Policy

Privacy Policy

Effective Date: 17 September 2026

Last Updated: 18 September 2026

This Privacy Policy explains how Aha Rasam collects, uses, shares and protects personal data when you visit aharasam.com or buy from us, and how you can contact us about it. We collect only what we need to sell and deliver our products and to run the website safely.

1. Who we are

Aha Rasam is a brand of SHREEVEDA FOODS, a sole proprietorship owned by PAWAN KUMAR GOPAL KHATTE. In this document, "Aha Rasam", "we", "us" and "our" mean SHREEVEDA FOODS, acting through its proprietor PAWAN KUMAR GOPAL KHATTE, who is the seller of the products offered on aharasam.com. "You" means the person using the website or placing an order.

Brand: Aha Rasam
Business (trade) name: SHREEVEDA FOODS
Legal seller / proprietor: PAWAN KUMAR GOPAL KHATTE
Registered business address: SHREEVEDA FOODS, Ground Floor, C/o. S.K. Enterprises Building, Gut No. 65, Property Number 317, Pali-Bhira Road, Next to 21 Ganpati Temple, Siddheshwar BK, Taluka Sudhagad, District Raigad, Maharashtra, 410205
GSTIN: 27AGDPK3715D2ZR
FSSAI registration number: 21525070000009
Website: aharasam.com
Customer support: [email protected] · 9699602706

SHREEVEDA FOODS, through its proprietor PAWAN KUMAR GOPAL KHATTE, decides how and why your personal data is processed for the purposes described below.

2. Information we collect

Information you give us

your name;
your mobile number;
your email address, if you choose to provide one;
your delivery address, PIN code and any landmark you add (also used as the billing address for your order);
your GSTIN, only if you choose to provide one for invoicing;
messages and information you send us when you contact customer support.

Information created when you shop

the contents of your cart;
your orders, their items, prices, taxes, delivery option and status;
shipping and tracking information for your parcel.

Payment information

payment and refund references, the amount, the payment method type and the payment status, which we receive from our payment provider.

Account information, where account sign-in is offered

your verified mobile number, profile details and saved addresses;
sign-in session information.

Technical and security information

your IP address, browser and device information, and the date and time of requests, recorded in our server and security logs;
information needed to prevent abuse, such as rate-limiting and failed-request records.

We do not ask for sensitive information we have no use for.

3. Why we use your information

to provide your cart and checkout, and to calculate delivery options and charges;
to accept, confirm and fulfil your order;
to process and verify payments, refunds and reconciliations;
to arrange delivery and let you track your parcel;
to provide customer service and handle complaints and grievances;
to issue invoices and meet tax, accounting and other legal obligations;
to detect and prevent fraud, misuse and security incidents;
to keep the website working reliably and to improve our service; and
to send marketing communications, only if you have agreed to receive them.

We process your information because you have asked us to sell and deliver products to you, because you have given consent where consent is required, or where the processing is otherwise permitted or required by applicable law.

4. Guest checkout and accounts

You can buy from us as a guest, without creating an account. Where account sign-in is offered, we verify your mobile number with a one-time password (OTP) sent by SMS. OTPs are stored only in an irreversible, protected form and only for as long as they are valid, and they are not written to our logs. If you verify the mobile number used on earlier guest orders, those orders may be shown in your account.

5. Payments

Payments are processed by Razorpay. Your card details, UPI PIN, net-banking credentials and similar payment secrets are entered directly with Razorpay and are not received or stored by us. We receive and keep only the references and status information described in section 2, which we need to confirm your order, answer queries, issue refunds and keep accounts. Razorpay handles the information you give it in accordance with its own privacy policy.

We share personal data only as needed for the purposes above, with:

Razorpay, our payment service provider, to process payments and refunds;
Shiprocket and the courier companies it assigns, to check serviceability, deliver your parcel and provide tracking — they receive your name, delivery address, mobile number and parcel details;
our cloud hosting and infrastructure providers, which run our website and database;
Cloudflare, which provides domain name, content delivery and security services for our website;
an SMS service provider, to deliver OTP messages, once SMS verification is in use;
our email service provider, when you correspond with us by email;
professional advisers, such as accountants and legal advisers, where needed;
government, regulatory, tax or law-enforcement authorities, where required by law or legal process; and
a successor business, if our business or its assets are transferred, subject to this policy.

