1. Introduction & Scope
Last Updated: December 27, 2025
This Cookies Policy explains how Shudh Desi Taste ("Company," "we," "us," and "our") uses cookies and similar tracking technologies when you visit our website at https://shudhdesitaste.com ("Website") or use our mobile application ("App"). This policy applies to all visitors, customers, and users of our services.
Purpose & Legal Compliance
We are committed to protecting your privacy and being transparent about our data practices. This policy is designed to comply with:
India's DPDPA 2023
Digital Personal Data Protection Act of India, providing comprehensive data protection framework
GDPR Principles
General Data Protection Regulation principles for international visitors from EU/EEA
IT Act 2000
India's Information Technology Act with relevant rules and amendments
Definition of Cookies
Cookies are small text files that are placed on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide personalized experiences.
Types of Cookies Based on Origin:
- First-party Cookies: Set by Shudh Desi Taste directly on our domain
- Third-party Cookies: Set by trusted partners and service providers
- Session Cookies: Temporary cookies deleted when you close your browser
- Persistent Cookies: Remain on your device for a set period or until deleted
2. Purpose & Justification
Essential Purposes
We use cookies for legitimate business purposes that enhance your experience while shopping for premium Indian foods. Each cookie category serves specific, justified purposes.
Primary Objectives
| Purpose Category | Specific Objectives | Business Justification | User Benefit |
|---|---|---|---|
| Essential Operations | Website functionality, security, shopping cart, checkout process | Legal requirement for e-commerce operations | Seamless shopping experience, secure transactions |
| User Experience | Remember preferences, language, currency, regional settings | Service improvement and personalization | Personalized shopping, saved preferences |
| Analytics & Improvement | Website performance, user behavior, conversion optimization | Business intelligence and service enhancement | Improved website, better product offerings |
| Marketing & Advertising | Relevant promotions, personalized offers, retargeting | Business growth and customer engagement | Relevant offers, personalized deals |
| Compliance & Security | Fraud prevention, legal compliance, age verification | Legal obligations and security requirements | Secure platform, protected data |
Legal Basis for Processing
Under DPDPA 2023 and other applicable laws, we process cookie data based on:
- Consent: For non-essential cookies (analytics, marketing)
- Legitimate Interest: For essential operations and security
- Contractual Necessity: For order processing and delivery
- Legal Obligation: For tax, compliance, and fraud prevention
3. Detailed Cookie Categories
Essential Cookies (Always Active)
These cookies are strictly necessary for the website to function and cannot be switched off. They are essential for security, shopping cart functionality, and basic operations.
Comprehensive Cookie Classification
| Category | Purpose Description | Examples | Duration | Control Option |
|---|---|---|---|---|
| Strictly Necessary | Essential for website operation, security, and basic functionality | Session ID, authentication, shopping cart, security tokens | Session to 24 hours | Cannot be disabled |
| Functionality | Remember user preferences and settings for enhanced experience | Language, currency, regional settings, layout preferences | Up to 1 year | User controllable |
| Performance/Analytics | Collect information about website usage for improvement | Google Analytics, heatmaps, error tracking, performance metrics | Up to 2 years | User controllable |
| Targeting/Advertising | Build user profile for relevant advertising and marketing | Retargeting pixels, social media tags, advertising networks | Up to 1 year | User controllable |
| Social Media | Enable social sharing and integration with social platforms | Facebook, Instagram, Pinterest, Twitter sharing buttons | Up to 90 days | User controllable |
Specific Cookies Used on Our Website
| Cookie Name | Provider | Purpose | Category | Expiry |
|---|---|---|---|---|
| shudh_session | shudhdesitaste.com | Maintains user session and shopping cart | Essential | Session |
| user_auth | shudhdesitaste.com | User authentication and login status | Essential | 24 hours |
| pref_settings | shudhdesitaste.com | Stores language, currency, and regional preferences | Functionality | 1 year |
| _ga | Google Analytics | Distinguishes users for analytics | Analytics | 2 years |
| _gid | Google Analytics | Distinguishes users for analytics | Analytics | 24 hours |
| _gat | Google Analytics | Throttles request rate | Analytics | 1 minute |
| fbp | Facebook advertising and analytics | Advertising | 3 months | |
| fr | Facebook advertising and retargeting | Advertising | 3 months | |
| wishlist_data | shudhdesitaste.com | Stores wishlist items for registered users | Functionality | 1 year |
| recent_views | shudhdesitaste.com | Recently viewed products for personalization | Functionality | 30 days |
4. Third-Party Services & Integration
Important: Third-Party Cookies
We work with trusted third-party services that may set their own cookies. These services have their own privacy policies and cookie practices. We carefully vet all third-party providers for compliance with data protection laws.
Integrated Services & Their Cookies
| Service Provider | Purpose | Data Collected | Privacy Policy | Opt-out Option |
|---|---|---|---|---|
| Google Analytics | Website analytics and user behavior tracking | Anonymous usage data, demographics, interests | View Policy | Opt-out Tool |
| Facebook Pixel | Advertising, conversion tracking, retargeting | Website interactions, ad performance data | View Policy | Ad Preferences |
| Google Ads | Advertising and remarketing campaigns | Conversion data, ad interactions | View Policy | Ad Settings |
| Payment Processors | Secure payment processing (Razorpay, Stripe) | Transaction data, payment information | Provider-specific policies | Contact provider |
| Shipping Partners | Order tracking and delivery updates | Delivery status, location data | Provider-specific policies | Contact provider |
Social Media Integrations
Our website includes social media features (like "Share" buttons) that may collect your IP address and set cookies. Interactions with these features are governed by the privacy policy of the respective social media company.
