1. Who is responsible for your data
Rizzco Collective Private Limited, trading as Nuteshwar, is responsible for personal data collected through this website and our customer-support channels.
Our registered address is 02, Chanakya Tower, Sandesh Press Road, Vastrapur, Ahmedabad, Gujarat 380015, India. Privacy and grievance requests may be sent to yesha@nuteshwar.com.
2. Data we collect
- Identity and contact data, including name, phone number, email address, and account details.
- Order data, including products, amounts, payment status, billing address, shipping address, delivery status, and order history.
- Find Your Swaad quiz questions, answers, and resulting preferences when that feature is used.
- Reviews and submissions, including name, rating, text, photographs, and videos.
- Support and complaint data, including messages, order numbers, issue details, batch information, and uploaded evidence.
- Marketing preferences and records of consent, withdrawal, unsubscribe actions, or STOP replies.
- Technical data, including device, browser, IP address, cookies, approximate country or region derived from IP, and website interaction and analytics events. If you allow browser location when the Butter Bar invite form opens, we also collect the browser-reported coordinates, accuracy, and normalized city or region needed to prefill and plan the invite list.
3. How we use data
- Create and manage accounts, carts, orders, payments, delivery, returns, refunds, and customer support.
- Authenticate customers and verify whether a reviewer purchased a product.
- Operate Find Your Swaad and provide requested product suggestions.
- Detect fraud, duplicate claims, promotion abuse, security incidents, and technical errors.
- Understand website performance and improve products, content, checkout, and customer experience.
- Send transactional order, payment, delivery, cart, support, safety, and recall communications.
- Send promotional email or WhatsApp messages only where separate, optional consent has been provided.
- Meet accounting, tax, food-safety, consumer-protection, security, and other legal obligations.
4. Services that process data
We disclose only the data reasonably needed for a service to operate. Current categories include Shopify for commerce and checkout; Razorpay and supported payment networks for payment processing; Google and Firebase for hosting, authentication, database, storage, and infrastructure; Google Analytics and Shopify Analytics for measurement; Zoho for business email and Resend for marketing email delivery; WhatsApp for messaging; and NimbusPost, courier partners, and delivery providers for shipping.
These providers process data under their own terms and security practices. IPWhois is used for approximate country or region enrichment, and OpenStreetMap's Nominatim service may resolve a location you explicitly share through the Butter Bar form. Some providers may process data outside your state or outside India where legally permitted and protected through appropriate contractual or technical safeguards.
We may also disclose information where required by law, to protect customers or food safety, to investigate fraud, or as part of a lawful corporate transaction. We do not sell personal data.
5. Payment information
Payment details are collected by the payment provider at checkout. Nuteshwar receives transaction status and reference information needed to confirm, reconcile, refund, or investigate a payment.
Nuteshwar does not store complete payment card numbers, card security codes, or UPI PINs.
6. Messages and marketing choices
We may send transactional messages needed to complete or support an order without treating them as marketing. This includes payment, order, shipping, delivery, cart, complaint, refund, product-safety, and recall updates.
Promotional email and WhatsApp messages are separate and optional. You can withdraw promotional consent using an unsubscribe link, replying STOP where supported, changing an available preference, or contacting support.
Withdrawing marketing consent does not stop essential transactional messages for an active order or legal and safety notices.
8. How long we retain data
Abandoned-cart contact data that does not become part of an order or continuing consent record is ordinarily retained for up to 60 days.
Account, order, payment, tax, complaint, refund, food-safety, fraud-prevention, and consent records may be retained longer where needed to provide the service, resolve a dispute, enforce a policy, maintain product traceability, or comply with law.
Review content may remain published until removed or no longer needed. Backups and security logs may persist for a limited period after deletion from active systems.
9. Security
We use reasonable administrative, technical, and organisational safeguards appropriate to the data and service. Access is limited to people and providers who need it for an authorised purpose.
No online system is risk-free. If a personal-data incident requires notice under applicable law, we will provide the required notice and response information.
10. Your choices and rights
Subject to applicable law and records we must retain, you may ask us to confirm how your data is processed, correct inaccurate or incomplete data, erase data, withdraw consent, or address a grievance.
We may need to verify your identity and clarify the request before acting. Withdrawing consent does not make earlier lawful processing invalid and may prevent us from providing a feature that requires that data.
Send requests to yesha@nuteshwar.com. The Grievance Officer is Yesha Padia, Chief Operation Officer. We aim to acknowledge grievances within 48 hours and resolve them within 7 business days where possible. If you remain dissatisfied, you may pursue the complaint through the Data Protection Board of India or another authority where applicable law permits.
11. Children
The website is not directed to children and orders may be placed only by adults. We do not knowingly ask children to create accounts, place orders, or submit reviews or marketing consent.
If you believe a child has provided personal data without appropriate authorisation, contact us so we can review and take the action required by law.
12. Policy updates
We may update this policy when our practices, providers, features, or legal obligations change. The latest version and update date will remain available on this page.
Where a material change requires notice or fresh consent, we will provide it through an appropriate channel before relying on the change.