Privacy Policy

1. Who is responsible for your data

Farmson Biotech Private Limited, Ankleshwar, Gujarat, decides how your personal data is used and is the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 (DPDP Act). This policy also follows the Information Technology Act, 2000 and the rules made under it.

2. What we collect

• Contact details: name, mobile number, email, company or farm name, and the state and country you farm or trade in.
• Order and delivery details: billing and delivery address, pincode, GSTIN if you give it, products ordered and invoices.
• Payment references: the UTR or transaction ID and any payment screenshot you upload, the name of the paying bank account or UPI ID shown on that payment, and, for refunds, the account or UPI ID you ask us to pay. We do not collect or store card numbers, UPI PINs, OTPs or banking passwords.
• Enquiries and messages: what you send us through forms, email, phone, WhatsApp or social media, including crop and acreage details you share for advice.
• Export buyers: company registration, import permit and document details needed for shipping and customs.
• Job applicants: CV and details you send through our jobs page.
• Technical data: IP address, browser, device, pages visited and cookies, as explained in our Cookie Policy.

3. Why we use it

• To answer enquiries, send quotations and recommend varieties for your crop and season.
• To process orders, verify payments, issue GST invoices, ship parcels and share tracking updates.
• To handle complaints, seed quality claims, replacements and refunds.
• To meet legal duties under tax, company, seed and export laws, and to respond to lawful requests from authorities.
• To prevent fraud and keep the website secure.
• With your consent, to send crop advisories, new variety news and offers by email, SMS or WhatsApp.
• To understand in aggregate how the website is used, so we can improve it.

4. Consent and your choices

• We process your data with your consent, or for legitimate uses allowed by the DPDP Act, such as completing an order you asked for or meeting a legal obligation.
• You can withdraw consent for marketing messages at any time by replying STOP on WhatsApp or SMS, clicking unsubscribe in an email, or writing to us. Withdrawal does not affect processing already done, or data we must keep by law.
• Non-essential cookies are placed only if you accept them in the cookie banner.

5. Who we share it with

We do not sell or rent your personal data. We share only what each party needs:

• iCarry and its courier partners: name, phone and delivery address to deliver your parcel and to collect Cash on Delivery payments.
• Our bank: payment references needed to confirm receipt of money and to make refunds.
• Freight forwarders, airlines, customs brokers and plant quarantine authorities: details needed for export shipments and phytosanitary certificates.
• Service providers that host and run our website and business software (Odoo), email, analytics (Google Analytics) and messaging, under confidentiality obligations.
• Authorities, courts or regulators when the law requires it, or to protect our rights, customers or the public.
• A buyer of our business, if Farmson is merged or sold, who must keep protecting your data under this policy.

6. Where it is stored

Our website and business software are hosted by Odoo on secure cloud servers, which may be located outside India. Transfers outside India are made only to countries not restricted by the Government of India and with safeguards in place.

7. How long we keep it

• Invoices, orders and payment records: for as long as tax and company law require, generally up to 8 years.
• Enquiries that did not lead to an order: up to 3 years after our last contact.
• Marketing contacts: until you withdraw consent.
• Job applications: up to 1 year.

After that, data is deleted or anonymised.

8. How we protect it

The website uses encrypted HTTPS connections. Access to customer data is limited to staff who need it for their work, with individual logins and access rights. Our hosting provider keeps backups and protects its servers. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as required by law.

9. Your rights

• Ask what personal data we hold about you and how it is used.
• Ask us to correct, complete, update or erase your data, unless we must keep it by law.
• Withdraw your consent.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with our Grievance Officer and, if not satisfied, with the Data Protection Board of India.

Send your request to info@farmsonbiotech.com. We may ask you to confirm your identity before acting on it.

10. Children

This website and our products are meant for adults engaged in farming or the seed trade. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us data, contact us and we will delete it.

11. Grievance Officer

Our Grievance Officer is V. D. Donga, reachable at the address and email below. Complaints are acknowledged within 48 hours and resolved within 30 days.

12. Changes to this policy

We may update this policy when the law or our services change. The date of the last update is shown on this page. For significant changes we will also tell registered customers by email.