Privacy Policy

Last Updated: 22 October 2026

At OnlyFarms Superfoods, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, process, and share information when you visit our website, browse our products, place an order, create an account, contact us, or use any of our services.

This Privacy Policy applies to our website, https://onlyfarms.in, its online store, and associated customer services.

By using our website, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will request it through an appropriate mechanism. Visiting our website or making a purchase does not, by itself, constitute consent to optional marketing or non-essential tracking.

1. Who We Are

OnlyFarms Superfoods (“OnlyFarms”, “we”, “us”, or “our”) operates the website onlyfarms.in and offers food products, including makhana (fox nuts), packaged snacks, and related products through our online store and business channels.

We also receive enquiries regarding wholesale supply, distribution, bulk orders, and private-label services.

For the purposes of applicable data protection laws, the entity operating the website determines how and why your personal information is processed, except where a third-party service provider processes information independently under its own legal obligations.

Website: https://onlyfarms.in
Business: OnlyFarms Superfoods
Contact Number: +91 7011050912
Privacy Enquiries: support@onlyfarms.in

Throughout this policy, references to our website include its pages, shopping facilities, customer account areas, and related online services.

2. Information We Collect

We collect only the information reasonably necessary to operate our website, provide our products and services, process transactions, communicate with customers, and meet applicable legal obligations.

Depending on how you interact with our website, we may collect the following categories of information.

2.1 Information You Provide Directly

When you contact us, register an account, submit a form, or place an order, you may provide:

• Full name.

• Email address.

• Mobile or telephone number.

• Billing address.

• Shipping or delivery address.

• Company name, business details, and GSTIN, where applicable.

• Order details, purchased products, quantities, and transaction references.

• Information included in contact forms, customer support messages, product reviews, or other communications.

• Information supplied in wholesale, distribution, bulk purchase, or private-label enquiries.

• Account login information necessary to create and maintain your customer account.

We use this information for the specific purposes described in this policy.

Please provide accurate information when placing an order, particularly your contact number and delivery address, so that we can process and deliver your purchase correctly.

2.2 Information Collected During Shopping and Checkout

Our online store uses WooCommerce, an e-commerce platform for WordPress.

When you browse products, add items to your cart, proceed to checkout, or place an order, our store may process:

• Products viewed or added to your cart.

• Cart contents and quantities.

• Customer name and contact information.

• Billing and shipping details.

• Order totals, discounts, taxes, shipping charges, and applicable fees.

• Payment method and payment status.

• Order number and transaction references.

• Order history and related customer service communications.

We use this information to maintain your cart, calculate order totals, process purchases, prevent transaction errors, provide order updates, and manage delivery, cancellations, returns, and refunds.

Where guest checkout is enabled, customers may place orders without creating a registered WordPress account. Information needed to process and fulfil an order may still be collected.

2.3 Payment Information

Payments made through our website may be processed by third-party payment service providers, depending on the payment methods enabled at checkout.

These providers may collect information required to authenticate, authorise, process, verify, or refund a transaction.

Depending on the payment method, this may include payment identifiers, transaction references, billing details, or other information required by the provider.

We do not intentionally store complete payment card numbers, card security codes, or payment credentials in our ordinary WooCommerce order records when these are handled directly by a payment provider. The precise handling of payment information depends on the payment integration used.

Payment providers may process information under their own privacy policies and security requirements.

For cash-on-delivery or other offline payment methods, we may record the selected payment method, order amount, payment status, and information necessary to reconcile the transaction.

2.4 Information Collected Automatically

When you access our website, certain technical information may be collected automatically through our hosting infrastructure, WordPress, security systems, cookies, or other enabled services.

This information may include:

• IP address.

• Browser type and version.

• Device type and operating system.

• Referring website or page.

• Pages and products viewed.

• Date and time of access.

• Approximate location derived from your IP address.

• Website error reports and diagnostic information.

• Security events and information used to detect suspicious activity.

