Introduction

DS Retail India Limited (together with its subsidiaries, controlled entities, and affiliates, hereinafter referred to as “we,” “our,” “us,” or “the Company”) is engaged in the business of selling freshly baked cookies.

In its capacity as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“the Act”), the Company processes personal data in a lawful, fair, and transparent manner. We collect and use personal data of customers, vendors, and other stakeholders strictly for legitimate purposes such as order fulfilment, customer service, communication, marketing, regulatory compliance, and operational improvement.

All personal data is processed in line with the principles of purpose limitation, data minimisation, storage limitation, and security safeguards under the Act.

Scope

This Policy applies to all individuals whose personal data is collected via the Website, including customers, prospective buyers, service providers, and business partners who interact with www.benscookies.in (the “Website” or “Platform”).

By visiting and/or using our Website/Platform, and/or by signing up, you agree to the terms of this Privacy Policy and provide consent to collect, store, handle, and process such personal information.

Information We Collect

As per Section 2(t) of the Act, “Personal Data” means any data about an individual who is identifiable by or in relation to such data. We collect and process personal data only when voluntarily submitted and necessary for the performance of specific, lawful purposes.

Account registration or order placement

All payment data is handled via encrypted, SSL-secured channels and processed by authorised payment providers. We do not store or access sensitive card information directly. All transactions comply with RBI directions.

Communication records

When you voluntarily contact us via email, customer service, or phone, we may retain the communication and your contact details solely for resolving your query or future reference, as permitted under the Act.

Device and log information

When you access our Platform, we collect information web browsers, mobile devices, and servers typically make available — including browser type, IP address, unique device identifiers, language preference, referring site, date and time of access, operating system, and mobile network information.

Usage and cookies

We collect information about your usage of our Platform (page views, interactions) to improve the Platform and better understand user behaviour. Cookies help us serve content based on preferences. You may set your browser to refuse cookies, though some site features may not function properly. Please see our Cookies Policy for details.

How We Use Your Data

• Provide core features and services; contact you for administrative or operational reasons
• Enable personalisation and customisation of your experience
• Contact and communicate with you regarding orders and queries
• Improve products and services; develop new ways to meet customer needs
• Manage operations with third-party service providers
• Marketing and event communications (where you have consented)
• Detect and prevent fraud, money laundering, and criminal activity
• Comply with legal, regulatory, and statutory obligations
• Investigate and respond to complaints, feedback, and suggestions
• Process PAN details for regulatory and high-value transaction purposes
• Share data with government authorities, legal successors, vendors, and partners as permitted by law

Communications from the Website

We may use your email address to send newsletters and/or marketing communications. If you no longer wish to receive these, you can opt out by following the unsubscribe instructions in any email, or by contacting us at hello@benscookies.in.

We may also send important service-related announcements (maintenance, outages, policy updates) which are necessary for service delivery and cannot be unsubscribed from when essential.

Minors & Disabled Persons

We do not knowingly collect personal information from individuals under the age of 18 without the consent of a parent or guardian. We similarly do not knowingly collect personal information from disabled persons without appropriate consent.

If you believe we have collected such information, please contact us at hello@benscookies.in and we will promptly delete it.

How Long We Keep Your Data

We retain Personal Data only as long as necessary to fulfil the purposes described in this Policy. For example, data from queries may be retained while your account remains active.

Certain data may be retained longer for legal, accounting, or security reasons — for example, compliance, fraud prevention, or financial record-keeping.

Consent & Withdrawal

By using our Website and providing information you consent to the collection, handling, and processing of your data in accordance with this Policy. Consent is obtained through a clear affirmative action and is limited to the personal data necessary for the stated purpose.

You may withdraw consent at any time by sending a written request to hello@benscookies.in. Withdrawal will not affect the lawfulness of prior processing. You may also appoint a Consent Manager to review, manage, or withdraw consent on your behalf.

Your Rights Under DPDPA 2023

Your duties as Data Principal

• Do not impersonate another person when providing personal data
• Do not suppress material information when providing identity or address documents
• Do not register false or frivolous grievances with us or the Data Protection Board of India
• Provide verifiably authentic, correct, and up-to-date information when exercising your rights
• Comply with applicable laws while exercising rights under the DPDPA

Security of Your Personal Data

We take extensive measures to safeguard the information you provide, including administrative, technical, and physical controls aligned to data sensitivity. However, no system is completely secure — transmission of data over the Internet carries inherent risks and we cannot guarantee absolute security.

Disclosure to third parties

We may disclose personal data to:

• Parent, subsidiary, or affiliate companies
• Third-party service providers (IT, hosting, analytics, payment operators, debt collectors)
• Employees and senior management of the Company
• Agents, business partners, and contractors who assist in providing products or services
• Regulatory authorities, courts, and law enforcement as required by law
• Third parties involved in collection, processing, or in the event of a business transfer

Privacy Grievances

If you have questions, wish to exercise your rights, or have privacy-related grievances, contact our Data Protection Officer:

If you are an Indian resident with a complaint, you may refer it to the Data Protection Board (DPB) of India under the relevant provisions of the Digital Personal Data Protection Act, 2023.