🕉️ Divya Chadhava Privacy Policy

1. Effective Date

This Privacy Policy is effective as of July 27, 2025. Any updates will display the new effective date.

2. Scope & Applicability

This Policy governs how Divya Chadhava (“we,” “us,” or “our”) collects, stores, uses, shares, and secures your personal digital data when you use our website, app, or purchase services. It applies to all users in India, in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”)

3. What Information We Collect

3.1. Personal Data (Identifiable)

Name, email, phone number
Postal address (if ordering ritual offerings)
Birth details, gotra, rituals preferences
Payment information (not stored; collected via encrypted third‑party gateway)

3.2. Sensitive Personal Data

Religious beliefs or spiritual practices
Health-related details (only if voluntarily provided, e.g. for health rituals)

3.3. Usage and Device Data

Device type, IP address, browser/OS, pages visited, session duration
Analytics events, error logs
Cookies, pixels, mobile device identifiers

4. How We Use Your Data

We process your data for lawful and explicit purposes—including:

Providing rituals, pujas, chadhavas, and related services
Order fulfillment, payments, delivery of prasads/videos
Personalized suggestions, reminders, spiritual content
Customer support, dashboards, transactional emails
Improving our platform and detecting fraud
Marketing updates (if subscribed) — you may revoke consent anytime

No user data is sold to third parties for marketing.

5. Legal Basis for Processing

In line with DPDP Act requirements, processing is conducted only with one or more lawful bases:

With your consent
For performance of a contract (e.g. to complete a purchase)
To comply with legal obligations
For legitimate interests, such as security and fraud prevention, when balanced with your rights

6. Data Sharing & Disclosure

We may share your personal data with:

Trusted service providers and payment gateways (e.g. logistics partners, video hosts)
Legal authorities, courts, or regulatory bodies when required by law
In case of business transfers (e.g. merger), with prior notice and confidentiality safeguards

We do not sell, license, or rent your personal data to third-party marketers.

7. Data Retention

We retain your data as long as required for the purpose for which it was collected or as mandated by law. Once expired:

Personal data is deleted or anonymized
Analytics and aggregated trends may be retained longer (in de‑identified form)

8. Data Security

We implement strong security protocols:

Encryption in transit (HTTPS/TLS) and at rest
Regular audits of our servers and databases
Access controls with only authorized staff access
Periodic vulnerability scanning and breach detection systems

9. Your Rights Under DPDP Act

As a data principal, you have the following rights:

Right to access, correct, or erase your personal data
Right to withdraw consent at any time
Right to lodge a grievance or complaint with our grievance officer

10. Cookies & Tracking Technologies

We use cookies, pixels, local storage, and similar tech for:

Session management and user experience
Analytics and performance monitoring
Non‑personalized advertising (with user consent)

You can change cookie settings via your browser preferences.

11. Children’s Privacy

Our services are not designed for children under 18. We do not knowingly collect data from minors. If we discover such data was submitted, we will delete it promptly.

12. Updates to Privacy Policy

We may update this privacy policy periodically. Any material changes will be highlighted on our website/app and the date at the top will be updated.

13. How to Contact Us

For any inquiries, data requests, complaints, or privacy-related issues, please contact our Grievance Officer at:

Email: help@divyachadhava.com

14. International Transfers

If any data is processed or stored outside India (e.g. on cloud servers abroad), we ensure sufficient safeguards are in place and comply with cross-border transfer requirements under the DPDP Act.