This Privacy Policy explains how Joy World of Rice Pvt. Ltd. (“Company”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you use our website www.worldofrice.in and any mobile application we operate (together, the “Platform”). It should be read together with our Terms & Conditions, of which it forms part. Capitalised terms not defined here have the meaning given in the Terms & Conditions.
1.1 This Policy applies to all visitors and users of the Platform, whether you buy as a consumer (B2C) or as a business buyer (B2B). By using the Platform and giving consent where we ask for it, you agree to the practices described here.
1.2 In this Policy:
2.1 The Company is the Data Fiduciary responsible for your personal data: Joy World of Rice Pvt. Ltd., CIN U98200HR2023PTC114385, registered office at 603/13, Old Railway Road, Kabir Bhawan Chowk, Gurgaon, Haryana; e-mail info@worldofrice.in.
2.2 Our website technical operator, Solution Bowl India Pvt. Ltd., runs the Platform on our behalf and acts as our Data Processor. Our Grievance Officer’s details are in Section 13.
3.1 We collect the following categories of personal data:
3.2 Sources. We collect data directly from you when you register, place an Order or contact us; automatically through cookies and analytics when you use the Platform; and from our service providers, such as the payment gateway, logistics partners and OTP provider.
4.1 We process your personal data on the basis of your consent and, where the DPDP Act permits, for “certain legitimate uses”, such as processing data you have voluntarily provided for a specified purpose, and meeting our legal obligations. We process data only for the purposes set out below.
4.2 The table below maps each category of data to its purpose, legal basis and retention period.
| Data category | Purpose | Legal basis (DPDP Act) | Retention |
|---|---|---|---|
| Identity & contact (name, mobile, e-mail) | Create and manage your Account, process Orders, OTP verification, service communications | Consent; legitimate use (providing the service you request) | While the Account is active; after deactivation, deleted or anonymised, except records needed for legal compliance |
| Delivery & billing address, order history | Deliver Orders, issue invoices, handle returns and support | Consent; legitimate use | Kept with transaction records for the statutory tax/accounting period (up to 8 years), otherwise until deactivation |
| Business data / GSTIN (B2B) | Tax invoicing and B2B compliance | Legal obligation; consent | Statutory tax-record period (approx. 6–8 years) |
| Payment & transaction data | Take payment, process refunds, prevent fraud | Consent; legal obligation | Transaction records for the statutory period; card/bank data not stored by us |
| Technical & usage data (device, IP, approx. location) | Serviceability, distance-based delivery charge, security, analytics | Consent; legitimate use (security) | Up to 24 months, then aggregated or anonymised |
| Marketing preferences & communications | Send marketing by WhatsApp, SMS, e-mail, push (with separate consent) | Consent (separate opt-in) | Until you opt out or withdraw consent |
| User content / reviews (if enabled) | Display reviews and improve the Platform | Consent | Until removed by you or us, subject to law |
5.1 Before or at the time we collect your personal data, we give you a clear notice describing the data we seek, the purpose, and how you can exercise your rights and complain, as required by the DPDP Act.
5.2 We obtain consent through your clear affirmative action, such as ticking a consent box, placing an Order, or opting in to marketing. Consent is specific, informed and limited to the stated purpose, and we keep a record of it.
5.3 You may withdraw consent at any time, as easily as you gave it, by contacting our Grievance Officer or using the controls on the Platform. Withdrawal does not affect processing carried out before withdrawal. If you withdraw consent needed to provide the service, we may be unable to continue providing it.
5.4 Consent Manager. The DPDP Act allows you to give, manage and withdraw consent through a registered Consent Manager. We do not currently use a Consent Manager; if we adopt one, we will update this Policy.
6.1 We use cookies and similar technologies, including Google Analytics, a marketing pixel, and the Google Maps interface for address and distance functions. Details are in our Cookie Policy, which forms part of this Privacy Policy.
6.2 When you first visit the Platform, we ask for your consent to non-essential cookies. You can change your choice through the cookie settings or your browser at any time.
7.1 We share personal data only as needed to run the Platform and fulfil your Orders, with these categories of recipients acting as our processors or service providers:
7.2 We do not sell your personal data. We require our processors to protect it and to use it only for the purposes we specify.
8.1 Your personal data is stored on servers located in India (Bangalore). Some of our service providers, such as analytics and advertising tools, may process limited data on servers outside India.
8.2 The DPDP Act permits transfer of personal data outside India except to countries that the Central Government may restrict by notification. Where data is processed abroad, we use contractual and technical safeguards to protect it.
9.1 We keep personal data only for as long as needed for the purposes in Section 4, or as required by law. Retention periods by category are set out in the table in Section 4.
9.2 We retain invoices and transaction records for the periods required under tax, GST and company law even after your Account is closed. When data is no longer needed, we delete or anonymise it.
9.3 You may request withdrawal of consent and deactivation of your Account at any time (Section 11). We will then erase or anonymise your data, except where we must retain it under applicable law.
10.1 We use reasonable technical and organisational security measures to protect personal data against unauthorised access, loss, misuse or alteration, consistent with the reasonable security practices expected under the SPDI Rules and the DPDP Act. No system is completely secure, and we cannot guarantee absolute security.
10.2 In the event of a personal data breach, we will take steps to contain and assess it and will notify the Data Protection Board of India and affected Data Principals where and as required under the DPDP Act.
11.1 Subject to the DPDP Act, you have the right to:
11.2 To exercise any of these rights, contact our Grievance Officer using the details in Section 13. We may need to verify your identity before acting on a request, and we will respond within the timelines required by law.
12.1 The Platform is intended for users aged 18 and above. We do not knowingly collect children’s personal data. Where processing a child’s data is necessary, we will obtain verifiable consent from a parent or lawful guardian as required by the DPDP Act, and we will not undertake tracking, behavioural monitoring or targeted advertising directed at children.
13.1 If you have any concern or complaint about how we handle your personal data, contact our Grievance Officer:
Grievance Officer: Vishal Narang, Director
E-mail: vishalnarang3010@gmail.com
Address: 603/13, Old Railway Road, Kabir Bhawan Chowk, Gurgaon, Haryana
Customer care: info@worldofrice.in; phone +91 7838106768
13.2 We will acknowledge your complaint within 48 hours and aim to resolve it within one month, and in any event within the timelines required by law.
13.3 If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India once it is operational, in the manner provided under the DPDP Act.
14.1 The Platform may link to or rely on third-party websites and services. We are not responsible for their privacy practices. Their use of your data is governed by their own policies, and we encourage you to read them.
15.1 We may update this Privacy Policy from time to time. The revised version takes effect when posted on the Platform, with the effective date updated. Where changes are material, we will take reasonable steps to bring them to your attention.
16.1 Joy World of Rice Pvt. Ltd., 603/13, Old Railway Road, Kabir Bhawan Chowk, Gurgaon, Haryana. E-mail: info@worldofrice.in. Grievance Officer: Vishal Narang (details in Section 13).