We use this information to maintain website functionality, diagnose technical problems, improve performance, understand website usage where applicable, and protect our website against abuse.

The information collected depends on our hosting configuration and the plugins or services enabled on the website.

2.5 Information From Communications and Reviews

If you submit a product review, contact form, customer support request, or other communication, we may retain the information you provide and the related correspondence.

Where review functionality is enabled, your submitted review and the display name associated with it may appear publicly on the website.

Please do not include sensitive personal information in publicly visible reviews or comments.

3. How We Use Your Information

We use personal information for legitimate business purposes and other purposes permitted by applicable law.

These purposes include:

Order processing and fulfilment: To receive and confirm orders, calculate applicable charges, process payments, arrange shipping, issue invoices, and deliver products.

Customer accounts: To create and manage accounts, authenticate customers, display order history, and provide account-related services.

Customer support: To respond to enquiries, resolve complaints, address product concerns, and provide assistance with purchases.

Returns and refunds: To verify orders, process eligible returns or cancellations, issue refunds through applicable payment channels, and maintain transaction records.

Wholesale and business enquiries: To respond to enquiries from retailers, distributors, traders, food businesses, and potential private-label customers.

Website operation: To maintain shopping carts, support checkout, remember relevant preferences, and ensure that essential website functions operate correctly.

Website security: To detect fraudulent transactions, investigate suspicious activity, protect customer accounts, prevent abuse, and maintain the security of our systems.

Service improvement: To identify technical problems, assess product and website performance, understand customer needs, and improve our products and services.

Communications: To send order confirmations, payment updates, shipping notifications, refund updates, and other messages necessary to complete or manage your transactions.

Marketing: To send promotional communications or display relevant advertising where permitted by applicable law and, when required, with your consent.

Legal and regulatory obligations: To maintain required business and financial records, respond to lawful requests, and establish, exercise, or defend legal claims.

We do not intentionally collect personal information for purposes unrelated to our business operations without an appropriate legal basis.

4. How WooCommerce Processes Customer Information

Our online store is powered by WooCommerce, which operates within our WordPress website.

The information you submit through the store is generally processed by the website and may be stored in its database, subject to the functionality and configuration of the plugins and services we use.

4.1 Shopping Cart and Checkout

WooCommerce may use cookies, session identifiers, or related technical mechanisms to remember your cart, maintain checkout sessions, and support the ordering process.

This helps ensure that products selected for purchase remain associated with your shopping session.

If you leave without completing an order, some session or cart information may remain temporarily, depending on our configuration.

An abandoned cart does not necessarily result in a completed order.

4.2 Customer Registration and Accounts

If you create an account, we may process your name, email address, telephone number, billing and shipping addresses, and order history.

Account credentials are handled through WordPress authentication mechanisms. Passwords are not intended to be stored as readable plain text.

You are responsible for keeping your login credentials confidential and notifying us if you suspect unauthorised access to your account.

4.3 Order Records

WooCommerce maintains records needed to manage orders and related transactions.

These records may include the purchased products, order date, customer details, transaction references, payment method, order status, delivery information, and relevant communications.

We retain these records for as long as reasonably necessary to fulfil orders, provide support, resolve disputes, comply with applicable accounting and tax requirements, and meet other lawful obligations.

The exact retention period depends on the type of record, applicable legal requirements, and our store’s data-retention settings.

4.4 Payment Processing

When you pay online, the payment method selected at checkout may connect you to or communicate with an external payment service.

Information necessary to process or verify your transaction may be transmitted to that provider.

We may receive a transaction reference, payment confirmation, payment status, and other information necessary to associate your payment with your order.

We do not control the independent privacy practices of third-party payment providers.

4.5 Order Communications

We may use your contact information to send order confirmations, payment notifications, invoices, dispatch updates, delivery information, cancellation confirmations, and refund notifications.

These service-related communications are necessary to manage your purchase and are distinct from optional marketing communications.

