Your data, handled honestly.

1. Who we are

Anna Nursery is a small Indian plant nursery based in Mumbai, Maharashtra, operating an online plant store at annanursery.shop. This Privacy Policy describes how we collect, use, and protect your personal information when you visit the website, place an order, subscribe to our newsletter, or contact us.

This policy is compliant with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act), as applicable.

2. What we collect

Information you give us directly

• Contact details: name, phone number, email, WhatsApp number
• Delivery details: shipping address, pin code, landmark
• Order details: products ordered, size preferences, pot choices, delivery instructions
• Payment info: processed directly by our payment partner (Razorpay / similar). We do not store your card numbers, UPI IDs, or CVV on our servers
• Plant-support chats: photos, voice notes, or messages you send us on WhatsApp about your plants
• Care Club membership: your plant inventory, home's light situation, city — if you join the Club

Information collected automatically

• Basic site analytics: pages visited, approximate location (city-level), browser type, referring site
• Cookies: small files stored in your browser to keep your cart and preferences (see section 5)

3. How we use it

• To fulfil your order: pack, ship, track, and deliver plants to your address
• To give you plant support: reply to your WhatsApp photos of yellowing leaves, drafty windows, and other plant emergencies
• To send order updates: confirmation, dispatch, delivery, and follow-up emails or SMS
• To send the newsletter: only if you opt in. One email a month, maximum. Unsubscribe anytime, easily and at any time
• To improve the site: basic analytics to understand which plants are popular and which pages confuse people
• To comply with law: tax records, GST invoicing, and responding to valid legal requests

We do not use your data for advertising you to third parties, selling to data brokers, or training AI models.

4. Who we share with

We share your data only with service providers who need it to get your order to you:

• Payment gateways (e.g. Razorpay) — to process your payment securely
• Shipping partners (e.g. Delhivery, Blue Dart, India Post) — to deliver your plant
• WhatsApp / Meta — because our support runs on WhatsApp Business, your chats go through Meta's servers under their policy
• Email / SMS providers — to send order confirmations and shipping updates
• Hosting and analytics providers — to keep the website running

Each partner receives only the data they need. We do not sell, rent, or trade your personal information to anyone for advertising or profit.

We may also share data if required by law, court order, or to protect our rights — but we'll tell you if this ever applies to your specific data, unless we're legally prevented from doing so.

5. Cookies & tracking

We use a small number of cookies:

• Essential cookies: remember your shopping bag contents so they don't disappear when you refresh
• Analytics cookies: basic site analytics (aggregated, anonymous — we can't see individual users)

We don't use advertising cookies, tracking pixels, or retargeting tools. You can disable cookies in your browser — the site will still work, but your cart won't persist.

6. How long we keep it

• Order records: 7 years (required for GST and income tax compliance)
• WhatsApp plant-care chats: until you ask us to delete them, or 3 years — whichever is sooner
• Newsletter subscribers: until you unsubscribe (instantly processed)
• Inactive accounts: if you haven't interacted with us for 3 years, we delete non-essential data

7. Your rights

Under Indian data protection law, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Delete your data (with limited exceptions for legally required records like GST invoices)
• Withdraw consent for marketing or non-essential processing
• Object to specific uses of your data
• Portability — request your data in a readable format

To exercise any of these rights, WhatsApp us at +91 96387 95572 or email hello@annanursery.shop. We respond within 7 business days. Simple process.

8. Security

We take reasonable technical and organisational measures to protect your data:

• Site served over HTTPS (encrypted connection)
• Payment data handled entirely by PCI-compliant payment gateways — never stored on our servers
• Access to customer data is limited to team members who need it
• Regular backups of non-sensitive order and inventory data

No online service is 100% secure. If a data breach ever occurs that affects you, we'll notify you within 72 hours and explain what happened, what data was affected, and what we're doing about it.

9. Children

Our site and services are intended for people aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with information, WhatsApp us and we'll delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we'll update the "Last updated" date at the top and — if the changes are material — email registered users and Care Club members. Continued use of the site after changes means you accept the updated policy.

11. Grievance officer

As required under Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020, we have a designated Grievance Officer.

If you're not satisfied with our response, you may escalate to the Data Protection Board of India (once operational under the DPDP Act) or pursue remedies available under applicable Indian law.