Privacy Policy | Kathait Gold & Hilvera

1. Who We Are

Upfront Enterprise is the business responsible for the Kathait Gold and Hilvera brands. The business operates from Dehradun, Uttarakhand, India.

Our products may include food and kitchen essentials such as whole wheat atta, multigrain atta, mandua flour, spices, mustard oil, sesame oil and other products offered through our official sales channels.

• Business: Upfront Enterprise
• Brands: Kathait Gold and Hilvera
• Location: Dehradun, Uttarakhand, India
• FSSAI License: 12625005000533
• GSTIN: 05AKJPK8349P4ZB

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through our website, online ordering processes, customer-support communications, business communications and other services or interactions operated by or on behalf of Upfront Enterprise.

Separate third-party platforms, marketplaces, payment providers, courier companies and social-media platforms may collect and process information under their own privacy policies.

3. Personal Information We Collect

Depending on how you interact with us, we may collect information that is reasonably necessary for operating our website, fulfilling orders, communicating with customers and meeting applicable obligations.

Information You Provide Directly

• Name and contact details.
• Mobile number and email address.
• Billing and delivery address.
• Order and purchase information.
• Customer-service requests and communications.
• Feedback, reviews or other information you voluntarily submit.
• Information required to resolve an order, payment or delivery issue.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, depending on the technologies and services enabled on the website.

• IP address or approximate network information.
• Browser type and device information.
• Operating system and technical information.
• Pages visited and interactions with website features.
• Referral or campaign information.
• Cookie and similar technology information.

We do not intend to collect more personal information than is reasonably required for the relevant purpose.

4. How We Receive Personal Information

We may receive personal information from:

• Customers who place orders or create accounts.
• Visitors who submit contact forms or enquiries.
• Customers who contact us by phone, WhatsApp or email.
• Payment service providers when transactions are processed.
• Courier and logistics partners when required for delivery.
• Technology providers supporting our website and business systems.
• Third-party marketplaces or authorised sales channels where applicable.

5. How We Use Personal Information

Depending on the circumstances, personal information may be used for the following purposes:

• Processing and fulfilling product orders.
• Arranging delivery and communicating shipment information.
• Processing or verifying payments.
• Responding to customer enquiries and support requests.
• Managing returns, refunds, replacements and complaints.
• Maintaining invoices, accounting and business records.
• Improving website functionality and customer experience.
• Understanding website usage and performance.
• Preventing fraud, abuse and unauthorised transactions.
• Protecting the security of our website and business systems.
• Complying with applicable legal, tax, regulatory and accounting requirements.
• Communicating important service or order-related information.

6. Purpose, Consent and Other Permitted Processing

Depending on the nature of the information and the purpose of processing, we may process personal information where permitted or required under applicable law, including where processing is based on consent or is necessary for a lawful business purpose, fulfilment of a requested service, compliance with a legal obligation, prevention of fraud or protection of legitimate operational interests.

Where consent is required, we will seek consent in the manner required by applicable law. Where processing is based on consent, withdrawal of consent will not affect processing that was lawfully carried out before the withdrawal.

7. Cookies and Website Analytics

Our website may use cookies, pixels, tags, local storage or similar technologies to operate website features, remember preferences, understand website performance, measure traffic and improve the customer experience.

Essential Technologies

Some technologies may be necessary for functions such as shopping-cart operation, checkout, authentication, security or other essential website functions.

Analytics and Performance

Analytics technologies may help us understand how visitors use the website, which pages receive traffic and whether website features are functioning effectively.

Managing Cookies

You can manage or restrict cookies through your browser settings. Restricting certain cookies may affect the functionality of some website features.

8. Orders, Payments and Transactions

When you place an order, we may process information required to identify the customer, confirm the order, process payment, generate an invoice, arrange delivery and provide customer support.

Online payments may be processed by independent payment service providers. Payment providers may collect and process financial information according to their own terms, privacy policies and security practices.

9. When We Share Personal Information

We may share personal information where reasonably necessary for operating the business, fulfilling a requested service, complying with applicable law or protecting our customers and business.