4.6 Store Administration

Our authorised website administrators and relevant personnel may access customer and order information when necessary to fulfil orders, resolve customer requests, investigate transactions, maintain the website, or satisfy legal obligations.

Access should be restricted to authorised individuals who need the information for their assigned responsibilities.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support its functionality, remember relevant preferences, maintain shopping sessions, and, where enabled, measure website usage or support marketing activities.

A cookie is a small text file stored by your browser when you visit a website.

5.1 Essential Cookies

Essential cookies support functions necessary for operating the website and online store.

Depending on our configuration, these may be used to:

• Maintain login sessions.

• Remember shopping cart contents.

• Support checkout and payment workflows.

• Maintain security and prevent fraudulent activity.

• Remember certain website preferences.

Some cookies are necessary for the requested service to function correctly.

5.2 WooCommerce Cookies

WooCommerce may use cookies such as:

• woocommerce_cart_hash

• woocommerce_items_in_cart

• wp_woocommerce_session_*

These cookies help the store recognise cart changes, maintain shopping sessions, or associate a visitor’s session with the relevant cart information.

The cookies actually used may vary depending on the WooCommerce version, installed extensions, caching configuration, and enabled checkout features.

5.3 WordPress Cookies

WordPress may use cookies for functions such as account authentication, session management, and administrative preferences.

For example, cookies beginning with wordpress_logged_in_ may be used to maintain an authenticated WordPress session.

Administrative cookies may be set when authorised users access the WordPress dashboard.

The cookies available to ordinary visitors and logged-in customers depend on how the website is configured.

5.4 Analytics and Performance Cookies

If analytics, performance measurement, or related services are enabled, cookies or similar technologies may help us understand website traffic, page usage, navigation patterns, and technical performance.

The information collected may include pages viewed, referral sources, device or browser information, and interaction events.

These technologies are used only as configured and subject to applicable consent requirements.

5.5 Advertising and Marketing Cookies

If we enable advertising, remarketing, social media tracking, or related marketing integrations, these services may use cookies or similar technologies to measure campaigns, understand advertising performance, or personalise advertisements.

Non-essential tracking will be handled through appropriate consent mechanisms where required by applicable law.

5.6 Managing Cookies

You can manage or disable cookies through your browser settings.

You may also be offered cookie preference controls on our website where applicable.

Blocking or deleting certain cookies may affect login sessions, cart functionality, checkout, or other website features.

Deleting cookies does not necessarily remove personal information already stored in our website database or by a third-party service.

6. When We Share Personal Information

We do not sell your personal information to third parties for money.

We may share information when necessary to provide our services, operate our website, complete transactions, or meet legal obligations.

6.1 Payment Service Providers

Payment processors receive the information necessary to process transactions, verify payments, manage refunds, and prevent payment fraud.

The specific information shared depends on the payment method and provider selected at checkout.

6.2 Shipping and Delivery Partners

We may share your name, telephone number, delivery address, order details, and other necessary information with courier companies, logistics partners, and delivery personnel.

This information enables them to dispatch products, contact you about deliveries, confirm delivery status, and process delivery exceptions.

6.3 Website Hosting and Technical Service Providers

Our website depends on hosting, infrastructure, security, backup, and technical maintenance services.

Relevant service providers may process or access technical information and website data when necessary to operate, secure, maintain, or troubleshoot the website.

6.4 WordPress Plugins and External Integrations

We may use plugins or integrations for features such as contact forms, spam protection, website security, caching, analytics, backups, email delivery, customer communication, and e-commerce functionality.

Where an enabled service requires access to personal information, relevant information may be transmitted to or processed by that service.

Such processing depends on the particular product, plugin, settings, and service provider in use.

6.5 Accounting, Tax, and Professional Services

We may provide relevant transaction or business information to accountants, auditors, legal advisers, tax professionals, or other professional service providers where reasonably necessary for business administration or legal compliance.

6.6 Legal Requirements and Protection of Rights

We may disclose information where required by applicable law, a valid legal process, a competent authority, or a lawful request.

