VanaraSpices — Privacy Policy

Effective Date: November, 12, 2025 Last Updated: August, 26, 2026

VanaraSpices ("VanaraSpices," "we," "us," or "our") respects your privacy and is committed to protecting the personal information of everyone who interacts with us — whether you're browsing vanaraspices.com, buying our spices on Amazon or another marketplace, placing a wholesale/export order, or applying for a job with us.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have — including specific provisions for customers in India, the United States, the United Kingdom, the European Union/EEA, and the Middle East, reflecting that Vanara Spices sells and ships worldwide.

1. Who We Are

VanaraSpices is a spice manufacturing and food-processing business based in Amaravati, Andhra Pradesh, India, registered under FSSAI, Udyam, and GST, and holding an Import Export Code (IEC) and Spice Board of India registration for our export operations. We operate:

Our website, vanaraspices.com
Direct-to-consumer (B2C) and wholesale (B2B) sales channels
Marketplace storefronts (e.g., Amazon)
Export/import trade with customers and partners in the USA, UAE, UK, Europe, the Middle East, and other regions

For the purposes of applicable data protection laws, Vanara Spices is the "data controller" (or equivalent term, such as "business" under US state law or "data fiduciary" under India's DPDP Act) responsible for the personal information described in this policy, unless stated otherwise.

Registered address: [Insert full business address] Email: [Insert contact email] Phone: [Insert phone number]

2. Scope

This policy applies to personal information we collect through:

vanaraspices.com and any subdomains or embedded forms (e.g., the job application form, contact/quote forms, the Import & Export page)
Orders placed directly with us (B2C retail and B2B/wholesale, including FOB/CIF export orders)
Our marketplace listings (e.g., Amazon) where Vanara Spices is the seller
Emails, phone calls, WhatsApp, or other direct communications with us
Job applications submitted to us

It does not cover third-party websites, marketplaces, or services we don't control, even if linked from our site (see Section 10).

3. Information We Collect

a) Information you give us directly

Contact & account details: name, email address, phone number, shipping and billing address, company name and designation (for B2B/export buyers)
Order & transaction details: products purchased, order quantities, pricing/trade terms (e.g., FOB/CIF, MOQ), payment confirmation details (we do not store full card numbers — see Section 8)
Export/trade documentation: for wholesale and export customers, information needed for invoicing, customs, and shipping (e.g., buyer's IEC or equivalent, tax/GST or VAT ID, consignee details)
Job applicant information: name, contact details, resume/CV, and any other details submitted through our job application form
Communications: anything you send us via contact forms, email, phone, or messaging apps, including inquiries and support requests

b) Information collected automatically

Website usage data: IP address, browser type, device type, pages visited, referring URLs, and approximate location, collected via our website platform (Wix) and analytics/cookies
Cookies and similar technologies (see Section 6)

c) Information from third parties

Marketplaces: if you buy from us via Amazon or another marketplace, that platform shares certain order and shipping information with us as the seller, subject to that platform's own policies
Payment processors, shipping carriers, and freight forwarders: confirmation of payment status, delivery tracking, and customs-clearance information
Publicly available trade/business information: for B2B and export partners (e.g., company registration details)

4. How We Use Your Information

We use personal information to:

Process and fulfill orders, including domestic delivery and international export shipments
Create and manage customer/wholesale accounts
Generate invoices and comply with tax, GST, customs, and export-documentation requirements
Communicate with you about orders, quotes, inquiries, and support
Operate, secure, and improve our website and listings
Market our products (only where permitted, and with an opt-out — see Section 7)
Evaluate job applications
Comply with legal, regulatory, and law-enforcement obligations (e.g., FSSAI, GST, Spice Board, customs authorities)
Detect and prevent fraud, abuse, or security incidents

We do not sell your personal information to third parties for their own marketing purposes.

5. Legal Bases for Processing (EU/UK/EEA Customers)

If you are located in the EU, UK, or EEA, we rely on the following legal bases under the GDPR/UK GDPR:

Contract: to process and deliver your order or respond to a quote request
Legal obligation: to meet tax, customs, and food-safety recordkeeping requirements
Legitimate interests: to operate and secure our website, prevent fraud, and manage our B2B relationships
Consent: for optional marketing communications and non-essential cookies, which you can withdraw at any time

6. Cookies & Similar Technologies

Our website (built on Wix) uses cookies and similar technologies to:

Keep the site functioning correctly (essential cookies)
Understand site traffic and usage patterns (analytics cookies)
Support advertising or remarketing, if enabled (marketing cookies)

You can control cookies through your browser settings and, where required by law (e.g., EU/UK visitors), through a cookie-consent banner on our site. Disabling some cookies may affect site functionality.

