Privacy Policy
Your trust is our family's greatest asset. Learn how Khush Tea protects your personal information, delivery addresses, and payment data with industry-leading security standards.
Last Updated: October 2026 • DPDP Act & IT Act 2000 Compliant
Our Promise: We Never Sell Your Personal Information
We collect only the minimum information necessary to roast, blend, pack, and courier your authentic tea orders directly to your doorstep. We never sell, rent, or trade your contact details with third-party advertisers.
What Information We Collect
When you purchase tea, create an account, or contact us on our website, we may collect the following information:
Full Name, Title, and Google Profile Information (if you choose to sign in with Google OAuth).
Postal Delivery Address, City, State, Postal Pincode, and Landmark for courier dispatch.
Mobile Number (for delivery OTP & WhatsApp updates) and Email Address (for order receipts).
Tea varieties ordered, pack sizes (250g, 500g, 1 Kg), and transaction invoice records.
We Do Not Store Your Banking or Card Details
When you pay online, your transaction is processed directly through Razorpay Payment Gateway, which is certified under the PCI-DSS (Payment Card Industry Data Security Standard) Level 1, the highest global security benchmark for digital transactions.
Safe Processing Guarantees:
- Khush Tea never receives, views, or stores your credit/debit card numbers, CVV codes, UPI PINs, or NetBanking passwords.
- All sensitive payment requests are encrypted with 256-bit Transport Layer Security (TLS/SSL).
- Razorpay tokenizes payment credentials strictly in compliance with RBI guidelines on device and card tokenization.
How We Use Your Personal Data
Your data is collected strictly for lawful e-commerce purposes, including:
- Order Fulfillment: Blending, weighing, packaging, and printing your official shipping parcel label.
- Courier Coordination: Handing over your address and contact phone number to reputable national courier networks (e.g. Delhivery, India Post, Shiprocket) solely to enable delivery.
- Transactional Updates: Sending order confirmations, AWB tracking numbers, and delivery status notifications via WhatsApp, SMS, or Email.
- Customer Support: Resolving order queries, address corrections, or verified transit damage claims.
How We Protect Your Information
We implement industry-standard technical and operational safeguards:
- Database Protection: User accounts and orders are managed through Supabase with Row Level Security (RLS) policies, ensuring users can only read their own private account information.
- Encryption in Transit: Full site traffic is encrypted over HTTPS using modern cryptographic cipher suites.
- Restricted Staff Access: Only authenticated, designated store administrators have access to customer delivery lists for parcel packing.
Essential Session Storage
Our website uses essential session cookies and local storage solely to keep track of your active shopping cart, remember your delivery address during checkout, and keep you signed in securely. We do not use intrusive cross-site tracking cookies.
Access, Rectification & Data Deletion
Under India's Digital Personal Data Protection Act (DPDPA), you have the right to review your saved delivery addresses, update your account information via your Customer Account Page, or request permanent deletion of your stored customer profile by emailing our Grievance Officer.
Privacy Questions & Data Requests
In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, contact details for our Grievance Officer are:
Khush Vagadia
Khush Tea Flagship Store
S.L. Chamber, Near Bank of India, Surendranagar, Gujarat, India
Email: orders@kushtea.com
Helpline: +91 78599 09850
Store Tel: +91 93282 10196