Privacy Policy

Bhimashankar Jungle Medicine ("we", "us", or "our") operates the website at bhimashankarjungle.com. We are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. This website is operated by Pranay Mohite and the Bhimashankar Jungle Medicine initiative, focused on providing authentic Ayurvedic and herbal remedies from the forests of Maharashtra, India.

We may collect and process the following personal information: • Name: When you contact us, place an inquiry, or communicate via WhatsApp. • Phone Number: When you initiate a WhatsApp order or inquiry through our website. • Email Address: If you submit our contact form or voluntarily provide it. • Postal/Delivery Address: Only if you place an order and provide it for delivery purposes. • Product Inquiry Details: The products you have expressed interest in, quantities, and related messages. • Order Details: Product name, quantity, price, and order context (Phase 1: WhatsApp-based orders). • Payment Details (Phase 2 only): If our Razorpay payment integration is enabled in the future, we may collect billing information necessary to process your payment. Sensitive payment data (card numbers, UPI PINs) is never stored on our servers. • Technical Data: IP address, browser type, session data, and page access logs for security and functionality.

We use the information we collect for the following purposes only: • To respond to your product inquiries and provide information you requested. • To process and fulfill your orders (WhatsApp-based in Phase 1). • To facilitate communication regarding your order status, delivery updates, or support. • To send order confirmations and related notifications via WhatsApp. • To improve our website functionality and user experience. • To comply with legal obligations if required. We do not use your personal information for unsolicited marketing, sale to third parties, or any purpose beyond the above without your consent.

Phase 1 of our website uses WhatsApp as the primary ordering channel. When you click the "Order on WhatsApp" button: • You will be redirected to WhatsApp with a pre-filled message containing your selected product details, quantity, and price. • The pre-filled message is generated on our server and may be logged for analytics and business improvement purposes. • Your IP address and user agent may be recorded along with product and inquiry details. • WhatsApp messages are subject to WhatsApp's own Privacy Policy and Terms of Service. • We do not control how WhatsApp processes your data after redirection. Contact for orders: Pranay Mohite — +91 8268417248

In Phase 2, if enabled by the administrator, customers may be able to complete purchases directly on our website using Razorpay payment gateway. • Payment processing is handled entirely by Razorpay's secure infrastructure. • We never receive, store, or have access to your full card number, CVV, UPI PIN, or any other sensitive payment credentials. • Only the transaction status (success/failure), order ID, and Razorpay payment reference are stored in our system to track your order. • Razorpay is PCI DSS compliant and follows industry-standard security practices. • For Razorpay's data handling, please refer to: https://razorpay.com/privacy/ Note: Phase 2 direct checkout is not yet active. Orders are currently fulfilled via WhatsApp.

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and accidental loss, destruction, or damage. • Our website is served over HTTPS to encrypt data in transit. • Access to personal data is restricted to authorised team members only. • We do not store payment card details on our servers. • Admin access to inquiry data is protected by role-based permission controls. Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal data but cannot guarantee its absolute security.

You have the right to: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete personal data. • Deletion: Request deletion of your personal data, subject to any legal obligations we may have to retain it. • Restriction: Request restriction of processing of your personal data. • Objection: Object to processing of your personal data for certain purposes. To exercise any of these rights, please contact us using the details in the Contact section below. We will respond to your request within a reasonable time frame.