7. How We Share Your Information

We share personal information only as needed to run our business:

Service providers: website hosting (Wix), payment processors, email/CRM tools, and inventory/accounting systems, bound by confidentiality and data-processing obligations
Shipping, logistics & customs: couriers, freight forwarders, and customs brokers/authorities in both India and the destination country, to fulfill and clear international shipments
Marketplaces: where you order through Amazon or similar platforms, relevant order details are shared with that platform as required to complete the transaction
Professional advisors: accountants, auditors, and legal counsel, where necessary
Regulators & authorities: FSSAI, GST authorities, the Spice Board of India, customs authorities, or law enforcement, where legally required
Business transfers: if Vanara Spices is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction, subject to this policy or a successor policy

We do not share personal information with third parties for their independent marketing use without your consent.

8. Payment Information

We do not store full payment card numbers. Payments are processed by third-party payment processors and/or marketplace platforms (e.g., Amazon), which have their own privacy and security safeguards. We only retain confirmation of payment status and the last few digits of a payment method, where applicable, for order records.

9. International Data Transfers

Because Vanara Spices sells and ships to customers in the USA, UAE, UK, Europe, the Middle East, and elsewhere, personal information may be transferred to, stored, and processed in India and in other countries where our service providers, logistics partners, or marketplace platforms operate.

Where required (for example, for EU/UK/EEA customers), we take steps intended to ensure such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

10. Third-Party Links

Our website and marketplace listings may link to third-party sites (e.g., payment gateways, social media, marketplaces). We are not responsible for the privacy practices of those third parties. Please review their own privacy policies.

11. Data Retention

We retain personal information only as long as necessary to:

Fulfill the purpose it was collected for (e.g., completing and supporting an order)
Meet tax, GST, customs, and food-safety recordkeeping requirements under Indian law
Resolve disputes and enforce agreements

Job application data is retained only as long as needed to evaluate the application and for a reasonable period afterward, unless you ask us to delete it sooner or applicable law requires longer retention.

12. Data Security

We use reasonable technical and organizational measures — such as restricted access, secure storage, and secure order-processing systems — to protect personal information against unauthorized access, loss, or misuse. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Your Privacy Rights

Your specific rights depend on where you live:

If you are in the European Union, UK, or EEA (GDPR / UK GDPR)

You have the right to: access your data; correct inaccurate data; request erasure; restrict or object to processing; request data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA)

You have the right to: know what personal information we collect, use, and disclose; request deletion; correct inaccurate information; opt out of the "sale" or "sharing" of personal information (we do not sell personal information); and not be discriminated against for exercising these rights.

If you are in India (Digital Personal Data Protection Act, 2023)

As a Data Principal, you have the right to: access information about the personal data we process about you; request correction, updating, or erasure of your data; withdraw consent (where processing is based on consent); and file a grievance with us or, thereafter, with the Data Protection Board of India.

If you are elsewhere (e.g., UAE, other Middle Eastern or international markets)

We will honor reasonable requests to access, correct, or delete your personal information consistent with applicable local law.

To exercise any of these rights, contact us at [Insert contact email]. We may need to verify your identity before fulfilling a request.

14. Grievance Officer (India)

In accordance with Indian law, our Grievance Officer can be reached at:

Name: [Insert Grievance Officer Name] Email: [Insert email] Address: [Insert address]

15. Job Applicants

If you apply for a job with Vanara Spices through our website's application form, we collect your name, contact details, resume/CV, and any information you choose to include, in order to evaluate your application, contact you about the role, and maintain hiring records. We do not use applicant data for any other purpose.

16. Children's Privacy

Our products and services are directed at businesses and adult consumers. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can delete it.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised "Last Updated" date. For material changes, we will provide additional notice where required by law.

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Vanara Spices [Insert full address — Amaravati, Andhra Pradesh, India] Email: [Insert contact email] Phone: [Insert phone number]

A note before you publish this

This document is a comprehensive starting template covering the standard elements a global spice business needs (India's DPDP Act, GDPR/UK GDPR, CCPA/CPRA, cookies, international transfers, a grievance officer, job applicants, marketplace sales, and export/customs data sharing). It is not legal advice. Before publishing it on vanaraspices.com, it's worth having a lawyer confirm it matches your actual data practices and fully satisfies the specific laws of every country you ship to — especially since export/B2B customers in the EU and UK trigger GDPR obligations, and US marketplace sales can trigger state-level laws beyond California's.