Privacy Policy
How Sri Muthu Crackers Agency collects, uses, and protects your personal information.
Last Updated: October 11, 2026 | Data Controller: Sri Muthu Crackers Agency, Sivakasi, Tamil Nadu
1. Data We Collect
Personal Information (provided by you)
- Contact Details: Name, phone number, WhatsApp number, email address
- Delivery Information: Address, city, pincode, landmark
- Order Details: Product selections, quantities, preferences
- Payment Information: UPI ID, bank details (for refunds), transaction references
- Business Details: GSTIN, company name (for wholesale/B2B orders)
Automatically Collected Data
- Technical Data: IP address, browser type, device info, operating system
- Usage Data: Pages visited, time spent, referral source, search queries
- Cookies: Session cookies, preference cookies, analytics cookies (see Cookie Policy)
- Referral Data: Referral code from affiliate links (30-day cookie)
Third-Party Sources
- WhatsApp Business API (message metadata for order processing)
- Payment gateways (transaction status, not full card details)
- Logistics partners (delivery status, pincode validation)
2. How We Use Your Data
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Order processing & fulfillment | Contract performance | Contact, delivery, order, payment data |
| Customer communication (order updates, support) | Legitimate interest / Contract | Contact details, order history |
| WhatsApp order notifications & support | Legitimate interest / Consent | Phone/WhatsApp number, order details |
| Payment processing & refunds | Contract performance | Payment info, transaction data |
| Delivery & logistics coordination | Contract performance | Address, phone, order details |
| Fraud prevention & security | Legitimate interest | IP, device, order patterns |
| Website analytics & improvement | Consent (analytics cookies) | Usage data, technical data |
| Marketing (WhatsApp/SMS offers) | Consent / Legitimate interest | Contact details, order history |
| Legal compliance (GST, accounting) | Legal obligation | Order, payment, GSTIN data |
| Referral program tracking | Contract performance | Referral code, referrer/referee data |
3. Data Sharing & Disclosure
We share data with:
- Logistics Partners: For delivery (name, phone, address, order details)
- Payment Processors: For transaction processing (transaction amount, reference)
- WhatsApp Business API: For order notifications (phone, message template data)
- Government Authorities: For GST compliance, legal requirements (as required by law)
- Professional Advisors: Accountants, auditors (anonymized/aggregated where possible)
We do NOT:
- Sell your personal data to third parties
- Share data for third-party marketing without consent
- Store full credit/debit card details (handled by payment gateway)
- Transfer data outside India without adequate safeguards
4. Data Retention
| Data Category | Retention Period | Basis |
|---|---|---|
| Order & transaction records | 7 years | GST/Accounting legal requirement |
| Customer account/profile data | Active + 3 years after last order | Legitimate interest / Contract |
| Website analytics (anonymized) | 26 months | Google Analytics default |
| WhatsApp chat logs | 1 year | Customer support quality |
| Referral program data | Active + 3 years | Program operation |
| Marketing consent records | Duration of consent + 2 years | Consent evidence |
5. Your Rights (Under Indian Law & GDPR Principles)
Right to Access
Request a copy of your personal data we hold
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion (subject to legal retention)
Right to Portability
Receive your data in structured format
Right to Restrict Processing
Limit how we use your data
Right to Object
Object to marketing & profiling
6. Cookies & Tracking
Types of Cookies We Use:
- Essential (Session): Authentication, cart, order processing - cannot be disabled
- Preferences: Language, currency, display settings - 1 year
- Analytics (Google Analytics): Anonymous usage statistics - 26 months (with consent)
- Referral Tracking: Affiliate attribution cookie - 30 days
Managing Cookies:
Browser settings allow blocking/deleting cookies. Disabling essential cookies breaks ordering functionality. Analytics cookies require your consent via our cookie banner.
7. Data Security
- Encryption: HTTPS/TLS for all data in transit
- Access Control: Role-based access, principle of least privilege
- Storage: Encrypted databases, secure cloud infrastructure
- Monitoring: Intrusion detection, audit logs, regular security reviews
- Staff Training: Annual data protection training for all employees
- Incident Response: Breach notification within 72 hours as per regulations
8. WhatsApp Business Communications
We use WhatsApp Business API for:
- Order confirmations & updates (transactional)
- Delivery notifications & tracking (transactional)
- OTP verification for orders (security)
- Promotional offers (only with your opt-in consent)
You can opt-out of promotional messages anytime by replying "STOP" or contacting us. Transactional messages cannot be opted out as they're essential for order fulfillment.
9. Children's Privacy
Our services are not directed to children under 18. Fireworks purchase requires age 18+. We do not knowingly collect data from minors. If you believe we have collected a minor's data, contact us immediately for deletion.
10. Contact Us
For privacy queries, data requests, or complaints:
- Email: [email protected]
- WhatsApp: +91 94881 12705
- Phone: +91 94881 12705 (Mon-Sat, 9AM-6PM)
- Address: Sri Muthu Crackers Agency, Sivakasi, Tamil Nadu - 626123
We aim to respond to all privacy inquiries within 30 days. For unresolved concerns, you may approach the relevant data protection authority.