We do not sell your personal data, and we do not share it with third parties for their own advertising.

7. Where information is processed

Our website and database are hosted on servers located in India. Some service providers, such as Cloudflare and payment networks, operate internationally and may process data in other countries as part of providing their services. Any such processing is carried out in accordance with applicable law.

8. Cookies and browser storage

We use only the cookies and browser storage needed to run the shop:

a cart cookie, which keeps your cart between visits;
a sign-in session cookie, only if you sign in to an account;
browser session storage that remembers the contact and delivery details you type at checkout, for up to 24 hours in that browser tab, so you do not have to re-enter them. It is cleared when your order is confirmed or you sign out, and it is not shared with other tabs or devices;
security cookies that our website security provider (Cloudflare) may set to protect the site from automated abuse; and
a browser cache of the website’s own files (such as page layouts and images) so the site loads faster. Checkout, account and order pages are not cached.

We do not use advertising cookies, and we do not use third-party analytics or tracking scripts. You can clear cookies and site data in your browser at any time; if you do, your cart and any sign-in will be lost.

9. How long we keep information

We keep personal data only for as long as reasonably necessary for the purposes described in this policy — including completing your order, handling returns, refunds and disputes, preventing fraud, and meeting legal, regulatory, tax and accounting obligations — and then delete or anonymise it. Tax invoices and accounting records are kept for the period required by GST and other applicable law. Where the law requires us to keep a record, we may not be able to delete it on request until that period ends.

10. How we protect information

We use reasonable security practices appropriate to the information we hold, including encrypted (HTTPS) connections, access controls and authentication for administrative functions, protected storage of session and verification tokens, restricted access to production systems, and backups. No website or system can be completely secure, so we cannot guarantee absolute security, but we work to protect your information and will act in accordance with applicable law if a security incident affecting your personal data occurs.

11. Marketing

We do not currently send marketing messages. If we introduce them, we will send them only where you have given consent, and you will be able to withdraw that consent at any time. Messages about an order you have placed — such as confirmation, payment and delivery updates — are part of providing your order and are not marketing.

12. Your choices and rights

Subject to applicable law, including the Information Technology Act, 2000 and, as its provisions apply, the Digital Personal Data Protection Act, 2023, you may:

ask for information about the personal data we hold about you and how we use it;
ask us to correct, complete or update inaccurate or incomplete information;
ask us to erase personal data we no longer need to keep;
withdraw any consent you have given, without affecting processing already carried out;
raise a grievance about how we handle your personal data; and
exercise any other right available to you under applicable law.

To make a request, contact us using the details below. We may need to verify your identity before acting on a request — for example, by asking you to confirm details of an order placed with the same mobile number. We will respond within a reasonable time and within any period required by applicable law.

13. Children

Our website is intended for use by adults. If you are under 18, please use the website and place orders only with the involvement of a parent or guardian. We do not knowingly collect personal data from children other than as provided by a parent or guardian for an order. If you believe a child has provided personal data to us without such involvement, please contact us so that we can take appropriate steps.

14. Contact us

Email: [email protected]
Telephone: 9699602706

Please mention "Privacy" in your message and, where relevant, your order number.

15. Grievance Officer

If your concern is not resolved to your satisfaction through customer support, you may write to our Grievance Officer:

Name: PAWAN KUMAR GOPAL KHATTE
Designation: Grievance Officer
Email: [email protected]

Please include your order number (if any), a description of the issue and any supporting information. We will acknowledge your grievance within 48 hours of receiving it and work to resolve it within one month, or within any shorter period required by applicable law. Some matters, such as courier or bank investigations, depend on information from third parties; where that is the case we will keep you informed.

If your grievance is not resolved, you may have the right to approach the appropriate authority under applicable law, including the Data Protection Board of India where the relevant provisions apply.

16. Changes to this policy

We may update this policy to reflect changes in our services, service providers or legal requirements. The current version is always published on this page with its effective date and last-updated date. Where a change is significant, we will take reasonable steps to bring it to your attention.

Nothing in this document excludes, limits or waives any right you have as a consumer that cannot lawfully be excluded, limited or waived. If any part of this document conflicts with applicable Indian law, applicable law prevails.