Privacy Policy

This Privacy Policy explains how Deshroot Global LLP collects, uses, shares, stores and protects personal data when customers browse the Platform, create an account, place orders, contact support, interact with marketing or otherwise use Deshroot services.

Depending on your use of the Platform, we may collect:

• Name, email address, phone number, billing/shipping address.
• Account details, order and return history.
• Communication and support records, reviews/feedback.
• Device, browser, IP and usage information.
• Cookie and advertising identifiers.
• Payment-status and transaction-reference information.
• Other information you voluntarily provide.

Full payment card credentials are ordinarily processed by the authorised payment provider rather than stored by Deshroot.

We may use personal data to:

• Create and manage accounts.
• Process and fulfil orders, collect and reconcile payments.
• Arrange delivery and provide tracking.
• Manage returns, refunds and cancellations.
• Communicate transactional updates and provide customer support.
• Prevent fraud and security incidents.
• Maintain accounting and legal records.
• Improve products and website experience.
• Measure website/advertising performance and personalise content where appropriate.
• Send promotional communication where the required consent/permission exists.

Order, payment, shipping, security and support messages may be sent because they are necessary to provide the requested service or transaction. Promotional email, SMS or WhatsApp communication is based on an appropriate permission/consent mechanism and can be opted out of using the provided unsubscribe/preferences route.

Deshroot may use essential cookies for login, cart, checkout, security and site functionality, and may use analytics/advertising technologies from providers such as Google and Meta. Where consent is relied upon for non-essential tracking, the website provides a clear preference mechanism and does not use pre-selected or deceptive consent choices.

Deshroot shares personal data with the following categories of service providers only as necessary for the stated purpose:

• Payments — Razorpay, to process and reconcile payments.
• Shipping/Logistics — Delhivery, to arrange delivery and provide tracking.
• SMS/Communication — MSG91 and Horizon, where applicable, to send transactional and, where consented, promotional messages.
• WhatsApp — to send order and support updates where applicable.
• Analytics — Google Analytics, to understand and improve website usage.
• Advertising — Meta and Google advertising services, to measure and personalise marketing where the required consent exists.
• CRM/ERP — Zoho or other systems used to manage customer relationships and operations.
• Suppliers/Fulfilment partners — sellers/vendors on the Platform, only as necessary to fulfil an order.

These parties receive only the information reasonably required for the relevant purpose and are contractually or otherwise required to handle it appropriately.

Because Deshroot is a marketplace, relevant customer delivery/contact/order information may be provided to the seller responsible for fulfilling the order. Sellers are required to use such information only for authorised fulfilment, customer-service and legal purposes.

Deshroot collects only information reasonably required for the stated purpose. Access is limited to authorised employees, vendors and service providers on a need-to-know basis.

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, ongoing customer service, legal/accounting/tax obligations, fraud prevention, dispute resolution or other lawful requirements. Data no longer required is deleted, anonymised or securely archived as appropriate.

Deshroot uses reasonable technical and organisational safeguards such as HTTPS, access controls, credential protection, restricted administrative permissions, backups/logging and secure service-provider integrations. No system is completely risk-free, but suspected security incidents are promptly investigated and handled in accordance with applicable law.

Subject to applicable law and legal retention requirements, you may request:

• Access to information about how your personal data is processed.
• Correction/completion of inaccurate data.
• Deletion/erasure of data that is no longer required.
• Withdrawal of marketing consent.
• Account deletion or grievance redressal.

Some information may need to be retained to comply with tax, accounting, fraud-prevention or legal obligations.

The website/account area provides a clear route to request account deletion, or you may email support@deshroot.com or business@deshroot.com. Deshroot may retain transaction records that it is legally required to preserve even after the customer account is closed.

The Platform is intended for persons legally capable of transacting. Users under 18 should use the Platform only through a parent or lawful guardian. Deshroot does not knowingly use children's personal data for behavioural advertising or other purposes contrary to applicable law.

Some technology/service providers may process or store information outside your state or outside India, subject to applicable legal restrictions and provider arrangements. Deshroot will update practices if the Government notifies restrictions on cross-border transfers.

If a personal data breach occurs, Deshroot will take reasonable containment and remediation steps and will notify affected individuals and/or competent authorities where required by applicable law.

This Privacy Policy may be updated when services, providers or legal requirements change. The current effective date is displayed on the Platform. Material changes will be communicated where required.

For privacy questions, account/data requests or formal complaints, contact:
Yash Chaudhary, Grievance Officer
Deshroot Global LLP
Email: business@deshroot.com

Customer support may also be contacted at:
Email: support@deshroot.com
Phone: +919597658777 (during stated support hours)