Draft — under review. This policy is being finalised. Details shown in [brackets] are placeholders pending the business registration, FSSAI licence and a legal review.
Legal

Privacy Policy

Last updated 12 June 2026

This Privacy Policy explains how [Registered business / proprietor name] (“Udaya”, “we”, “us”) collects, uses, shares, and protects your personal data when you use udaya.earth and register your interest in Udaya Ambali. We follow India’s Digital Personal Data Protection (DPDP) Act, 2023 and the rules made under it. For the purposes of that Act, we are the Data Fiduciary and you are the Data Principal.

1. What we collect

When you register, you choose to give us:

  • Your name
  • WhatsApp number (our main way of reaching you)
  • Email address
  • Delivery address, and an optional apartment/landmark and a separate delivery phone number
  • Approximate location (latitude/longitude), either from the address you pick or — only if you tap “use current location” and your browser asks your permission — from your device
  • Why you’re interested and how you heard about us (the options you select)

Automatically, when you visit the site, we collect limited, non-identifying analytics: a first-party visitor and session identifier (stored in a cookie), pages and sections viewed, scroll depth, clicks, device type, and approximate country. We do not collect payment card details on this site.

2. Why we use it, and our legal basis

We process your data on the basis of your consent, which you give by ticking the consent box and submitting the registration form. We use it to:

  • add you to our WhatsApp group and contact you about onboarding and delivery;
  • check whether your address falls within our current delivery area;
  • send you a confirmation email and, later, delivery and subscription updates;
  • understand demand and improve the website (in aggregate).

We practise data minimisation — your location is used solely to determine delivery eligibility, nothing more.

3. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the service, under their own privacy terms:

  • Supabase — secure database hosting for your registration;
  • Resend — to send you transactional email;
  • Google Maps Platform — to turn your address into coordinates;
  • WhatsApp / Meta — when you choose to join our group and chat with us;
  • Vercel — website hosting and basic traffic analytics.

We may also disclose data if required by law.

4. How long we keep it

We keep your registration data for as long as you’re a customer or on our waitlist, and for a reasonable period afterwards to meet legal and accounting obligations. When the purpose is served, we delete or anonymise it. You can ask us to erase it sooner (see your rights below).

5. Your rights

Under the DPDP Act you have the right to:

  • access a summary of the personal data we hold about you;
  • correct or update inaccurate or incomplete data;
  • erase your data when it’s no longer needed;
  • withdraw your consent at any time — it’s as easy as giving it; withdrawing won’t affect processing already done;
  • nominate another person to exercise your rights in case of death or incapacity;
  • grievance redressal — raise a complaint with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these, email hello@udaya.earth. We’ll respond within a reasonable time.

6. Cookies

We set one first-party analytics cookie to recognise repeat visits and measure how the site is used. We show a cookie notice on your first visit. You can clear cookies in your browser at any time; the site will still work.

7. Children

Our service is intended for adults. You must be 18 or older to register. We do not knowingly collect data from children. If a child’s data is involved, we require verifiable consent from a parent or guardian as the law requires.

8. Security & breach

We use reasonable technical and organisational safeguards to protect your data. No system is perfectly secure, but in the event of a personal data breach we will notify the affected individuals and the Data Protection Board of India as required.

9. Changes

We may update this policy as the business and the law evolve. The “last updated” date above reflects the current version. Material changes will be highlighted on the site.


Contact & grievances

Questions or requests about your data go to our Grievance Officer, [Name of grievance / data protection contact], at hello@udaya.earth or [+91 XXXXX XXXXX]. Postal address: [Street, Indiranagar, Bengaluru, Karnataka 5600XX, India].