Privacy Policy

At JHIIVA, we value your trust and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (jhiiva.com), place orders via WhatsApp, or otherwise interact with our services.

This policy applies to all visitors, customers, and users of our services regardless of location. We comply with applicable data protection laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), India's Digital Personal Data Protection Act (DPDPA) 2023, and other applicable privacy regulations worldwide.

1. Information We Collect

1.1 Personal Information You Provide

When you place an order, make an enquiry, or interact with us, you may provide:

• Name, email address, phone number, and shipping address
• Order details and product preferences
• Communication content via WhatsApp, email, or contact forms
• Payment information (processed through third-party payment providers — we do not store payment card details)

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 4)

1.3 Information from Third Parties

We may receive limited data from the following service providers:

• Analytics data from Google Analytics
• Communication data from WhatsApp Business
• Chat interaction data from Tawk.to live chat

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfil your orders
• To communicate with you about orders, enquiries, and customer support
• To send promotional communications (only with your explicit consent)
• To improve our website, products, and services
• To analyse website usage and optimise user experience
• To comply with legal and regulatory obligations
• To detect and prevent fraud or misuse of our services

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the United Kingdom, we process your personal data under the following legal bases:

• Contractual Necessity — Processing required to fulfil your orders and provide our services
• Legitimate Interests — Business operations, analytics, fraud prevention, and service improvement
• Consent — Marketing communications and non-essential cookies
• Legal Obligation — Regulatory compliance, tax records, and lawful data retention

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

• Essential Cookies — Required for core website functionality such as page navigation and session management
• Analytics Cookies — Google Analytics cookies that help us understand how visitors use our site
• Third-Party Cookies — Set by our service partners including Tawk.to (live chat) and performance monitoring tools

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect website functionality and your overall experience.

5. How We Share Your Information

We may share your information in the following limited circumstances:

• Service Providers — Trusted partners who assist our operations, including our hosting provider, Google (analytics), Tawk.to (live chat), and WhatsApp/Meta (messaging)
• Legal Requirements — When required by law, court order, or governmental authority
• Business Transfers — In connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of the transaction

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. International Data Transfers

Your data may be processed in countries outside India, including through our hosting provider and analytics infrastructure (Google). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries recognised as providing adequate data protection
• Compliance with applicable cross-border data transfer frameworks

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Order data — Retained for 7 years for tax, accounting, and legal compliance
• Communication records — Retained for 3 years from last interaction
• Analytics data — Retained per Google Analytics default settings (26 months)

You may request earlier deletion of your data, subject to any legal retention requirements that may apply.

8. Your Rights

8.1 Rights for All Users

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Withdraw consent for processing where consent is the legal basis

8.2 Additional Rights for EU/EEA Residents (GDPR)

• Right to data portability (receive your data in a structured, machine-readable format)
• Right to restrict processing of your personal data
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection supervisory authority

8.3 Additional Rights for California Residents (CCPA/CPRA)

• Right to know what personal information is collected, used, and shared
• Right to delete personal information held by us
• Right to opt out of the sale of personal information (note: we do not sell your data)
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information

8.4 Rights for Indian Residents (DPDPA 2023)

• Right to access information about personal data being processed
• Right to correction and erasure of personal data
• Right to grievance redressal
• Right to nominate another person to exercise rights in case of death or incapacity

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take prompt steps to delete that information.

Parents or guardians who believe their child has provided personal information to us may contact us using the details in Section 13 to request deletion.

10. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Restricted access to personal data on a need-to-know basis
• Regular review of our data collection, storage, and processing practices

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We encourage you to use strong passwords and exercise caution when sharing personal information online.

11. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party website you visit through links on our site.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this page.

For material changes that significantly affect how we handle your personal data, we will provide prominent notice on our website or notify you directly. Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please reach out to us:

• Email: info@jhiiva.gmail.com
• Phone: +91 86901 52995
• WhatsApp: +91 86901 52995
• Address: Jhiiva House / Amrit Villa Shastri Nagar Colony, Jalore, Rajasthan – 343001, India
• FSSAI License: 22225074002796

We aim to respond to all privacy-related enquiries within 30 days.

Please also review our Terms & Conditions for additional information about using our website and services.