Privacy policy

This policy explains what personal data we collect when you use this store, why we collect it, who we share it with, and the rights you have over it. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules made under it.

1. Who we are

This store is run by Bright Blue Trading Corporation ("Bright Blue", "we", "us"), 66/927 Pappurath, Krishnaswamy Road, Pullepady, Kochi, Kerala 682035. GSTIN 32DCVPK7871P1ZI. We decide how your personal data is used, which makes us the data fiduciary for it.

Email: brightbluefmcg@gmail.com Toll free: 1800 123 0621

2. What we collect

When you place an order or contact us we collect your name, phone number, email address, and your delivery and billing addresses. We keep a record of what you ordered, what you paid and how the order was delivered.

When you browse the store we receive basic device and usage data, such as your IP address, browser type and the pages you open. Cookies are described in section 9.

We do not receive or store your card number, UPI PIN, net-banking password or any other payment credential. Payments are processed by Razorpay, and those details go from your device to Razorpay directly.

3. Why we collect it

We use your data to: • take, pack and deliver your order, and tell you how it is progressing • raise a GST tax invoice, which the law requires us to issue and keep • answer your questions and handle returns, refunds and complaints • prevent fraud and misuse of the store • meet our legal, tax and accounting obligations

We send marketing messages only if you have asked for them, and you can stop them at any time.

4. Who we share it with

We share only what each of these needs to do its job: • Razorpay, to take your payment and to send refunds • Shiprocket and the courier it assigns, to deliver your order: your name, phone number and delivery address • the companies that host this website and its database, and that send our order emails and text messages • government and law-enforcement authorities, when the law requires it

We do not sell your personal data, and we do not share it with anyone for their own marketing.

5. How long we keep it

We keep your data for as long as it is needed for the purpose it was collected for. Order and invoice records are kept for as long as tax and accounting law requires, even if you ask us to delete your other data. When data is no longer needed we delete it.

6. Your rights

You have the right to: • ask what personal data we hold about you and how we have used it • have incorrect or incomplete data corrected or updated • have your data erased, where we are not required by law to keep it • withdraw a consent you have given • nominate someone to exercise these rights for you if you die or become unable to • have a complaint dealt with

To use any of these rights, write to the contact named in section 11 from the email address or phone number you ordered with. We may ask you to confirm your identity before acting.

7. Withdrawing consent

Where we use your data because you consented, you may withdraw that consent at any time by writing to us. Withdrawing does not undo anything done before you withdrew, and it does not affect data we must keep by law, such as invoices. If the data is needed to complete an order, we may not be able to complete it once consent is withdrawn.

8. How we protect it

This website is served only over an encrypted (HTTPS) connection. Access to customer data is limited to staff who need it, each signed in with their own account. Payment, delivery and hosting are handled by established providers with their own security obligations. No system is perfectly secure; if a breach affects your data we will tell you and the Data Protection Board of India as the law requires.

9. Cookies

We do not use advertising or tracking cookies. Your cart is remembered in your own browser's storage, not on our servers. Razorpay sets its own cookies when its payment window opens, and our hosting provider may set a security cookie. You can block or clear these in your browser, but the cart and checkout may not work without them.

10. Children

This store is not directed at anyone under 18, and we do not knowingly collect a child's personal data. A person under 18 may use the store only with the involvement and consent of a parent or guardian, who places the order.

11. Complaints and the Grievance Officer

If you have a question or a complaint about how your data is handled, contact:

Customer care, Bright Blue Trading Corporation Email: brightbluefmcg@gmail.com Phone: 1800 123 0621 66/927 Pappurath, Krishnaswamy Road, Pullepady, Kochi, Kerala 682035

Complaints are acknowledged within 48 hours and resolved within 30 days of receipt. If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

12. Changes to this policy

We may update this policy as the store or the law changes. The date at the top of this page shows when it was last changed. A significant change will be made clear on the store before it takes effect.