What we collect
- Your mobile number, when you sign in. We send a one-time code to it by SMS; there are no passwords.
- Order details: your name, delivery address, phone number, email (if you give one), the items you bought, the amount and any coupon used.
- Payment status: whether and how an order was paid, and the payment reference. Card, UPI and bank details are entered on Razorpay's secure checkout and are never seen or stored by us.
- Technical information: your IP address and browser details, kept briefly to protect the site from abuse (for example, limiting repeated sign-in attempts).
How we use it
- To take, deliver and support your orders.
- To show your past orders when you sign in.
- To apply coupons fairly (for example, once per customer or first order only).
- To answer your questions and handle refunds and replacements.
- To keep the site secure and prevent fraud.
- To meet legal, tax and accounting requirements.
We don't sell your personal information, and we don't send marketing messages without your consent.
Who we share it with
Only the companies we need to run the shop, and only what each one needs:
- Razorpay, to process payments and run checkout (address, contact and payment details).
- Shiprocket and its courier partners, to deliver courier orders (name, address, phone and parcel details).
- Our SMS provider, to send sign-in codes (your mobile number).
- Hosting and storage providers (Vercel, Supabase and Cloudflare), which host the website, its database and product photos on our behalf.
- Government authorities, when the law requires it.
Cookies and browser storage
- A sign-in cookie keeps you signed in. It is removed when you sign out.
- A checkout cookie lets this browser see the confirmation of an order it placed. It expires after a day.
- Your basket is saved in your browser so it's still there when you come back.
We don't use advertising or tracking cookies.
How long we keep it
We keep order records for as long as needed for deliveries, refunds and our legal and tax obligations. Sign-in codes expire within minutes, and abuse-protection records are deleted after a few days.
Your choices and rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it (we may need to keep order records the law requires). You can also withdraw any consent you've given. Contact us using the details below and we'll respond within 30 days.
Security
The site uses HTTPS throughout. Our database is only reachable by our own servers, admin access needs a one-time code sent to an authorised phone, and payments are handled by Razorpay, a PCI-DSS compliant payment gateway.
Questions and grievances
For privacy questions, requests or complaints, contact our grievance officer at Kottha's Foods:
- Email: info@kotthasfoods.com
- Phone: +91 96763 92000 (Mon – Sat, 11:00 am – 8:00 pm)
- Post: 15 Kadapa Tirupati Rd, Vinayak Nagar, Kadapa, Andhra Pradesh 516003
We may update this policy from time to time; the date at the top shows the latest version.
