Privacy Policy
This policy explains what personal information Sri Balaji Oil & Dhall Mills ("we", "us") collects when you buy from us, supply to us, or receive a message from us, why we collect it, who else sees it, and what you can ask us to do with it.
1. Who is responsible for your information
Sri Balaji Oil & Dhall Mills decides how and why your information is used, and is responsible for looking after it. Our contact details are in section 11, and you can use them for any question or complaint about this policy.
2. What we collect
If you are a customer or a supplier
- Your name, and your business name where you trade as one.
- Your mobile number (and a second number, if you give us one).
- Your postal address.
- Your GSTIN, where you are a registered supplier.
- Notes our staff record about your account — delivery preferences, quality grades, and similar.
- Your transaction history with us: invoices, purchases, delivery challans, quantities, prices, payments received, advances held, and amounts outstanding.
- A copy of every WhatsApp message we send you through this system, together with the date, the number it went to, and whether it was accepted for delivery.
If you are a member of our staff with a login
- Your name and email address.
- Your password, stored only as a one-way hash — we cannot read it, and neither can anyone else.
- Which parts of the system you are permitted to use.
- A record of what you create, edit, and delete, with your name against it.
Technical information, for security
- The IP address a change or a login attempt came from, and when it happened.
- Failed login attempts, so that repeated guessing can be slowed down.
- A session cookie, which keeps you logged in and does nothing else. We do not use advertising or tracking cookies.
We collect this information directly from you, or from the person at your business who places orders with us. We do not buy contact lists and we do not obtain your details from data brokers.
3. Why we use it
- To carry out our trade with you — preparing invoices, delivery challans and purchase records, tracking stock, and recording payments.
- To keep you informed — sending you your own invoice, purchase and delivery details, and reminding you about payments or deliveries that are due.
- To meet our legal obligations — tax, GST and accounting records we are required to keep.
- To keep the system secure — detecting misuse and being able to trace who changed what.
We do not sell your personal information, we do not rent it, and we do not use it to advertise anything to you on behalf of anyone else.
4. WhatsApp messages
We send business messages — your invoice and purchase details, and payment or delivery reminders — over WhatsApp. We only message a number that you gave us in the course of doing business with us.
These messages travel through the WhatsApp Business Platform operated by Meta. To deliver a message, we pass Meta your mobile number and the contents of that message. Meta handles that information under its own terms — see the WhatsApp Privacy Policy. We do not read your other WhatsApp conversations, and we have no access to them.
5. Who else sees your information
We share it only where we have to, and only as much as is needed:
- Meta Platforms — your mobile number and the message text, solely to deliver the WhatsApp messages described above.
- Our hosting provider — which stores the database this system runs on, on our behalf and under contract.
- Our accountants and tax authorities — where the law requires us to produce records.
- Anyone we are legally obliged to disclose to — under a valid court order or a lawful request from an authority.
If we operate more than one business on this system, each business's records are kept in its own separate database. Records are shared between them only where the businesses have an existing trading relationship and an administrator has deliberately enabled it.
6. Where your information is kept
Our records are held on servers operated by our hosting provider. Messages sent over WhatsApp are processed by Meta on its own infrastructure, which is located outside India. By asking us to send you information over WhatsApp, you accept that it is transferred in this way. If you would rather not have your details leave our own systems, tell us and we will contact you by phone or in person instead.
7. How long we keep it
- Invoices, purchases, challans and payment records — for at least eight years, as required for tax and GST purposes.
- Your contact details — for as long as you are an active customer or supplier, and afterwards only as part of the transaction records above.
- Message and activity logs — for as long as they remain useful for resolving a dispute about what was sent or changed.
- Failed login records — for a short period only, to slow down repeated guessing.
8. How we protect it
- The system is reachable only over an encrypted connection, and only after logging in.
- Passwords are stored as one-way hashes, never in a form anyone can read.
- Each member of staff sees only the parts of the system they have been given access to.
- Changes are recorded against the person who made them.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will tell you and the relevant authority as required by law.
9. Your rights
Under India's Digital Personal Data Protection Act, 2023, you may ask us to:
- tell you what information we hold about you, and who we have shared it with;
- correct anything that is wrong, incomplete or out of date;
- erase information we no longer need for a legal or business purpose;
- stop sending you messages; and
- nominate someone to exercise these rights on your behalf if you are unable to.
Write to us using the details in section 11 and we will respond. There is no charge. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
10. Children
This system is for business use between traders. We do not knowingly collect information about anyone under 18. If you believe we hold a child's information, tell us and we will delete it.
11. Contact us
For any question about this policy, to exercise any of the rights above, or to raise a grievance:
- Business
- Sri Balaji Oil & Dhall Mills
- TODO@example.com
- Phone
- +91 TODO
- Address
- TODO — full postal address, city, state, PIN
12. Changes to this policy
If we change how we handle your information, we will update this page and change the effective date at the top. Material changes will be brought to your attention directly.