1. Statutory Basis and Data Fiduciary

This Privacy Policy is issued by Javoris Solutions Private Limited, having its registered office at 101, Marathe Heights, Titwala (East), Thane – 421605, Maharashtra, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), Section 43A of the Information Technology Act, 2000, and the applicable IT (Reasonable Security Practices) Rules.

The Company acts as the Data Fiduciary for all Personal Data collected through www.svaadvika.com, whether Users access the Svaadvika storefront or the franchise portal.

2. Data Collected – B2C Buyers

• Name, mobile number, email address and delivery address.
• Order history, payment reference and GSTIN (where provided).
• Dietary or allergen information voluntarily shared for food safety purposes.
• Technical information including IP address, cookies and device identifiers.

3. Data Collected – B2B Franchise Applicants

• Identity, contact information and business address.
• Investment capacity, financial declarations and bank references.
• Business background and previous entrepreneurial experience voluntarily submitted.
• Such information is used solely for franchise evaluation and is never combined with B2C customer data.

4. Purpose, Notice and Consent

Personal Data is processed only for lawful purposes, with the consent of the Data Principal or under applicable legitimate uses permitted under the DPDP Act. Consent is obtained through clear affirmative action, is specific, informed and voluntary, and may be withdrawn at any time with the same ease as it was granted.

5. Sharing and Cross-Border Transfer

Personal Data may be shared with authorised payment gateways, logistics partners and other contracted Data Processors solely for order fulfilment and related business operations. Where Users purchase through third-party marketplaces such as Zepto, Amazon or Blinkit, their Personal Data is also governed by the respective platform's privacy policy. Cross-border transfers shall be made only in accordance with the DPDP Act.

6. Security and Breach Notification

The Company implements appropriate technical and organisational safeguards to protect Personal Data. In the event of any Personal Data breach, affected users and the competent authority shall be notified in accordance with applicable legal requirements.

7. Data Retention

Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Franchise application records that are no longer required shall be securely deleted after the applicable retention period.

8. Rights of the Data Principal

• Right to obtain a summary of Personal Data being processed.
• Right to correction, updating and erasure of Personal Data.
• Right to raise grievances against the Company.
• Right to nominate another individual to exercise rights in case of death or incapacity.

9. Children's Data

Personal Data relating to children below 18 years of age shall only be processed with verifiable parental or guardian consent. The Platform does not engage in behavioural tracking, targeted advertising or profiling of children.

10. Grievance Officer / Data Protection Officer

Users may contact the Company's designated Grievance Officer for any privacy-related concern.

If the grievance remains unresolved, the Data Principal may approach the Data Protection Board of India in accordance with the DPDP Act.

11. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies for authentication, user preferences, analytics and personalised recommendations. Non-essential cookies are activated only after obtaining the User's explicit consent through the cookie consent banner.

12. Amendment

The Company reserves the right to modify this Privacy Policy from time to time. Material changes affecting the processing of Personal Data shall be notified to Users, and fresh consent shall be obtained wherever legally required.