1. Who we are and what this policy covers
Shuddham Milk Products Pvt. Ltd. (“Shuddham”, “we”) decides how your personal data is used, and is responsible for it under India’s Digital Personal Data Protection Act, 2023. We are a dairy processor in Madhya Pradesh and sell under our own brand, Indifresh.
- Registered office: R-52, S-03, Shivlok Apartments, MP Nagar, Zone-2, Bhopal – 462011, Madhya Pradesh
- GSTIN: 23ABLCS5355H1Z5 · FSSAI licence: 11426200000061
- Phone: +91 97552 50378 · Email: info@shuddhamdairy.com
This policy covers:
| Service | Used by |
|---|---|
| Website | Anyone visiting or sending an enquiry |
| Ordering portal | Our business customers (shops, hotels, distributors) |
| Milk portal and the Shuddham Android app | Farmers, collection-centre operators, field officers (MPIs), security staff |
The ordering portal, milk portal and Android app are by invitation only: we give each customer and farmer their own link. The Android app opens the milk portal inside the phone; it collects nothing the portal does not. It does not cover other companies’ websites we link to.
2. What we collect
We collect only what each service needs to work. Most of it you give us; some is recorded as you use the service.
| Who you are | What we collect |
|---|---|
| Website visitor | What you type into the enquiry form: name, business name, phone number, districts, products you need, your message. |
| Business customer (ordering portal) | Business and contact name, mobile number, delivery locations, orders and their history, invoices, payments and amounts outstanding, language preference, login records, and a notification token if you allow notifications. |
| Farmer (milk portal and app) | Name, farmer code, mobile number, village and collection centre, milk quantity and quality (fat, SNF) per shift, rates, payments and passbook balance, language and notification preferences. |
| Collection-centre operator or field officer (MPI) | Name, mobile number, the centres you are assigned to, your password (stored only in scrambled form), photographs of shift sheets, receipts and payment registers you upload, and a record of what you entered or changed. |
| Security staff | Name, mobile number, plant and duty schedule, leave records, and at each checkpoint: a live front-camera photo, a photo of your surroundings, and your phone’s GPS location and its accuracy at that moment. |
| Everyone using a portal or the app | Technical data: IP address, device and browser type, app version, login times and failed attempts, and error reports, which can include a screenshot of the page if you send a problem report. |
Photographs of shift sheets can show the names, codes and milk figures of the farmers on that sheet. We read them only to record those farmers’ milk and payments.
3. Why we use it, and on what basis
We use your data to run our dairy business with you, and for nothing unrelated to that.
| Purpose | Whose data | Legal basis under the DPDP Act |
|---|---|---|
| Logging you in and sending one-time passwords | All portal users | You use the service for this purpose (s. 7(a)) |
| Taking, accepting, delivering and invoicing orders; tracking payments due | Business customers | You gave the data for this purpose (s. 7(a)) |
| Recording milk collected, its quality and rates, and calculating and paying what you are owed | Farmers, operators, MPIs | You gave the data for this purpose (s. 7(a)) |
| Reading uploaded sheet photos automatically, then checking them | Farmers, operators | Same; a person reviews any reading that fails our checks |
| Security-staff attendance and checkpoint verification | Security staff | Employment purposes (s. 7(i)) |
| Keeping tax, GST, food-safety and company records | All | Required by tax, company and food-safety law, which the Act lets us follow (s. 8(7)) |
| Replying to website enquiries | Website visitors | Your consent, given by sending the form |
| Order reminders and app notifications | Those who switch them on | Your consent; switch it off in the app at any time |
| Finding and fixing faults, and preventing misuse | All | Use for the service you asked for (s. 7(a)) |
We do not sell your data. We do not use it for advertising, and we do not build profiles of you for anyone else.
4. Permissions the app and portals ask for
Each permission is asked for only when a feature needs it, and you can refuse it or turn it off later in your phone’s settings.
| Permission | Why we ask | If you refuse |
|---|---|---|
| Notifications | Order reminders, payment and milk-entry alerts, notices from us | The service works; you will not get alerts |
| Camera | Photographing shift sheets, receipts and registers; security-staff checkpoint photos | You cannot upload those photos from that phone |
| Location (precise, only while the checkpoint screen is open) | Confirming a security guard is at the plant when checking in | Checkpoint check-in will not work |
| Photos and files | Choosing an existing photo to upload instead of taking a new one | Use the camera instead |
The app never tracks your location in the background, and never reads your contacts, messages or call history.
5. Who we share it with
We share your data only with companies that run parts of our service for us, and only what each needs. They act on our instructions and may not use it for themselves.
| Provider | What they do for us | Where |
|---|---|---|
| Google Cloud | Hosts our servers, database, file storage and backups | Mumbai, India (backups may be stored in more than one Google region) |
| Google Vertex AI (Gemini) | Reads uploaded sheet and receipt photos into figures | Google Cloud |
| Google Firebase Cloud Messaging | Delivers notifications to your phone | Google Cloud |
| MSG91 | Sends one-time passwords and SMS alerts | India |
| Google Workspace (Gmail) | Our email | Google Cloud |
| Netlify | Hosts the website and receives enquiry-form messages | United States |
We may also disclose data:
- to government, tax or food-safety authorities, courts or police when the law requires it;
- to a buyer or successor if our business, or part of it, is sold or merged, under this same policy.
Within Shuddham, staff see only what their role needs. For example, a collection-centre operator sees only their own centre’s farmers. Some providers process data outside India, which the DPDP Act permits except to countries the Government restricts.
6. How we protect it and how long we keep it
We use reasonable security safeguards, including encrypted connections and role-based access, to protect your data. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
We keep data only as long as we need it for the purpose it was collected for, or as long as tax, company, food-safety and other laws require. After that we delete it or remove what identifies you.
7. Your rights and how to use them
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and who we have shared it with;
- correct or complete anything wrong;
- delete your data, except what the law requires us to keep (section 6 above);
- withdraw any consent you gave — this does not undo what we did before;
- name another person to act for you if you die or become unable to.
How to ask. Email or call the Grievance Officer below, or tell your collection centre or our office. To delete your account and data, write “Delete my account” with your registered mobile number. We will confirm who you are before acting, reply within 30 days, and tell you what we deleted and what the law makes us keep. If you are not satisfied, you can complain to the Data Protection Board of India.
Grievance Officer: Achal Gupta, Director · info@shuddhamdairy.com · +91 97552 50378
Shuddham Milk Products Pvt. Ltd., R-52, S-03, Shivlok Apartments, MP Nagar, Zone-2, Bhopal – 462011
Children. Our services are for adults running a farm or business, or working for us. We do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.
Changes to this policy. We will post any change here with a new “Last updated” date, and tell portal and app users in the app before a significant change takes effect.