Privacy Policy | Kathait Gold & Hilvera

1. Data Fiduciary & Who We Are

Upfront Enterprise acts as the Data Fiduciary responsible for personal data processed under the Kathait Gold™ and Hilvera™ brand ecosystems. We operate a licensed food processing facility in Dehradun, Uttarakhand, India.

Our core offerings include 100% pure kitchen essentials, such as stone-free whole wheat flours, MP Sharbati atta, Garhwali Mandua (Ragi) flour, pure ground spices, and virgin cold-pressed cooking oils.

• Operating Entity: Upfront Enterprise (Sole Proprietorship)
• Founder & Proprietor: Balbir Singh Kathait
• Registered Brands: Kathait Gold™ and Hilvera™
• FSSAI License Number: 12625005000533
• GSTIN: 05AKJPK8349P4ZB
• Headquarters: Dehradun, Uttarakhand, India

2. Scope of This Privacy Policy

This policy governs personal data gathered via our websites, WhatsApp order channels, telephone inquiries, direct mill counter purchases, and customer service interactions.

External third-party platforms, commercial delivery couriers, banking gateways, and social media channels operate under their own independent privacy notices.

3. Personal Information We Collect

In accordance with the data minimization principle of the DPDP Act, we collect only the information necessary to fulfill your orders and support your customer experience:

Information You Provide Directly

• Identity & Contact: Full legal name, mobile phone number, WhatsApp number, and email address.
• Fulfillment Details: Complete street address, apartment/building name, landmark, state, and 6-digit postal pin code.
• Transactional Records: Invoice details, items ordered, order value, payment status, and replacement/return requests.
• Inquiries & Feedback: Voluntary communications submitted through contact forms, emails, or reviews.

Information Collected Automatically

• Technical Device Data: Internet Protocol (IP) address, browser type, device identifiers, and operating system.
• Usage Telemetry: Pages viewed, referring URLs, session durations, and shopping cart persistence data.

4. How We Receive Personal Data

Personal information enters our systems through:

• Online store registration and checkout workflows.
• Customer care messages via WhatsApp, phone calls, or emails.
• Payment gateway settlement callbacks confirming transaction authorization.
• Logistics carrier tracking updates confirming parcel dispatch or delivery completion.

5. Purpose of Data Processing

Personal information is processed strictly for legitimate commercial and operational purposes:

• Processing, packing, and dispatching food orders from our Dehradun facility.
• Sending real-time order receipts, Airway Bill (AWB) tracking numbers, and delivery notifications.
• Verifying transaction authenticity and mitigating fraudulent payment attempts.
• Handling product inquiries, replacement claims, and refund processing.
• Generating mandatory statutory tax invoices under Indian GST and accounting laws.
• Maintaining platform security and preventing automated scraping or cyber threats.

6. Lawful Grounds & User Consent

Under the DPDP Act, 2023, data processing is carried out based on your explicit consent when submitting order forms, creating an account, or requesting product fulfillment.

You reserve the right to withdraw your consent for non-essential communications (such as marketing updates) at any time. Withdrawal of consent does not affect processing previously carried out under lawful contractual obligations.

7. Cookies & Website Analytics

Our websites employ minimal, performance-focused cookies to ensure essential shopping functionality:

• Essential Cookies: Required to maintain shopping cart contents, session authentication, and secure checkout navigation.
• Analytical Cookies: Help us measure visitor flow, page load performance, and popular product categories to improve user experience.

You can manage or disable cookies through your browser preferences. Please note that disabling essential cookies may impact checkout functionality.

8. Orders, Payments & Financial Security

When completing a purchase on our website, digital transactions are encrypted and processed through RBI-authorized payment gateways complying with international PCI-DSS standards.

Our support team will never solicit your payment OTPs, card PINs, or passwords via phone, WhatsApp, or email.

9. Third-Party Data Sharing

We do not sell, rent, or trade your personal data to commercial third-party marketing brokers. Data is shared solely with verified operational partners necessary to fulfill your orders:

• Logistics Partners: National carriers (Delhivery, Blue Dart, DTDC, India Post) receive your name, address, and phone number solely for parcel delivery.
• Payment Gateways: Banking aggregators receive encrypted transaction parameters for payment clearance.
• Statutory Authorities: Regulatory or tax bodies when formally required under applicable Indian law.

10. Logistics & Technology Partners

All external service providers (cloud hosting, SMS gateways, express couriers) are bound by contractual confidentiality agreements and are permitted to process information strictly for authorized services.

11. Data Retention Standards

Personal data is retained only for as long as necessary to fulfill the original purpose of collection, provide customer support, resolve return claims, and comply with statutory GST and accounting record-keeping requirements (typically 6 to 8 years for tax records).

When personal data is no longer required for legal or business reasons, it is securely deleted or anonymized.

12. Technical & Organizational Security

We implement administrative, technical, and physical safeguards—including SSL/TLS data encryption, restricted administrative access, firewalls, and secure hosting environments—to protect your personal information against unauthorized access, loss, or misuse.

13. Children’s Data Protection

Our website is intended for adult consumers and is not designed to solicit or collect personal information from individuals under 18 years of age without verifiable parental or guardian consent.

14. Marketing & Promotional Communications

We may send occasional updates regarding seasonal flour harvests, fresh oil pressings, or order updates. You may opt out of promotional messages at any time by emailing us or using the unsubscribe link. Critical transactional messages regarding active orders will continue to be sent.

15. Your Rights as a Data Principal (DPDP Act, 2023)

Under Indian data protection legislation, you are entitled to exercise the following rights:

• Right to Access: Request a summary of personal information processed by Upfront Enterprise.
• Right to Correction: Request the updating of inaccurate, outdated, or incomplete personal details.
• Right to Erasure: Request deletion of personal data no longer necessary for transactional or statutory purposes.
• Right to Grievance Redressal: Register complaints regarding data handling with our Grievance Officer.
• Right to Nominate: Nominate an individual to exercise your privacy rights in the event of death or incapacity.

16. Privacy Requests & Grievance Redressal

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are provided below:

17. External Links & Third-Party Services

Our website may contain links to external platforms, courier tracking tools, or social media pages. We are not responsible for the independent privacy practices or content of third-party platforms.

18. Data Storage & Infrastructure

Customer data is securely hosted on servers complying with industry-standard security protocols. Where cloud infrastructure is utilized, data protection safeguards comply with applicable Indian legal standards.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological, operational, or legal developments. The updated policy will be posted on this page with a revised “Last Updated” date.