Privacy policy

This policy covers https://bidhan.in and is written under the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices) Rules.

We do not sell anything on this website, take payments, or hold accounts. There is no checkout, no login and no stored payment instrument anywhere on this site.

Analytics. Every page loads Google Analytics 4 (measurement ID G-9JMRYCQG8Q). It records the page you viewed, roughly where in the world you are, the type of device and browser, and how you arrived. It sets cookies beginning with _ga. The cookie policy sets this out in detail.

Enquiries. If you build an order slip and send it, the message goes to us through WhatsApp and contains whatever you put in it — typically your name, phone number and the items you want. It reaches a phone in the shop.

Forms. If you fill in a bulk gifting, catering or memory-sharing form, that form is prepared as a message and handed to WhatsApp or your email client. This website has no server that stores it.

Local storage. Your order slip and your dismissal of the analytics notice are stored in your own browser. They never leave your device unless you send the slip yourself.

Enquiry information is used to answer the enquiry — to price it, to check availability, and to call you back. It is not used for marketing and it is not sold or shared with anyone.

Analytics is used in aggregate to see which pages people read and where the site is failing them. We do not attempt to identify individual visitors.

Google LLC processes analytics data as our processor. Data is retained for about 14 months in Google Analytics before being deleted automatically.

WhatsApp (Meta) carries the enquiry messages. Zomato operates the delivery listing for the Semiliguda outlet and handles its own orders, payments and data under its own policy. Neither is under our control.

Enquiry messages stay in the shop phone for as long as they are useful — typically through the order and a short period after it, in case you call back about the same order.

Analytics data is deleted by Google after 14 months. Nothing is archived by us beyond that.

Under the DPDPA you may ask what personal data we hold about you, ask for it to be corrected, ask for it to be erased, and nominate someone to exercise these rights on your behalf.

Write to the grievance officer below. We will acknowledge within 24 hours and respond within 15 days.

You can stop analytics entirely at any time using the Google Analytics opt-out add-on or your browser settings — see the cookie policy.

We do not knowingly collect personal data from children. There is no account creation, no profile and no targeted advertising on this website.

This website is prerendered static HTML served over HTTPS. It has no database, no user accounts and no server-side storage of personal data. The largest realistic risk is a message sitting in a phone, which is why enquiry messages are kept only as long as they are needed.

When this policy changes, the last-updated date and version at the top of the page change with it. A policy that no longer matches what the website does is a fault, and we would rather you told us than assumed.