We may also disclose relevant information when reasonably necessary to investigate suspected fraud, protect our customers, enforce our contractual rights, or protect the security of our website and business.

6.7 Business Transfers

If our business undergoes a merger, restructuring, acquisition, sale, or transfer of assets, relevant information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.

6.8 No Unauthorised Commercial Disclosure

We do not disclose personal information to unrelated third parties for their independent promotional use without an appropriate legal basis and, where required, your consent.

7. Marketing and Promotional Communications

We may provide updates about our products, offers, new launches, and other business activities through email, SMS, WhatsApp, or other communication channels where permitted by applicable law.

Where required, we will seek your consent before sending promotional communications or using your information for optional marketing purposes.

You may opt out of promotional emails using the unsubscribe mechanism provided in the communication, where available.

You may also contact us to request that we stop sending promotional messages.

Opting out of marketing will not prevent us from sending essential communications relating to an existing order, payment, delivery, refund, security matter, or other service you have requested.

Where marketing or advertising tools are enabled, their use of customer information will be subject to the applicable settings, permissions, and consent requirements.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by applicable law.

Retention depends on the nature of the information and the reason it was collected.

Where information is no longer needed, we may delete it, anonymise it, or otherwise remove identifying details, subject to applicable legal and operational requirements.

Some information may remain in secure backups for a limited period before being overwritten or deleted under our backup-retention procedures.

Deleting a customer account does not necessarily mean that every associated order or transaction record can be deleted. Certain records may need to be retained to comply with applicable laws, complete transactions, resolve disputes, or prevent fraud.

Our actual retention settings may vary by data category and must be configured accordingly in WordPress and WooCommerce.

9. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss, misuse, and destruction.

Depending on the system and service involved, these measures may include:

• Access controls for authorised personnel.

• Website security measures and software updates.

• Appropriate password and authentication practices.

• Secure connections using HTTPS.

• Security monitoring and suspicious-activity detection.

• Backup and recovery procedures.

• Appropriate access restrictions for service providers and administrators.

We aim to limit access to personal information to individuals and service providers who need it for legitimate operational purposes.

However, no website, internet transmission, electronic storage system, or security measure can guarantee absolute security.

If a personal data breach occurs, we will assess the incident and take appropriate steps, including notifications to affected individuals or authorities where required by applicable law.

10. Your Privacy Rights and Choices

Depending on applicable law, the nature of the information, and the circumstances of its processing, you may have rights concerning your personal information.

These may include the right to:

Request access: Ask us about the personal information associated with you that we process.

Request correction: Ask us to correct inaccurate or incomplete information, including your account or contact details.

Request deletion: Ask us to delete personal information that we no longer need to retain, subject to applicable legal and operational exceptions.

Withdraw consent: Withdraw consent for processing activities that rely on your consent, using the available mechanisms described below.

Opt out of marketing: Request that we stop sending promotional communications.

Raise a complaint: Contact us to raise a concern about how your personal information is collected, used, or protected.

Exercise other applicable rights: Exercise any additional rights available to you under applicable data protection laws.

10.1 How to Submit a Request

To exercise a privacy right, contact us through our website’s contact facility or using the official contact details provided in Section 1.

Please describe your request and provide sufficient information for us to identify the relevant account, order, or communication.

We may request reasonable additional information to verify your identity before acting on a request. We will not ask you to disclose your account password.

We will respond within the timeframe required by applicable law. Some requests may be limited where we must retain certain information to complete a transaction, comply with legal obligations, protect against fraud, or establish or defend a legal claim.

Where applicable law provides for an appeal or complaint mechanism, we will explain the relevant process when responding to your request.

10.2 Withdrawing Consent

Where processing is based on your consent, you may withdraw that consent through an available preference setting, the relevant communication channel, or by contacting us.

Withdrawing consent does not affect processing that occurred lawfully before the withdrawal.

If the withdrawn consent is necessary for a particular optional service, that service may no longer be available. Where another lawful basis permits continued processing, we may retain or process the information to the extent allowed by law.

