data is stored on secure servers located in India or compliant jurisdictions.
- We retain data only as long as required for:
- Legal compliance (including GST laws)
- Dispute resolution
- Fraud prevention
After the retention period, data is securely deleted or anonymized.
7. Security Practices
We implement reasonable security practices as required under Section 43A of the IT Act, including:
- SSL encryption
- Secure payment gateways
- Firewalls and malware protection
- Limited employee access
- Password encryption
- Regular security reviews
However, no online transmission is 100% secure.
8. Your Rights Under DPDP Act, 2023
As a Data Principal, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of personal data
- Withdraw consent
- Nominate another person to exercise rights in case of incapacity
- Grievance redressal
To exercise your rights, contact:
Grievance Officer:
Name: Zeenat Parween
Email: zeenat23collection@gmail.com
Address: Zeenat Collection, Kh. No. 28/18, Street No. 5, Sangam Vihar, Delhi-110084 (India)
We will respond within the timelines prescribed under applicable law.
9. Cookies Policy
We use cookies to:
- Improve user experience
- Enable cart functionality
- Track website analytics
- Provide targeted advertisements
You may disable cookies via browser settings.
10. Children’s Privacy
Our Website is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.
11. Cross-Border Data Transfer
If we transfer personal data outside India, we ensure such transfer complies with the Digital Personal Data Protection Act, 2023 and applicable government notifications.
12. Marketing Communications
If you opt-in:
- You may receive promotional emails or SMS
- You may unsubscribe at any time
- We comply with TRAI regulations for SMS marketing
13. Grievance Redressal Mechanism
In accordance with Rule 5(9) of the IT Rules, 2011:
Any discrepancies or grievances shall be addressed by our Grievance Officer within one month from the date of receipt of complaint.
14. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for their privacy practices.
15. Jurisdiction and Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of India.
Any disputes arising out of this Policy shall be subject to the exclusive jurisdiction of the courts located in Delhi, India.
16. Updates to this Privacy Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with the revised “Last Updated” date.