Privacy Policy

1. Who we are and scope

This Privacy Policy explains how GBR Hatcheries Private Limited (CIN U01222AP2005PTC046970), a company incorporated in India with its registered office at Door No. 57-14-24A, Pantakaluva Road, Patamata, Vijayawada, Andhra Pradesh - 520010 ("GBR", "we", "us" or "our"), collects, uses, shares and protects personal data.

It applies to our website at gbrhatcheries.com, our mobile and web applications (including the GBR Traders app), our WhatsApp, SMS, email and telephone channels, and any other service that links to this policy (together, the "Services").

We act as the Data Fiduciaryfor personal data processed through the Services, within the meaning of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy is also published in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information we collect

Information you give us

• Identity and contact details: name, mobile number, email address, and village/town, district or postal address.
• Business details: business or firm name, type of business (for example farmer, trader, dealer or distributor), GSTIN, PAN, trade or FSSAI licence numbers, business address, operating region, farm or shed capacity, and expected order volumes.
• Account information: login credentials, one-time passwords (OTPs) used for verification, and your account preferences.
• Order and transaction details: products ordered, quantities, delivery locations, invoices, payment status and transaction references.
• Settlement details (where applicable): bank account number and IFSC or UPI ID, where required to make payments or refunds to you.
• Communications: enquiries, messages, feedback, photographs or documents you share with us (for example, evidence supporting a delivery claim).

Information collected automatically

• Device and usage data: device model, operating system, app version, IP address, browser type, pages or screens viewed, crash logs and diagnostic data.
• Location: approximate location derived from your IP address, and precise location only if you grant permission in the app (for example, to set a delivery point). You can revoke this permission at any time in your device settings.
• Notification tokens: used to send you order updates and alerts through push notifications.
• Cookies and similar technologies: see Cookies below.

Information from third parties

• Payment partners such as Razorpay, who confirm the status of payments. We do not receive or store your full card number, CVV, UPI PIN or net-banking password.
• Meta Platforms (WhatsApp Business Platform and, where used, Facebook or Instagram lead forms and ads), which may share your name, phone number, profile name and the messages or form responses you send to us.
• Public sources, such as GST portal verification of a GSTIN you provide.

3. How we use your information

We use personal data only for the following purposes:

• To create, verify and manage your account.
• To verify your identity and business (KYC), including validating GSTIN and other business documents.
• To respond to enquiries, share price quotes and availability, and process, invoice, deliver and support your orders.
• To process payments, refunds and settlements.
• To send service messages such as OTPs, order confirmations, dispatch and delivery updates, payment reminders and account alerts — by SMS, WhatsApp, email, phone call or push notification.
• With your consent, to send promotional messages about products, prices, offers and new batches. You can opt out at any time.
• To operate, secure and improve the Services, including troubleshooting, analytics and fraud prevention.
• To comply with legal obligations, including tax, GST and accounting record-keeping, and to respond to lawful requests from authorities.
• To establish, exercise or defend legal claims.

We do not sell your personal data, and we do not rent or trade it to third parties for their own marketing.

4. Consent and legal basis

We process personal data on the basis of the consent you give when you submit a form, create an account, place an order or message us, and for the legitimate uses permitted under Section 7 of the DPDP Act — such as performing a transaction you requested or complying with law.

You may withdraw consent at any time by writing to gbrhatcheries@gmail.com. Withdrawal does not affect processing already carried out, and we may be unable to continue providing some Services (for example, an active trader account) without the data concerned.

5. How we share information

We share personal data only as needed for the purposes above, with:

• Payment processors such as Razorpay Software Private Limited, to process payments and refunds. Payment data is handled under their own privacy policy and PCI-DSS obligations.
• Communication providers such as Meta Platforms (WhatsApp Business Platform), and SMS, email and OTP service providers, to deliver messages to you.
• Cloud hosting and infrastructure providers that store and run our Services (for example, database, hosting and analytics providers).
• Logistics partners and transporters — only your name, phone number and delivery location — to deliver your order.
• Professional advisers such as auditors, chartered accountants and legal counsel, under confidentiality obligations.
• Government and regulatory authorities, where required by law, court order or lawful request.
• A successor entity, in connection with a merger, acquisition or restructuring, subject to this policy.

Our service providers act as Data Processors on our behalf and are permitted to use your data only to provide services to us.

6. WhatsApp, Facebook and Instagram

When you message us on WhatsApp or respond to our Facebook or Instagram ads or lead forms, we receive the information you provide and use it to respond to you and fulfil your request. Your use of these platforms is also governed by Meta's own terms and privacy policy.

• We only send WhatsApp messages to numbers that have opted in to receive them from us.
• You can opt out at any time by replying STOP or by contacting us. We will then send only essential messages about an active order, where permitted.
• If you connect to our Services using a Facebook login, we receive only the basic profile information you authorise (such as name and email). You can request its deletion as described in Data Deletion.

7. Cookies

Our website uses a limited number of cookies and similar technologies that are necessary for it to function, remember your preferences and measure basic traffic. Embedded third-party content, such as Google Maps, may set its own cookies governed by that provider's policy.

You can block or delete cookies in your browser settings; some parts of the website may not work correctly if you do.

8. Data retention

We keep personal data only as long as necessary for the purposes for which it was collected:

• Enquiries and leads that do not result in a business relationship: up to 24 months from last contact.
• Account data: for as long as your account is active, and deleted or anonymised after closure unless a longer period applies below.
• Invoices, transaction and tax records: for up to 8 years, as required under the Companies Act, 2013, the Central Goods and Services Tax Act, 2017 and the Income-tax Act, 1961.

When data is no longer needed, we securely delete or irreversibly anonymise it.

9. How we protect your data

We use reasonable security practices, including encryption of data in transit (HTTPS/TLS), access controls that limit data to authorised personnel on a need-to-know basis, row-level security on our databases, and trusted, certified service providers. No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.

10. Your rights

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct, complete or update inaccurate or incomplete personal data.
• Erase your personal data, subject to our legal retention obligations — see Data Deletion.
• Withdraw consent at any time.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Seek grievance redressal, as described below.

To exercise any of these rights, email gbrhatcheries@gmail.com from your registered email address or include your registered mobile number. We may need to verify your identity before acting on a request.

11. Children

Our Services are intended for farmers, traders and businesses, and are not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

12. Where your data is stored

Your data is stored primarily in India. Some of our service providers may process data on servers outside India. Where this happens, we transfer data only as permitted under the DPDP Act and require the provider to protect it to a standard consistent with this policy.

13. Grievance Officer

In accordance with the IT Act, 2000 and the DPDP Act, 2023, the details of our Grievance Officer are:

Gaddam Bucha Rao
Grievance Officer, GBR Hatcheries Private Limited
Door No. 57-14-24A, Pantakaluva Road, Patamata, Vijayawada, Andhra Pradesh - 520010
Email: gbrhatcheries@gmail.com

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last changed. For significant changes, we will notify you through the app, by email or by WhatsApp before they take effect.

15. Contact us

For any question about this policy or your personal data, write to gbrhatcheries@gmail.com, call 0866-234-5678, or visit our Contact page.