11. Third-Party Websites and Services

Our website may contain links to external websites, payment services, social media platforms, courier tracking pages, or other third-party services.

When you follow an external link or use a third-party service, that service may collect or process information according to its own privacy policy and terms.

We do not control the privacy practices, security measures, or content of websites operated independently by third parties.

We encourage you to review the privacy policy of any external service before providing personal information.

12. Embedded Content and Social Media Features

Some website pages may include embedded content or interactive features provided by third parties.

Examples may include videos, social media content, maps, external product integrations, or other embedded media.

Where enabled, these features may communicate with the third-party provider and may collect technical information, set cookies, or recognise your browser in accordance with that provider’s practices.

Your interaction with embedded content may therefore be subject to the third party’s privacy policy and consent mechanisms.

We do not assume that every third-party integration described in this section is active on the website at all times.

13. International Data Transfers

Some of our website service providers, technical systems, payment processors, email services, or other third-party platforms may operate servers or facilities outside India.

Where personal information is transferred to or accessed from another country, we will take steps required by applicable law and appropriate to the nature of the information and the services involved.

These steps may include contractual safeguards, access restrictions, security controls, or other measures required under applicable rules.

The countries in which data is processed depend on the service providers and integrations actually used.

14. Children’s Privacy

Our website and online store are intended primarily for adults purchasing products or making business enquiries.

We do not knowingly solicit personal information directly from children under 18 for independent account registration, marketing, or other activities that require parental consent under applicable law.

Where a purchase is intended for a child, a parent or legal guardian should manage the purchase and provide the necessary information.

If we become aware that personal information has been collected from a child in circumstances where appropriate parental consent or another lawful basis was required but not obtained, we will assess the matter and take appropriate steps in accordance with applicable law.

15. Automated Processing and Fraud Prevention

We may use automated technical systems or third-party tools to support website security, detect suspicious transactions, identify spam, prevent abuse, and flag unusual order activity.

These systems may consider technical information, transaction details, or patterns of activity.

Where an automated process affects an order or customer request, we may review relevant information or take further action as appropriate to the circumstances.

We do not intend to use customer information for purposes incompatible with those described in this policy.

16. Business-to-Business Enquiries

If you contact us regarding distribution, wholesale supply, bulk purchasing, retail partnerships, or private-label services, we may process your professional contact details and related business information.

This may include your name, company, business email address, telephone number, location, GSTIN where supplied, product requirements, expected quantities, and correspondence.

We use this information to assess enquiries, prepare quotations, communicate commercial terms, manage business relationships, and fulfil agreed orders or services.

Where necessary, relevant information may be shared with service providers or professional advisers involved in fulfilling those business activities.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, business practices, WooCommerce functionality, service providers, legal obligations, or data protection requirements.

The latest version will be published on this page, together with its updated revision date.

Where a change materially affects how personal information is processed and additional notice or consent is required by applicable law, we will take appropriate steps to provide that notice or obtain the necessary consent.

We encourage you to review this page periodically.

18. Contact Us and Privacy Complaints

If you have a question, request, or complaint concerning this Privacy Policy or the processing of your personal information, contact us using the details below.

Business: OnlyFarms Superfoods
Website: https://onlyfarms.in
Contact Number: +91 7011050912
Privacy Contact Email: support@onlyfarms.in

You may also submit your enquiry through the contact facility available on our website.

Please include sufficient information to help us understand your request. For order-related matters, providing your order number may help us locate the relevant transaction.

We will review and address privacy requests and complaints in accordance with applicable law.

Where a complaint remains unresolved, you may have the right to approach the competent data protection authority or another relevant authority, subject to the applicable legal framework.

Privacy Statement

OnlyFarms Superfoods aims to handle customer information responsibly, collect information for clearly identified purposes, protect it through appropriate safeguards, and provide customers with reasonable ways to manage their privacy preferences and exercise their applicable rights.