Privacy Policy

Last updated: June 2026

Kalpataru Atta Mill (hereinafter, "Kalpataru Atta Mill", "the Company", "the Platform", "we" or "our") values the privacy of its users and is committed to processing their personal data responsibly, transparently, and in accordance with applicable regulations.

This Privacy Policy describes how Kalpataru Atta Mill collects, uses, stores, shares, and protects the personal data of those who access, browse, interact with, or use the website, platform, services, features, integrations, and tools associated with Kalpataru Atta Mill.

This Policy is drafted independently from the Terms and Conditions, with the purpose of clearly informing what data is processed, for what purpose, who is responsible for such processing, with whom data may be shared, how long it is retained, and how corresponding rights may be exercised.

1. Data Controller

• Name: Kalpataru Atta Mill
• Project / product: Kalpataru Atta Mill Platform
• Address: Preetilata Rd, Siliguri, West Bengal, India
• Contact email: priynshsarkar@gmail.com
• FSSAI License No: 22826084000375

2. Scope

This Policy applies to personal data processed by Kalpataru Atta Mill in relation to:

• The use of Kalpataru Atta Mill's institutional and/or commercial website.
• Access to and use of the Kalpataru Atta Mill Platform.
• Contact forms, onboarding, support, and communications.
• Integrations with third-party services enabled by the user or corporate clients.
• Automation, interaction analysis, and support tools.

3. Data we may collect

Kalpataru Atta Mill may collect, depending on how the user interacts with the Platform, the following categories of data:

• Identifying data, such as name and surname.
• Contact data, such as email address, phone number, or company.
• Account, authentication, or profile data, such as internal identifiers or configuration preferences.
• Commercial and administrative data, such as billing information, order history, or business relationship.
• Technical and usage data, such as IP address, device identifiers, operating system, browser, language, referring URLs, events, logs, metrics, and access dates or times.
• Data contained in forms, tickets, messages, support requests, or any other communication sent to us.
• Cookies and similar technologies, including those used for authentication, security, analytics, personalization, technical diagnostics, or experience improvement.

If a user or client uploads third-party data into Kalpataru Atta Mill Platform, they declare having a valid legal basis and being responsible for adequately informing said data subjects when required.

4. How we obtain data

Kalpataru Atta Mill may obtain personal data through the following means:

• When the user provides it directly by registering, communicating, contracting, requesting support, or using the Platform.
• When data is generated automatically through the use of the site, the Platform, or its integrations.
• When provided by corporate clients, account administrators, or authorized third parties within the framework of the contracted service.
• When derived from the use of forms, APIs, integrations, or operational workflows implemented within our Platform.

5. Purposes of processing

Kalpataru Atta Mill may process personal data for one or more of the following purposes:

• Provide, operate, administer, and maintain the Platform and its associated services.
• Process orders, delivery requests, and manage customer communications.
• Provide technical support, resolve incidents, address inquiries, and improve the user experience.
• Monitor availability, performance, quality, stability, and security of the Platform.
• Detect, prevent, and investigate fraud, abuse, unauthorized access, security incidents, or contractual breaches.
• Comply with legal, regulatory, fiscal, accounting, or authority requirements.
• Send operational, administrative, service, or security communications.
• Send commercial or informational communications, when consent or a sufficient legal basis exists.
• Analyze Platform usage to improve features, performance, reliability, product design, and user experience.

6. Legal basis for processing

When required by applicable regulations, Kalpataru Atta Mill will process personal data based on one or more of the following legal bases:

• The consent of the data subject.
• The necessity to execute a pre-contractual or contractual relationship.
• Compliance with legal obligations.
• Kalpataru Atta Mill's legitimate interest in operating, protecting, and improving its services, provided that the rights and interests of the data subject do not prevail.

7. Cookies and similar technologies

Kalpataru Atta Mill may use cookies, pixels, tags, SDKs, and other similar technologies to recognize sessions, remember preferences, protect access, analyze navigation, understand usage patterns, and improve Platform functionality.