• Delivery partners: name, address and contact information required to deliver an order.
• Payment providers: information required to process or verify transactions.
• Technology providers: information required to operate hosting, ecommerce, communication, analytics or other business systems.
• Professional advisers: information where reasonably necessary for accounting, legal, compliance or business purposes.
• Government or regulatory authorities: information where disclosure is required or permitted by applicable law.
• Fraud-prevention or security providers: information where reasonably necessary to detect or prevent fraudulent or unauthorised activity.

We do not sell or rent personal information to third parties as a commercial data-selling business.

10. Service Providers and Processors

We may use external service providers to support website hosting, ecommerce functionality, payment processing, communications, analytics, customer support, logistics, security and other business operations.

Such providers may process personal information on our behalf or independently according to the nature of the service. We aim to use appropriate providers and require privacy and security protections appropriate to the services they provide.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer support, accounting, taxation, legal claims, fraud prevention, regulatory requirements and other legitimate business purposes.

Different categories of information may be retained for different periods. When information is no longer required and there is no applicable legal or business reason to retain it, we may delete, anonymise or securely dispose of it in accordance with applicable requirements and our operational procedures.

12. Data Security

We use reasonable technical and organisational measures appropriate to the nature of the information and the risks involved to help protect personal information against unauthorised access, misuse, loss, alteration or disclosure.

Depending on the relevant system, safeguards may include access controls, account protections, secure transmission technologies, provider-level security controls and other appropriate measures.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Customers should also protect their own passwords, devices, accounts and authentication credentials.

Where a security incident involving personal data requires action under applicable law, we will take appropriate steps in accordance with the applicable legal and regulatory requirements.

13. Children’s Personal Data

Our website and products are intended for general consumers and are not designed to knowingly collect personal information directly from children in circumstances where such collection is prohibited by applicable law.

Where applicable law requires verifiable parental or lawful guardian consent for processing a child’s personal data, we will follow the requirements applicable to that processing.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us using the details below.

14. Marketing Communications

We may send service-related communications necessary to fulfil an order or respond to a customer request.

Where promotional communications are sent on the basis of consent or another applicable legal permission, customers may opt out or withdraw consent using the available unsubscribe mechanism or by contacting us.

Opting out of promotional communication will not necessarily stop essential communications relating to an existing order, payment, delivery, security matter or customer-support request.

15. Your Privacy Rights

Depending on the applicable law, the nature of the processing and the effective date of the relevant provisions, you may have rights relating to your personal data, which may include rights to:

• Obtain information about applicable processing of your personal data.
• Request access to personal information where the law provides such a right.
• Request correction of inaccurate or incomplete personal information.
• Request deletion or erasure where legally applicable.
• Withdraw consent where processing is based on consent.
• Raise a grievance regarding the processing of personal information.
• Exercise other rights provided under applicable data-protection law.

We may need to verify your identity before completing certain privacy requests. Some requests may be subject to legal, contractual, security or regulatory limitations.

16. Privacy Requests and Grievances

If you have a question, request or complaint concerning the privacy of your personal information, please contact us first using the contact details below.

Please provide sufficient information for us to identify the relevant account, order or request. We may contact you for additional information or identity verification where reasonably necessary.

We will handle privacy requests and grievances in accordance with applicable law and the procedures that apply to the relevant processing activity.

17. Third-Party Websites and Services

Our website may contain links to third-party websites, marketplaces, social-media platforms, payment services, courier services or other external services.

Third-party websites and services operate under their own terms and privacy policies. We are not responsible for privacy practices outside our control. We recommend reviewing the applicable third-party privacy policy before submitting personal information.

18. Data Storage and Transfers

Personal information may be processed or stored using service providers or technology infrastructure located in India or other jurisdictions, depending on the services used to operate our website and business.

Where personal information is transferred, processed or stored outside India, we will take the steps required by applicable law and the contractual or operational arrangements applicable to the relevant service.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website functionality, service providers, legal requirements or data-protection obligations change.

The latest version will be published on this page with an updated “Last Updated” date. We encourage customers and website visitors to review this page periodically.