Privacy Policy

Effective date: 6 August 2026. This policy explains what information Tirth Enterprise (“we”, “us”, “our”) collects when you use our website and, when launched, our mobile app (together, the “Platform”), how we use and protect it, and the choices and rights you have. We are the data fiduciary responsible for your personal data under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Who we are

Tirth Enterprise — importer & wholesaler of stationery.
Address: Amin Marg, Rajkot – 360001, Gujarat, India
Email: thetirthenterprise@gmail.com · Phone/WhatsApp: +91 63531 35986
GSTIN: 24BILPM3469B1ZB · IEC: BILPM3469B

2. Who this is for

Our Platform is a business-to-business (B2B) wholesale service intended for retailers, shops and businesses. It is not directed at, and not intended for use by, individuals under 18. We do not knowingly collect data from minors; if you believe a minor has provided us data, contact us and we will delete it.

3. Information we collect

a. Information you give us — account & registration: business (shop) name, contact person’s name, mobile number, email (optional), GSTIN and PAN (if provided), business type, city/state, a photo of your visiting card (for verification), and a password (which we store only as a secure one-way hash — never in plain text).

b. Orders & transactions: the products and quantities you order, delivery city, order notes, and the invoices generated for your purchases.

c. Information collected automatically: your IP address, browser/device type, the pages you view and actions you take, and a first-party session cookie needed to keep you logged in. We use only our own, in-house analytics — we do not use Google Analytics or third-party advertising trackers.

d. Mobile app (when launched): device model and OS version, app version, a push-notification token (to send order and back-in-stock alerts), and — only with your explicit permission — camera access, used solely to capture your visiting card during registration. The app does not track your precise location.

e. Payments (if/when online payment is enabled): payments are processed by a third-party payment provider (e.g. Razorpay). We do not collect or store your card, UPI or bank credentials; the provider handles them under its own policy.

4. How we use your information

We use your data to: review and approve your buyer account; show you wholesale prices once approved; process and fulfil your order requests; raise GST/other invoices through our billing system; coordinate dispatch and delivery (including sharing minimal details with transporters); send you service messages and, with your consent, back-in-stock and promotional notifications; prevent fraud and misuse; operate, secure and improve the Platform; and comply with our legal, tax and accounting obligations.

5. Legal basis

We process your data on the basis of your consent (which you may withdraw), the necessity of performing our B2B relationship with you (e.g. fulfilling orders), and our compliance with legal obligations (e.g. retaining GST invoice records).

6. Who we share it with

We do not sell your personal data. We share it only with: our own billing/ERP system (internal); logistics partners/transporters, to deliver your order; our hosting provider; a payment provider if you choose to pay online; communication providers such as WhatsApp when you message us or opt in to alerts; and government or legal authorities where required by law. Any partner receives only the minimum data needed for its task.

7. Third-party services

The Platform relies on: our web host (for hosting), Google Fonts (to load fonts), and WhatsApp (for the chat/ordering links you initiate). When the mobile app launches it may also use Firebase Cloud Messaging (for push notifications), a payment gateway (for online payments), and the app store you download it from. Each operates under its own privacy policy.

8. How we protect your data

We use industry-standard safeguards: encrypted connections (HTTPS/TLS) for all data in transit; encryption at rest for sensitive documents — your visiting-card image is stored using AES-256-GCM encryption, outside the public web area, and is viewable only by authorised staff; passwords stored only as bcrypt hashes; CSRF protection, input validation, and access controls throughout. No method of transmission or storage is 100% secure, but we work hard to protect your information and continuously improve our safeguards.

9. How long we keep it

We keep your account data for as long as your account is active. Certain records — notably tax invoices — must be retained for the period required by Indian law (generally up to eight years) even after account closure. When you ask us to delete your data, we delete what we are legally permitted to, and retain only what the law requires (for the minimum period), after which it is removed.

10. Your rights

Under the DPDP Act you have the right to: access a summary of the personal data we hold about you; ask us to correct or update inaccurate data; ask us to erase your data; withdraw a consent you previously gave; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance. To exercise any of these, use our Data & account deletion page, or contact our Grievance Officer below. We may need to verify your identity before acting on a request, to protect your data from misuse.

11. Deleting your data

You can request deletion of your account and personal data at any time via our Data & account deletion page (and, in the mobile app, from Account → Delete account). We acknowledge requests promptly and complete them within 30 days, save for records we must retain by law. See that page for exactly what is deleted and what is retained.

12. Cookies

We use a single first-party session cookie to keep you signed in and to protect forms against cross-site request forgery. We do not use third-party advertising or cross-site-tracking cookies.

13. Changes to this policy

We may update this policy as our services (including the mobile app) evolve. We will post the revised policy here with a new effective date, and for material changes we will take reasonable steps to notify you.

14. Grievance Officer & contact

For any privacy question, request, or complaint, contact our Grievance Officer:
Bhavik Mehta, Tirth Enterprise
thetirthenterprise@gmail.com · +91 63531 35986 · Amin Marg, Rajkot – 360001, Gujarat, India
We aim to acknowledge grievances within 48 hours and resolve them within the timelines required by law.

This policy is governed by the laws of India; disputes are subject to the jurisdiction of the courts at Rajkot, Gujarat.