These technologies may include:

• Strictly necessary cookies for site operation or authentication.
• Functional or preference cookies.
• Analytical or measurement cookies.
• Diagnostic, security, or abuse prevention technologies.

The user may configure their browser to reject or delete cookies. However, this may affect the availability or proper functioning of certain features.

Specific technologies we use:

• Google Analytics (G-JQHTZ4NS64): We use Google Analytics to understand how visitors interact with our website. This collects anonymized usage data such as pages viewed, time spent, and device type.
• Browser Local Storage: We use your browser's local storage to save your shopping cart, order history, and preferences. This data remains on your device and is not transmitted to external servers unless you complete an order.
• WhatsApp Business: When you contact us via WhatsApp for orders or support, your phone number and messages are processed through WhatsApp (Meta Platforms). Their privacy policy governs data handling within the WhatsApp platform.
• Vercel Hosting: Our website is hosted on Vercel, which may collect server access logs including IP addresses for security and performance monitoring.

8. Data sharing

Kalpataru Atta Mill may share personal data only to the extent necessary to fulfill the purposes described in this Policy, including with:

• Infrastructure, hosting, cloud, storage, and network providers;
• Delivery and logistics partners to fulfill your orders;
• Authentication, communications, email, support, and monitoring providers;
• Payment processors, administrative services, or professional advisors, when applicable;
• Administrative, judicial, or regulatory authorities, when a legal obligation or valid requirement exists.

Kalpataru Atta Mill does not sell personal data or transfer it for purposes unrelated to the provision of the service, except by legal obligation or valid consent when applicable.

9. Data retention

Kalpataru Atta Mill will retain personal data for as long as necessary to:

• Fulfill the purposes for which they were collected;
• Provide the service and maintain the contractual or commercial relationship;
• Provide support, resolve disputes, or manage claims;
• Comply with legal, regulatory, fiscal, accounting, or auditing obligations;
• Safeguard evidence in case of potential security incidents, fraud, or conflicts.

When data is no longer needed, Kalpataru Atta Mill may delete, anonymize, aggregate, or block it, as technically and legally appropriate.

10. Security

Kalpataru Atta Mill adopts reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, misuse, or destruction. These measures may include access controls, event logging, in-transit encryption when applicable, infrastructure monitoring, and secure development practices. However, no system is completely invulnerable, so we cannot guarantee absolute security.

11. Rights of data subjects

The data subject may exercise their rights in accordance with applicable regulations, including:

• Access to their personal data;
• Rectification of inaccurate, outdated, or incomplete data;
• Updating of information;
• Deletion of data, when legally applicable;
• Revocation of consent, when processing is based on it.

To exercise these rights, the data subject may send a request to: priynshsarkar@gmail.com

12. Children's privacy

Kalpataru Atta Mill Platform is not directed at minors without the intervention or authorization of their parents, guardians, or legal representatives, when required by applicable regulations. If we become aware of improper processing of minors' data, we will adopt reasonable measures to restrict or eliminate it.

13. Third-party sites, services, and integrations

The Platform may contain links to third-party services. The use of those services may be subject to privacy policies, terms, and practices independent of Kalpataru Atta Mill. We do not control third-party practices and recommend reviewing their policies before using such services.

14. Changes to this Policy

Kalpataru Atta Mill may modify this Privacy Policy to reflect legal, regulatory, technical, operational, or functional changes. When this occurs, we will publish the updated version indicating the new last-updated date.

15. Contact

For inquiries about this Privacy Policy or about the processing of personal data, contact:

• Kalpataru Atta Mill
• Preetilata Rd, Siliguri, West Bengal, India
• Email: priynshsarkar@gmail.com
• FSSAI License No: 22826084000375

16. Control authority

In India, data protection is governed by applicable laws such as the Information Technology Act, 2000, and the Digital Personal Data Protection Act. Users have the right to file inquiries and complaints related to non-compliance with applicable privacy regulations to the designated grievance authorities.

Back to Home