- Facebook: Share buttons, Like buttons, Facebook Login
- Instagram: Product sharing, visual content integration
- Pinterest: Product pins, save for later functionality
- WhatsApp: Order sharing, customer support
- Twitter: Tweet sharing, social engagement
5. Control & Management Options
Cookie Consent Preferences Center
You have complete control over which cookies you accept. Use the toggle switches below to customize your cookie preferences.
Browser-Level Cookie Control
You can manage cookies directly through your web browser settings. Here are instructions for popular browsers:
Google Chrome
Path: Settings → Privacy and security → Cookies and other site data
Options: Allow/block cookies, clear browsing data, site-specific settings
Mozilla Firefox
Path: Options → Privacy & Security → Cookies and Site Data
Options: Enhanced tracking protection, custom cookie settings
Safari (Mac/iOS)
Path: Preferences → Privacy → Cookies and website data
Options: Block all cookies, allow from current website only
Microsoft Edge
Path: Settings → Cookies and site permissions → Cookies and site data
Options: Block third-party cookies, clear on exit, exceptions
Industry Opt-out Tools
For advertising cookies, you can use industry-wide opt-out tools:
6. Data Retention & Security Measures
Cookie Duration & Retention Periods
| Cookie Type | Maximum Retention | Automatic Deletion | Manual Deletion Option | Legal Basis |
|---|---|---|---|---|
| Session Cookies | Browser session only | On browser close | Clear browsing data | Contract necessity |
| Preference Cookies | 1 year maximum | Automatic expiry | Browser settings | User consent |
| Analytics Cookies | 26 months maximum | Automatic expiry | Google Analytics opt-out | Legitimate interest |
| Advertising Cookies | 180 days maximum | Automatic expiry | Ad platform opt-outs | User consent |
| Authentication Cookies | 30 days maximum | Automatic expiry | Logout function | Security necessity |
Security Measures for Cookie Data
- Encryption: All sensitive cookie data is encrypted using TLS 1.2+
- Secure Flags: Cookies marked as Secure and HttpOnly where applicable
- SameSite Policy: Strict SameSite policies to prevent CSRF attacks
- Regular Audits: Quarterly security audits of all cookie implementations
- Access Controls: Strict access controls for cookie data processing
- Data Minimization: Only essential data collected in cookies
Data Protection Impact Assessments
We conduct regular Data Protection Impact Assessments (DPIAs) for all cookie implementations to ensure compliance with DPDPA 2023 and international standards.
7. Your Rights & Legal Compliance
DPDPA 2023 Compliance
We fully comply with India's Digital Personal Data Protection Act 2023. You have specific rights regarding your personal data collected through cookies.
Your Data Protection Rights
| Right | Description | How to Exercise | Response Time |
|---|---|---|---|
| Right to Access | Request copies of your personal data collected through cookies | Submit Data Access Request via email | 30 calendar days |
| Right to Correction | Request correction of inaccurate personal data | Contact DPO with correction request | 15 calendar days |
| Right to Deletion | Request erasure of your personal data | Submit Data Erasure Request | 30 calendar days |
| Right to Withdraw Consent | Withdraw cookie consent at any time | Use cookie preference center | Immediate |
| Right to Grievance Redressal | File complaint with Data Protection Board | Contact India's Data Protection Board | As per DPDPA timelines |
| Right to Data Portability | Receive your data in structured, machine-readable format | Submit Portability Request | 30 calendar days |
International Data Transfers
Some third-party services (like Google, Facebook) may transfer data outside India. We ensure all international transfers comply with:
- DPDPA 2023 cross-border data transfer requirements
- Adequacy decisions where applicable
- Standard Contractual Clauses for EU data
- Explicit user consent for specific transfers
Children's Privacy
Our website is not directed at children under 18. We do not knowingly collect personal data from children. If we discover we have collected data from a child, we will delete it immediately.
8. Updates, Contact & Enforcement
Policy Review & Updates
This Cookies Policy is reviewed quarterly and updated as needed to reflect changes in our practices, services, or legal requirements.
Update Notification Process
- Material Changes: 30-day advance notice via email and website banner
- Minor Updates: Posted on website with updated "Last Updated" date
- User Consent: Significant changes may require renewed consent
- Archive: Previous versions available upon request
Contact Information
For questions, concerns, or to exercise your rights regarding this Cookies Policy:
Legal Address
Shudh Desi Taste
38, Block-F, Uttam Nagar
Delhi 110059, India
Regulatory Authorities
If you have concerns about our data practices, you may contact:
- Data Protection Board of India: Once established under DPDPA 2023
- Ministry of Electronics & IT (MeitY): For IT Act 2000 related issues
- Consumer Protection: National Consumer Helpline - 1915
Policy Version & Effective Date
Current Version: 3.0 | Effective Date: December 27, 2025
Previous Update: October 19, 2025 | Next Review: March 27, 2026
