What we collect, why we collect it, and how to make us delete it. Written to be read, not to be skipped.
Last updated 2 September 2026 · Operated by Aaroh Naturals, Pune, Maharashtra, India · FSSAI Lic. No. 11525079000402.
This site is operated by Aaroh Naturals, trading as Desi By Nature, from Pune, Maharashtra, India. We are the data fiduciary for the information described on this page. Reach us at care@desibynature.in or +91-9112345165.
Only what an order actually needs, plus what the site needs to work.
We do not ask for, and have no use for, your date of birth, gender, PAN, Aadhaar or any other government identifier.
We run a first-party visit log so we can see which of our own posts and reels actually lead to orders. It stores a random visitor id in a cookie on this domain — no name, no email, nothing that identifies you personally — alongside the campaign tag on the link you clicked. That cookie lasts up to 180 days.
Alongside it we set a session cookie that keeps your cart and your sign-in alive, and a cookie remembering an applied coupon. These are strictly necessary: without them the cart empties between pages.
We do not sell this data, we do not join it to any third-party profile, and it never leaves our own server. Clearing your cookies clears all of it, and the site keeps working.
If and when we enable Google Analytics or the Meta pixel, that will be stated here before they go live. As of the date above, neither is running on this site.
A short list, and only where the order cannot happen without them.
That is the complete list. We do not share, rent or sell your details to advertisers, data brokers, or any other seller, and we never will. We will disclose data to a public authority only where the law actually requires it.
Order records, invoices and the addresses on them are kept for eight years, because Indian tax law requires books of account to be retained that long. Account details are kept until you ask us to delete the account. The visit log described above rolls off after 180 days. Marketing emails stop the moment you unsubscribe, and the address is removed from the list.
You can ask us at any time to show you what we hold about you, correct anything that is wrong, delete your account, or stop emailing you. Write to care@desibynature.in from the address on the order and we will action it within seven working days, free of charge.
One limit worth stating plainly: we cannot delete an invoice for an order that was actually delivered, because we are required to keep it. We can delete everything else, and we will.
The whole site runs over HTTPS. Passwords are stored as bcrypt hashes and are never recoverable in plain text. Payment details never reach us at all. Admin access is restricted to named accounts with individual logins.
No system is perfect. If we ever discover a breach affecting your data, we will email you directly and tell you what happened and what to do — we will not bury it in a policy update.
When this page changes materially, the "last updated" date above changes with it and, where the change affects how we handle data you have already given us, we email you. Continuing to use the site after a change means you accept the updated policy.