Skip to Content

Privacy Policy

Introduction

Karaikal Iyangars Foods Limited (“KIFL”, “we”, “us”, or “our”) is committed to protecting the privacy of visitors to our website and users of our online ordering platform (collectively, the “Site”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you as a Data Principal under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its rules, read together with the Information Technology Act, 2000 and applicable rules made thereunder.

By accessing or using the Site, placing an order, or otherwise submitting personal data to us, you agree to the collection, storage, use, and disclosure of your information as described in this Policy. If you do not agree with this Policy, please do not use the Site.

Definitions

•    “Personal Data” means any data about an individual who is identifiable by or in relation to such data.

•    “Data Principal” means the individual to whom the personal data relates — i.e., you, our customer or website visitor.

•    “Data Fiduciary” means KIFL, which determines the purpose and means of processing your personal data.

•    “Processing” means any operation performed on personal data, including collection, storage, use, sharing, or erasure.

•    “Consent Manager” and “Data Protection Board” have the meanings assigned to them under the DPDP Act, 2023.

Personal Data We Collect

(a) Information you provide directly

•    Name, mobile number, email address, and delivery/billing address.

•    Account credentials, where you register on the Site.

•    Order details — items purchased, order value, delivery instructions.

•    Payment-related information necessary to process a transaction (see Section 9 on Payment Security — KIFL does not store full card details).

•    Any information you submit through enquiry forms, customer support, feedback, or promotional sign-ups.

(b) Information collected automatically

•    Device and browser information, IP address, and approximate location.

•    Log data — pages visited, time and duration of visit, referring website.

•    Cookies and similar tracking technologies (see Section 6).

Notice and Basis for Processing

In line with Section 5 of the DPDP Act, 2023, we process your personal data only after providing you notice, in clear and plain language, of the personal data being collected and the specific purpose for which it will be processed. We process your personal data on the basis of:

•    Your free, specific, informed, and unambiguous consent, given at the point of collection (e.g., at checkout, registration, or newsletter sign-up); or

•    “Certain legitimate uses” recognised under the DPDP Act — for example, to fulfil an order you have voluntarily placed, to comply with a legal obligation, or to respond to a medical emergency.

You may withdraw your consent at any time, with effect from the date of withdrawal, by writing to us at the contact details in Section 12. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to fulfil an order already in progress.

How We Use Your Information

We use your personal data only for the purpose(s) for which it was collected and disclosed to you at the time of collection, including to:

•    Process, fulfil, and deliver your orders, including payment processing, invoicing, and order tracking;

•    Communicate with you regarding your orders, account, or enquiries;

•    Verify your identity and screen transactions for fraud or security risk;

•    Improve the Site, our products, and customer experience;

•    Send you promotional communications, offers, or product updates — only where you have separately consented, and with an option to opt out at any time;

•    Comply with applicable law, regulatory requirements, or a valid order of a court, government, or law-enforcement authority.

We do not use your personal data for any purpose beyond what is disclosed to you, and we do not sell your personal data to third parties.

Cookies and Tracking Technologies

The Site uses cookies, log files, and similar technologies to operate the Site, remember your preferences, and understand how visitors use the Site, including for analytics and, where applicable, advertising. You can control or disable cookies through your browser settings; disabling cookies may affect certain features of the Site, including checkout functionality. Where we use third-party analytics or advertising services, those providers act as our processors and are contractually bound to use the data only for the purpose specified by KIFL.

Sharing and Disclosure of Personal Data

We do not rent, sell, or trade your personal data. We may share personal data only with:

•    Payment gateway providers and banks, solely to process your transaction;

•    Logistics and delivery partners, solely to fulfil and deliver your order;

•    Service providers who support our Site operations (e.g., hosting, IT support, SMS/email service providers), under contractual confidentiality obligations;

•    Government authorities, regulators, or law-enforcement agencies, where required by law, in response to a valid legal process, or to protect the rights, property, or safety of KIFL, our customers, or the public;

•    A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to the same protections described in this Policy.

We require every such third party to implement reasonable security safeguards and to process personal data only for the specific purpose for which it was shared.

Data Storage, Retention, and Security

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with applicable statutory, tax, or accounting obligations, whichever is longer. On expiry of the applicable retention period, or on withdrawal of consent (where no other legal ground for retention exists), we will erase or anonymise your personal data.

We implement reasonable security safeguards — including access controls, encryption in transit for sensitive transactions, and restricted internal access on a need-to-know basis — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights as a Data Principal

Subject to the DPDP Act, 2023 and its rules, you have the right to:

•    Obtain a summary of the personal data we hold about you and the processing activities carried out on it;

•    Request correction, completion, or updating of your personal data;

•    Request erasure of your personal data, where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations;

•    Withdraw consent at any time, as described in Section 4;

•    Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity;

•    Register a grievance regarding the processing of your personal data (see Section 12).

We will respond to a verified request within the timelines prescribed under the DPDP Act, 2023 and its rules.

Children's Data

The Site is intended for use by individuals who are 18 years of age or older, or who are otherwise competent to contract under Indian law. We do not knowingly collect personal data from children. Where parental or guardian consent is required by law for any Site feature intended for use by or on behalf of a child, we will obtain verifiable consent before processing such data, and will not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

Cross-Border Transfer of Personal Data

Your personal data is primarily stored and processed within India. Where any personal data is transferred to a service provider located outside India (for example, a cloud hosting or analytics provider), such transfer will only be made to a country not restricted by the Central Government under the DPDP Act, 2023, and subject to appropriate contractual safeguards.

Data Breach Notification

In the event of a personal data breach that is likely to affect you, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act, 2023 and its rules.

Payment Security

All online payments on the Site are processed through RBI-authorised, PCI-DSS compliant payment gateway partners. KIFL does not store your full card number, CVV, or net-banking credentials on its own servers; these are handled directly by our payment gateway partner in accordance with applicable Reserve Bank of India guidelines.

Grievance Redressal

If you have any queries, concerns, or complaints regarding this Policy or the processing of your personal data, you may contact our Grievance Officer by Email: connect@karaikaliyangars.com

Address: Karaikal Iyangars Foods Limited, R.S No. 77/1, PT, T.S No 10/1, Subbaraya Mudaliyar Street, Karaikal – 609602, Puducherry, India

We will acknowledge and address grievances within the timelines prescribed under the DPDP Act, 2023 and applicable rules.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective Date” at the top of this Policy indicates when it was last revised. Material changes will be notified on the Site prior to becoming effective.

Contact Us

For any questions about this Privacy Policy or our data practices, please write to us at:

Karaikal Iyangars Foods Limited

R.S No. 77/1, PT, T.S No 10/1, Subbaraya Mudaliyar Street, Karaikal – 609602, Puducherry, India

Email: connect@karaikaliyangars.com