Privacy Policy

1. Introduction & Operating Entity

This Privacy Policy applies to the website www.rootish.in, mobile interfaces, and associated e-commerce services owned and operated by SHANTHI ENTERPRISES (trading under the registered brand name ROOTISH™), having its principal place of business at 68, Periya Venkatachalam Street, Sathyamangalam, Erode District, Tamil Nadu — 638401.

We are committed to maintaining the confidentiality, integrity, and security of all personal details entrusted to us by our customers, adhering to the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and applicable Indian data protection principles.

2. Personal Information We Collect

Depending on how you interact with our platform, we collect the following categories of information:

3. Purpose & Legal Basis for Data Processing

We process your personal information strictly for legitimate commercial and regulatory purposes:

• Fulfillment & Logistics: Packaging seed orders at our certified packing facility in Sathyamangalam and scheduling doorstep delivery or reverse pickup via DTDC Courier.
• Transactional Notifications: Sending instant order receipts, DTDC shipment tracking numbers (AWB), doorstep pickup progress, OTP logins, and UPI refund UTR reference confirmations via SMS and WhatsApp.
• Customer Support & Issue Resolution: Reviewing damage or defect claims within the 24-hour delivery window and processing immediate UPI refunds or replacement dispatches.
• Statutory & Tax Compliance: Maintaining GST sales registers, electronic invoicing, and FSSAI food trace registers in compliance with the laws of India.

4. WhatsApp Communications & Meta WhatsApp Cloud API

By providing your mobile number at checkout or login, you consent to receive strictly transactional service communications via WhatsApp, delivered through the official Meta WhatsApp Cloud API:

5. Exclusive Third-Party Logistics & Operational Disclosures

We strictly do not sell, rent, or trade your personal data with advertising brokers or external marketing companies. Your data is disclosed only to verified operational infrastructure partners:

• DTDC Courier: Our exclusive courier partner receives your recipient name, delivery address, phone number, and package details to execute pan-India doorstep shipments and reverse return pickups.
• Razorpay Payment Gateway: Processes online credit/debit card, netbanking, and prepaid transactions under PCI-DSS Level 1 bank-grade encryption.
• Supabase Cloud Infrastructure: Provides SOC-2 Type II compliant cloud database storage with Row-Level Security (RLS) to safeguard customer records.
• Legal Authorities: Information may be disclosed if required by law, court summons, or official directive from Indian law enforcement agencies.

6. Claims Evidence & Photographic Uploads

When a customer submits a claim for transit damage, tampered packaging, or broken seals, uploaded photographs are transferred over encrypted TLS connections to a secure, private bucket. These images are accessible only to authorized rootish.in support auditors to substantiate insurance or courier claims with DTDC Courier and verify refund eligibility.

7. Data Retention & Account Control

• Profile Updates: You have the right to view, modify, or add an email address, change your password, and update your personal details at any time in your customer profile.
• Statutory Retention: Order invoices and GST tax records are retained for the statutory period mandated under the Goods and Services Tax Act and Indian financial auditing guidelines.
• Account Deletion: You may request the deletion or anonymization of your customer account profile by submitting a written request to our Grievance Officer.

8. Grievance Officer & Contact Details

In accordance with the Information Technology Act 2000 and rules made thereunder, the contact details of the Grievance Officer for rootish.in are provided below: