Privacy policy

Privacy Policy

Balaram Saha Private Limited
14/6 Gariahat Road, Falguni Sangha, Ekdalia, Ballygunge, Kolkata, West Bengal 700019, India
Email: info@balaramsaha.com

Last updated: 13 September 2026. This policy replaces our previous privacy policy dated 12 April 2016.

This policy explains what personal data Balaram Saha Private Limited collects when you shop with us at balaramsaha.com, message us on WhatsApp, or interact with us on Instagram and Facebook, why we collect it, who we share it with, and the rights you have over it.

We handle your data in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. In the language of that Act, you are the Data Principal and we are the Data Fiduciary.

1. What we collect and why

What Examples Why we need it
Contact details Name, mobile number, email address, delivery and billing address To take, pack, deliver and support your order, and to reach you if there is a problem with it
Order details Items ordered, order value, payment method, order and delivery status To fulfil the order, process returns and refunds, and keep the accounting and tax records the law requires of us
Payment information Payment confirmation and the last four digits of a card To confirm payment. We never see or store your full card number, UPI PIN, CVV or net banking credentials. Those go directly to our payment gateway
Messages you send us WhatsApp messages, Instagram comments and direct messages, emails, and anything you attach to them To answer your question, take your order, and keep a record of what was agreed
Website usage Pages viewed, items added to cart, device and browser type, approximate location from your IP address To keep the site working, understand which products people are looking for, and measure whether our advertising is worth the money

We do not ask for and do not want your Aadhaar number, PAN, bank account number, caste, religion, health information, or any other sensitive information. Please do not send these to us. If you send them anyway, we will delete them.

2. WhatsApp messages

We use the official WhatsApp Business Platform, operated by Meta, to send order updates and to answer your questions.

What we send. When you place an order we send a confirmation to the mobile number on that order. For Cash on Delivery orders we send a message asking you to confirm the order before we pack it, and if we do not hear back within 48 hours we cancel the order and tell you. We also message you if an order is cancelled for any other reason.

Why we may message you. These are service messages about an order you placed. We do not send marketing or promotional messages on WhatsApp unless you have separately asked us to.

How to stop them. Reply STOP on WhatsApp, or email info@balaramsaha.com. We will stop messaging that number within 7 working days. Stopping WhatsApp messages does not cancel your order, and we will contact you by phone or email instead where we need to.

Automation. Some replies are sent automatically by our own systems rather than typed by a person. A member of our staff can see the conversation and will take over whenever your question needs a human. WhatsApp messages are carried by Meta under their own terms, which you can read at whatsapp.com/legal.

3. Instagram and Facebook

When you comment on one of our Instagram posts or send us a direct message, we receive your Instagram username, the text of your comment or message, and the post it relates to.

We use this to answer you. If you ask about the price or availability of a saree, our system may reply to your comment publicly and send you the price and a link in a direct message. That reply may be generated automatically. We do not use your Instagram profile for advertising, we do not add you to any mailing list from a comment, and we do not sell or share this information.

We also advertise on Meta and Google platforms. Those platforms may show you our ads based on your activity on their services and on our website. Their use of your data is governed by their own privacy policies, not ours.

4. Cookies and tracking

Our website runs on Shopify and uses cookies to keep your cart working, remember you between visits, and measure traffic. We also use Meta Pixel and Google Analytics to understand how people find and use the site and whether our advertising is working.

You can block or delete cookies in your browser settings. The site will still work, but your cart may not be remembered between visits.

5. Who we share your data with

We do not sell your personal data to anyone, ever. We share it only with the businesses that help us run ours, and only as much as they need:

  • Shopify, which hosts our online store and holds order records
  • Payment gateways, which process your payment. They hold the card and banking details, we do not
  • Courier and logistics partners, who receive your name, address and phone number in order to deliver your parcel
  • Meta Platforms, for WhatsApp messaging, Instagram and Facebook messaging, and advertising
  • Google, for analytics and advertising
  • Our accountants and auditors, and government authorities where the law requires us to disclose something

6. How long we keep it

  • Order and invoice records: 8 years from the end of the financial year, as required under Indian tax and companies law
  • WhatsApp and Instagram conversations: 24 months from the last message, so we can handle returns, disputes and repeat orders
  • Marketing contact details: until you unsubscribe, then deleted within 30 days
  • Website analytics: 26 months

When a retention period ends, we delete the data or remove everything that identifies you.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Know what personal data we hold about you and what we have done with it
  • Correct anything inaccurate, and complete anything missing
  • Erase your personal data, except where we are legally required to keep it, such as invoice records
  • Withdraw consent at any time, as easily as you gave it
  • Nominate another person to exercise these rights on your behalf if you die or become incapacitated
  • Complain to us, and to the Data Protection Board of India if we do not resolve it

Exercising these rights is free and we will not treat you differently for it.

8. How to exercise your rights, and our Grievance Officer

Email info@balaramsaha.com with the subject line Data request, or write to us at the Gariahat Road address above. Tell us what you want us to do and give us the mobile number or email address you used when ordering, so we can find your records.

We respond to every request within 30 days, and we resolve every grievance within 90 days as the DPDP Rules require.

Grievance Officer
Balaram Saha Private Limited
14/6 Gariahat Road, Falguni Sangha, Ekdalia, Ballygunge, Kolkata, West Bengal 700019
Email: info@balaramsaha.com

If you are not satisfied with how we handle your complaint, you may raise it with the Data Protection Board of India.

9. How to delete your data

To have your personal data deleted, email info@balaramsaha.com with the subject line Delete my data, from the email address you used with us, or including the mobile number you used.

Tell us whether you want everything deleted, or only a specific part, for example your WhatsApp conversation history or your Instagram messages.

What happens next:

  • We confirm receipt within 3 working days
  • We delete the data within 30 days and confirm when it is done
  • Data connected to Meta platforms, meaning your WhatsApp conversations and Instagram comments and messages held by us, is deleted in the same window
  • We must keep invoice and tax records for 8 years under Indian law. Those stay, and nothing else does. We will tell you exactly what was kept and why

10. Security

We protect your data with access controls, encrypted connections, and by limiting who on our team can see what. Our store, payments and messaging all run on established platforms with their own security programmes.

If a data breach affects you, we will tell you and report it to the Data Protection Board of India within 72 hours, as the DPDP Rules require.

No system is perfectly secure. We will never ask you for your password, card PIN, CVV, UPI PIN or an OTP. Anyone who does is not us.

11. Children

Our store is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we hold a child's data, email us and we will delete it.

12. Changes to this policy

We will post any changes on this page and update the date at the top. If a change materially affects how we use your data, we will tell you directly.

13. Contact

Balaram Saha Private Limited
14/6 Gariahat Road, Falguni Sangha, Ekdalia, Ballygunge, Kolkata, West Bengal 700019, India
Email: info@balaramsaha.com
Website: balaramsaha.com