01Who we are and what this policy covers
This Privacy Policy explains how SURYA ENTERPRISES (“Surya Enterprises”, “we”, “us”) collects, uses, shares and protects personal data when you visit www.suryaenter.in, browse the marketplace, place an order or contact us. We act as the Data Fiduciary for this personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it.
It applies to farmers, agri-retailers, institutional buyers and any other visitor to the website. It does not cover third-party websites or apps linked from our pages (for example, your UPI app), which have their own privacy policies.
02Personal data we collect
We collect only the personal data needed to run the marketplace and fulfil your orders:
| When | What we collect |
|---|---|
| Placing an order (checkout) | First and last name, delivery address (house/street, apartment, city, state, PIN code), mobile number, email address and any order notes you type in. |
| Paying for an order | A unique order ID, the order amount, your name, email and mobile number are shared with our payment partner PayU to generate a UPI payment request. We receive the payment status (pending, paid, failed) and a transaction reference. We never receive or store your UPI PIN, bank account or card details. |
| Contacting us or requesting a quote | Name, email, mobile number, company name and the message you send (via email or the helpline). |
| Browsing the site | Standard server logs (IP address, browser type, pages requested, time of request) used for security and to keep the site running. Your cart, wishlist, recently viewed products and chosen delivery PIN are kept only in your browser’s local storage and are not sent to us until you place an order. |
We do not collect sensitive personal data such as financial account numbers, biometric data or health information, and we do not knowingly collect personal data from children under 18.
03Why we use your data (purpose and lawful basis)
We process personal data for the following specified purposes, each with your consent or as permitted by the DPDP Act:
- Fulfilling orders — creating the payment request, confirming payment, packing, dispatching and delivering your products, and issuing a GST invoice.
- Customer support — answering queries, handling claims for damaged or wrong items, cancellations and refunds.
- Legal and regulatory compliance — maintaining sale records required under GST law and the Seeds Act, 1966 and rules, and responding to lawful requests from authorities.
- Safety and security — preventing fraud, misuse and unauthorised access to the website.
- Communications — order and payment updates by SMS, email or phone. Marketing messages are sent only if you opt in (our newsletter sign-up is not yet live and collects nothing today).
We do not sell personal data, and we do not use it for automated profiling or targeted advertising.
04Consent and how to withdraw it
By entering your details at checkout or when contacting us, you give free, specific and informed consent to the processing described above. You can withdraw consent at any time by writing to SURYA2026ENT@gmail.com. Withdrawal does not affect processing already carried out, and we may still need to retain certain records to meet legal obligations (see Retention).
If a withdrawal means we can no longer fulfil an order in progress, we will tell you and process any refund in line with our Return & Refund Policy.
06How long we keep data
- Order, invoice and payment records — retained for the period required under GST and other tax laws (currently up to 8 years from the end of the relevant financial year), after which they are deleted or anonymised.
- Support correspondence — retained for up to 3 years after the query is closed, to handle follow-ups and disputes.
- Server logs — retained for up to 180 days, in line with Indian cyber-security directions, unless needed for an investigation.
- Browser storage (cart, wishlist, recently viewed, delivery PIN) — stays on your device until you clear it or remove the items.
When the purpose is served and no legal retention applies, personal data is erased.
07Your rights as a Data Principal
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how it has been processed;
- Correct, complete or update inaccurate or outdated data;
- Erase personal data that is no longer necessary for the purpose it was collected for, subject to legal retention;
- Grievance redressal through the Grievance Officer named below;
- Nominate another person to exercise these rights in the event of your death or incapacity.
To exercise a right, email SURYA2026ENT@gmail.com from the address used for your order, quoting the order ID where relevant. We may ask for information to verify your identity. We respond within the timelines set out in our Grievance Redressal Policy.
08How we protect your data
The website is served over HTTPS. Payments are initiated through PayU’s secure APIs, and no UPI PIN, bank or card information passes through or is stored on our systems. Access to order records is limited to staff who need it to process orders and support customers. In the event of a personal data breach that is likely to affect you, we will notify you and the Data Protection Board of India as required by law.
10Grievance Officer
- Name
- Shubham Kumar
- Designation
- Grievance Officer, SURYA ENTERPRISESRetd. Officer, State Agro Dept.
- ct.ashok@suryaenter.in
- Phone
- +91 9650300157 (Mon–Sat, 9:00 AM – 6:00 PM)
- Address
- Shop No. SS-53, Rajdhani Krishi Mandi, Sikar Road, Kukar Kheda, Jaipur, Rajasthan — 302013
If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act.
11Changes to this policy
We may update this policy when our practices or the law change. The “Last updated” date at the top shows the current version; material changes will be highlighted on the website.