1. Who we are
This website is operated by Saavy Agro Fresh Pvt. Ltd. (“Saavy”, “we”, “us”), a supplier of 20 litre packaged drinking water to workplaces. For the personal data described here, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Office 306-307, 3rd Floor, Business Hub, Karve Road, Kothrud, Pune, Maharashtra 411052
S. No. 78, Pandhari Industrial Estate, Shivane, Pune 411023
S. No. 147, Shawate Wasti, Manjri Budruk, Pune 411037
This policy covers this website, its enquiry form, and enquiries you send us by WhatsApp, email or phone through it. If you become a customer, your supply agreement may contain further terms about how we handle account and billing information.
2. The short version
- We only collect what you type into the enquiry form, plus a few technical details that help us stop spam.
- We use it to answer your enquiry and prepare a quotation. We never sell or rent it.
- The public website sets no cookies and uses no analytics or advertising trackers.
- You can ask us to show, correct or delete your data at any time.
3. What we collect
Information you give us
When you send an enquiry from our quote page:
Full name, company name, phone number, and work email (optional)
City or site location, estimated jars per day, number of dispensers needed, and anything you write in the message box
Whether you sent it directly through the form or chose to send it on WhatsApp
If you call, email or WhatsApp us directly, we also receive your number or address and whatever you choose to tell us.
Information collected automatically
The date and time, a record that you accepted our consent notice (with the time and the version of the notice), your browser and device type (the “user agent”), and a pseudonymous visitor ID. This ID is a one-way scrambled code created from your IP address using a secret key, so we can spot repeated spam without storing your IP address with your enquiry.
Your IP address is held briefly in server memory to limit how many enquiries can be sent in an hour. It is not written to our database.
Like almost every website, our web server keeps standard access logs (IP address, page requested, date and time, browser) for security and troubleshooting. These are deleted automatically, normally within 14 days.
What we do not collect
We do not ask for payment details, government ID numbers or any sensitive personal data on this website, and we do not knowingly collect data about children.
4. Why we use it
We use your information only for these purposes:
- Responding to your enquiry: contacting you by phone, WhatsApp or email about it, preparing a quotation, and arranging a site visit, trial or supply.
- Managing enquiries internally: assigning your enquiry to a member of our sales team, recording notes and follow-up dates, and alerting our sales inbox when a new enquiry arrives.
- Keeping the website safe: blocking spam, abuse and attempts to break into the site.
- Meeting legal obligations: keeping records the law requires and responding to lawful requests from authorities.
We process this data on the basis of the consent you give by ticking the consent box in the pop-up that appears before your enquiry is sent, and, where the DPDP Act allows, for legitimate uses such as complying with the law. We will not use your details for unrelated marketing without asking you first.
5. How your enquiry reaches us
The enquiry form gives you two ways to send your details:
- Send Enquiry: your details go straight to our own secure server, where our sales team picks them up. Nothing is sent to any outside messaging service.
- Send it on WhatsApp instead: your enquiry is saved on our server in the same way, and also opens in WhatsApp as a pre-written message, which you then send from your own WhatsApp account. WhatsApp is run by Meta Platforms, and its own privacy policy applies to that message.
8. How we protect it
- The website uses encrypted connections (HTTPS).
- The admin area is hidden from everyone except approved office networks, and each staff member signs in with their own password, which we store only in scrambled (hashed) form.
- Repeated wrong passwords are blocked, and every sign-in and change is recorded in an activity log.
- The database is backed up every day, and each backup is kept for 14 days.
No system is perfectly secure. If a personal data breach occurs, we will inform the Data Protection Board of India and the people affected, as the law requires.
9. How long we keep it
Deleted 24 months after our last contact with you
For as long as we supply you, and afterwards only as long as accounting and tax laws require (usually 8 years for invoices and accounts)
Overwritten on a rolling 14-day cycle
Normally deleted within 14 days
If you ask us to delete your data, we will do so sooner unless the law requires us to keep it.
10. Your rights
Under the DPDP Act you can:
- Access: ask for a summary of the personal data we hold about you and how we use it.
- Correct or update: ask us to fix anything that is wrong or incomplete.
- Erase: ask us to delete your data once it is no longer needed for the purpose you gave it for.
- Withdraw consent: at any time, as easily as you gave it. This does not affect anything we did before you withdrew, but we may no longer be able to respond to your enquiry.
- Nominate: name another person to exercise these rights for you in the event of your death or incapacity.
- Complain: raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.
To use any of these rights, write to our Grievance Officer (below) from the phone number or email address you used with us, so we can confirm it is you. We reply within 30 days.
11. Grievance Officer
If you have a question or complaint about how we handle your personal data, contact:
Mr Vijaysinh Dubal
Saavy Agro Fresh Pvt. Ltd., S. No. 78, Pandhari Industrial Estate, Shivane, Pune 411023
We acknowledge complaints within 48 hours and resolve them within one month.
12. Children
Our services are for businesses and organisations, and this website is not meant for anyone under 18. If we learn that we have received a child’s personal data, we will delete it.
13. Changes to this policy
We may update this policy when our website or the law changes. The date at the top shows when it last changed, and we will highlight important changes on this page.
See also our Terms of Use.