Privacy Policy

Who We Are

Swposha Edibles LLP (“Swposha”, “We”, “Us”, “Our”) is a Limited Liability Partnership registered in India. We operate a curated platform celebrating India’s rich culinary heritage and regional craftsmanship. Our collection spans:

  • Gourmet & traditional foods: Homemade spice blends, regional delicacies, artisanal preserves, and other food products crafted in small batches.
  • Traditional art: Authentic folk art, handcrafted paintings, and indigenous artistic expressions sourced from artisans across India.
  • Handcrafted home décor: Imitation torans, festive decorations, traditional motif pieces, and heritage-inspired home accessories made by local artisans.

Every product on Swposha reflects authentic tradition, creativity, and artisanal excellence — crafted with care to bring warmth, culture, and timeless Indian elegance into modern homes.

This Privacy Policy applies to all visitors, customers, and artisan partners who interact with our website (www.swposha.com), mobile platform, or any of our services.

This Policy is governed by the Information Technology Act, 2000, the IT (SPDI) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), the Consumer Protection Act, 2019, and applicable FSSAI regulations for our food product lines. Under the DPDP Act, Swposha is the Data Fiduciary and you are the Data Principal.

What We Collect & Why

2a.  Customer Information

When you browse or shop on Swposha, we may collect:

  • Identity & contact details: Name, email address, mobile number, and delivery/billing address — to create your account and fulfil orders.
  • Payment details: Processed via PCI-DSS compliant third-party gateways. We never store your full card number.
  • Date of birth: For age verification (platform is for 18+ only).
  • Dietary preferences & food allergy information: Only if you voluntarily share this. This is classified as Sensitive Personal Data (SPDI) under the SPDI Rules 2011 and the DPDP Act 2023, and is collected only with your explicit consent.
  • Cultural & gifting preferences: Region, occasion, décor style, or art preferences you share with us to personalise your shopping experience.
  • Gift messages: Text you provide for gifting orders, stored only to fulfil the order.

2b.  Artisan & Seller Partner Information

If you are an artisan or seller partnering with Swposha, we collect:

  • Business & identity details: Name, address, PAN/GSTIN, bank account details (for payments), and FSSAI licence number (for food artisans).
  • Product information: Descriptions, photographs, pricing, batch sizes, ingredients (for food products), and origin/craft details.
  • Communication records: Emails, calls, or messages exchanged during our partnership.

 Artisan partner data is used exclusively for onboarding, payment processing, order fulfilment, and compliance with applicable laws. It is not used for marketing or sold to third parties.

2c.  Activity & Transaction Information

  • Order history, cart activity, and purchase patterns.
  • Delivery preferences and return/exchange requests.
  • Customer support conversations (email, chat, or calls).
  • Reviews, ratings, and feedback submitted on the platform.
  • Survey or contest responses submitted voluntarily.

2d.  Technical Information (Collected Automatically)

  • IP address, browser type, operating system, and device model.
  • Pages visited, session duration, and navigation patterns.
  • Referring URLs and search keywords used on the platform.
  • Cookie identifiers and session data

How We Use Your Information

Purpose

Details

Order fulfilment

Processing, packaging, and delivering food, décor, and art orders.

Artisan coordination

Sharing order details with the relevant artisan partner to fulfil your purchase.

Account management

Creating, securing, and personalising your Swposha account.

Customer support

Responding to queries, complaints, returns, and exchange requests.

Transactional communication

Order confirmations, shipping updates, delivery alerts via SMS, email, or WhatsApp.

Promotional communication

Curated recommendations, festive offers, new arrivals — only with your opt-in consent. Unsubscribe anytime.

Personalisation

Suggesting products based on your region, cultural preferences, order history, or occasion.

Artisan payments

Processing payments to artisan and seller partners.

Platform improvement

Analytics to improve website, catalogue quality, and user experience.

Legal & regulatory compliance

FSSAI (food products), GST, Consumer Protection Act, Legal Metrology Act, and DPDP Act obligations.

Fraud prevention

Detecting and investigating suspicious or unauthorised activity.

We will never sell, rent, share, or transfer your personal information to any third party for their own commercial or marketing purposes — under any arrangement.

Who We Share Your Information With

We share your information only when necessary, and always under contractual confidentiality obligations:

Artisan & seller partners

Your name, delivery address, and order details are shared with the artisan or seller fulfilling your order. They are permitted to use this information only for that specific purpose.

Delivery & logistics partners

Shipping address, contact number, and order details are shared with our delivery partners (e.g., Shiprocket, Delhivery, Blue Dart) to ensure safe and timely delivery.

Payment gateways

Payment processing is handled by PCI-DSS compliant third-party gateways (e.g., Razorpay, PayU). We do not store your full card or bank account details

Cloud & technology providers

Our platform is hosted on secure cloud infrastructure. All technology partners are bound by Data Processing Agreements (DPAs) requiring equal or higher data protection standards

Legal & regulatory authorities

We may disclose information to government bodies, FSSAI inspectors, tax authorities, courts, or law enforcement when required by applicable law, court order, or to protect the safety of our users and artisan partners.

Business restructuring

In the event of a merger, acquisition, or sale of business, personal data may be transferred to the successor entity. We will notify affected users and artisan partners by email at least 30 days before the transfer and provide the option to close their accounts

How We Protect Your Data

  • All payment and data transmissions use TLS/SSL encryption.
  • Sensitive personal data is encrypted at rest on our servers.
  • Access to personal data is role-restricted on a need-to-know basis.
  • Artisan bank and financial details are handled with additional access controls.
  • Periodic security audits are conducted on our systems and third-party processors.

All service providers handling personal data sign formal Data Processing Agreements (DPAs)

Data Breach Notification: If a data breach occurs that may put your rights or safety at risk, we will notify you and the relevant regulatory authority within 72 hours of becoming aware, as required under the DPDP Act 2023.

You are responsible for keeping your account credentials confidential. If you suspect unauthorised access, notify us immediately at info@swposha.com

Governing Law & Jurisdiction

This Policy is governed by the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts located at Ahmedabad, India