Privacy Policy

Yesell Crops Care ("we", "our", "us"), a unit of PNM Industries, Erode, Tamil Nadu, India, operates the website yesellcropscare.com ("Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Platform or purchase our products.

This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information We Collect

We collect the following categories of personal data:

• Identity data: Name, email address, phone number
• Contact data: Billing address, shipping address, state/district/pin code
• Transaction data: Details of products purchased, order value, payment method
• Technical data: IP address, browser type, device type, pages visited, time and date of visit
• Account data: Username, encrypted password, purchase history

We do not collect Aadhaar, PAN, or any government identification numbers through our Platform.

2. How We Use Your Information

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations, shipping updates, and delivery notifications
• Respond to your inquiries and provide customer support
• Send transactional emails (welcome, password reset, order status)
• Maintain records as required under the Insecticides Act, 1968 and applicable tax laws
• Improve our Platform and product offerings
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Legal Basis for Processing

Under the DPDP Act 2023, we process your data on the following lawful bases:

• Consent: You provide consent when you register an account or complete a purchase
• Contractual necessity: To fulfil your order
• Legal obligation: Tax records, Insecticides Act compliance
• Legitimate interest: Fraud prevention, Platform security

4. Data Sharing

We may share your data with:

• Logistics partners: To deliver your order (name, address, phone number only)
• Payment processors: To process your payment securely (Razorpay — subject to their privacy policy)
• Email service provider: Brevo (Sendinblue) — to send transactional emails
• Government authorities: When required by law, court order, or regulatory authority

All third-party processors are bound by data processing agreements consistent with applicable law.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, and as required by applicable law. Order records are retained for a minimum of 7 years for tax and regulatory compliance. Account data is retained until you request deletion.

6. Your Rights

Under the DPDP Act 2023, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to grievance redressal: Lodge a complaint with our Grievance Officer
• Right to withdraw consent: You may withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email us at support@yesellcropscare.com. We will respond within 30 days.

7. Cookies

Our Platform uses essential cookies required for the operation of the site (session management, cart, authentication). We do not use advertising or tracking cookies. You may disable cookies in your browser settings, but this may affect Platform functionality.

8. Data Security

We implement reasonable technical and organisational security measures to protect your personal data, including encrypted data transmission (HTTPS), hashed password storage, and access controls. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the name and contact details of the Grievance Officer are:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Policy periodically.