Privacy Policy

Northern Crest Industries Pvt. Ltd., operating under the brand name Harvestlo (“Harvestlo”, “we”, “us” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit harvestlo.com, create an account, place an order, subscribe to marketing, leave a comment, contact us or otherwise interact with our services.

This Policy applies primarily to customers and visitors in India. We process personal data in accordance with applicable Indian law, including data-protection requirements as they are brought into force from time to time.

1. Who is responsible for your data

Data fiduciary / business: Northern Crest Industries Pvt. Ltd.
Brand: Harvestlo
Address: Central Market, Abi Guzar Bund, Srinagar, Jammu and Kashmir 190001, India
Privacy and grievance email: contact@harvestlo.com

2. Personal data we collect

The information we collect depends on how you use Harvestlo. It may include:

  • Contact information: name, email address, phone number, postal address and the contents of messages you send through our contact forms or support channels.
  • Account information: username, account preferences and authentication-related information. Passwords are stored in protected or hashed form; we do not have access to your plain-text password.
  • Order and delivery information: products ordered, quantities, billing and shipping addresses, delivery instructions, order status, returns, refunds and communications about an order.
  • Payment information: transaction ID, payment status, amount and limited payment-method details made available to us by our payment provider. Full card numbers, CVVs, UPI PINs and similar payment credentials are entered with and processed by Razorpay, not stored by Harvestlo.
  • Marketing information: your email address, subscription status, consent record, communication preferences and, where enabled, limited campaign delivery or engagement information.
  • Comments and reviews: the content you post, display name, email address, IP address, browser user-agent information and related moderation or anti-spam data. Approved comments or reviews and the name you choose may be publicly visible.
  • Device and technical information: IP address, browser type, device type, operating system, referring page, pages requested, date and time, security events, error logs and cookie identifiers.
  • Information from service providers: payment confirmations, delivery updates, email subscription events, fraud or security signals, and other information necessary to operate the website and fulfil your requests.

3. How we collect information

We collect information directly from you when you register, check out, contact us, subscribe, post a comment or review, or update your account. Some information is collected automatically through necessary cookies, server logs and security tools. We may also receive information from payment, email, hosting, delivery and other service providers used to complete your request.

4. How and why we use personal data

We use personal data only for identified and lawful purposes, including to:

  • create and administer customer accounts;
  • process orders, payments, shipping, delivery, returns and refunds;
  • send transactional messages such as order confirmations, delivery updates, security notices and password-reset emails;
  • respond to enquiries, support requests and complaints;
  • manage comments, reviews and community interactions;
  • send promotional emails only where you have chosen to receive them;
  • maintain shopping-cart, wishlist, login and website preferences;
  • protect customers and Harvestlo against fraud, misuse, spam, security threats and prohibited activity;
  • maintain, troubleshoot and improve the performance and reliability of our website;
  • comply with tax, accounting, consumer-protection, payment, legal and regulatory obligations; and
  • establish, exercise or defend legal claims.

Depending on the activity, we process personal data with your consent, to provide goods or services you request, to comply with law, or for other legitimate uses permitted by applicable law. Where processing is based on consent, you may withdraw that consent. Withdrawal does not affect processing already carried out lawfully and may not affect records that we must retain by law.

5. Orders and payments through Razorpay

Payments are processed through Razorpay. When you choose to pay, relevant billing, order, device and transaction information may be shared with Razorpay so it can process the payment, prevent fraud, comply with its regulatory obligations and provide us with confirmation. Payment information entered directly in Razorpay’s checkout is handled according to Razorpay’s own privacy practices. You can review the Razorpay Buyer Privacy Notice.

6. Newsletter and promotional emails

At checkout or registration, you may see an optional checkbox stating: “Yes, send me exclusive deals and discounts!” Selecting this box gives Harvestlo permission to send you promotional emails. It is not required to create an account or complete a purchase.

We use Brevo to manage email campaigns and subscription preferences. If you opt in, your email address, consent status and related campaign information may be processed by Brevo. Promotional emails will include an unsubscribe option. You may also withdraw marketing consent at any time by emailing contact@harvestlo.com. Opting out of promotions does not stop essential transactional emails about your account, orders, payments, deliveries, security or legal notices. Brevo’s handling of data is described in its Privacy Policy.

7. Cookies and similar technologies

Harvestlo uses cookies and similar local-storage technologies needed to operate an e-commerce website. These may include:

  • Strictly necessary cookies for security, checkout, payments, shopping cart, wishlist, account login and session management;
  • Preference cookies that remember choices such as account or display preferences;
  • Comment cookies that may remember your name, email address and website when you choose that convenience option; and
  • Performance, analytics or marketing cookies if we introduce these features in the future. Where required, we will provide appropriate notice and consent controls before using non-essential cookies.

You can block or delete cookies through your browser settings, but disabling necessary cookies may prevent the cart, checkout, login, wishlist or other website features from working correctly. We do not currently use dedicated third-party advertising pixels for behavioural advertising. If that changes materially, we will update this Policy and provide appropriate choices.

8. Comments, reviews and public content

When you submit a comment or review, we may collect the submitted form fields together with your IP address and browser user-agent information to help with moderation and spam detection. Approved content may remain publicly visible with your chosen name. Please do not include sensitive personal information in public comments or reviews. If the Gravatar service is enabled, an anonymised hash of your email address may be sent to Gravatar to determine whether you use that service; Gravatar is governed by Automattic’s Privacy Policy.

9. When we share personal data

We do not sell or rent personal data. We may disclose limited information when reasonably necessary to:

  • Payment providers, including Razorpay, to process transactions and prevent fraud;
  • Email service providers, including Brevo, to deliver transactional or consented promotional communications;
  • Delivery and logistics partners to ship orders, contact recipients and provide delivery updates;
  • Website hosting, software, security, spam-prevention, backup and technical providers that help operate and protect Harvestlo;
  • Professional advisers, including accountants, auditors, insurers and legal advisers, where necessary;
  • Government, regulatory, judicial or law-enforcement authorities when disclosure is required or permitted by law; or
  • A successor organisation in connection with a merger, restructuring, financing, sale or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements.

Service providers are permitted to process information only for the relevant service or as otherwise allowed by their own legal obligations. Some providers may process data outside Jammu and Kashmir or outside India. Where cross-border processing occurs, we use reasonable contractual, organisational and technical safeguards and comply with applicable transfer restrictions.

10. How long we retain data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, fraud-prevention, dispute-resolution and security requirements. In general:

  • account information is kept while your account remains active and for a reasonable period afterwards;
  • order, invoice, payment, return and refund records are kept for the periods required by tax, accounting, consumer and other applicable laws;
  • marketing information is kept until you unsubscribe or withdraw consent, subject to retaining a minimal suppression record so we do not contact you again;
  • contact and support messages are kept until the enquiry is resolved and for a reasonable follow-up period;
  • comments, reviews and related moderation records may be retained while the public content remains on the website; and
  • security, anti-fraud and technical logs are retained for a limited period appropriate to their purpose.

We may retain information for longer where necessary to comply with law, respond to a dispute, enforce agreements or protect the rights and safety of Harvestlo, our customers or others.

11. Security

We use reasonable administrative, technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, password protection, encryption in transit, backups, firewall and security monitoring, software updates and limiting service-provider access. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

12. Your choices and rights

Subject to applicable law and any valid exceptions, you may ask us to:

  • confirm whether we process your personal data and provide access to available information about that processing;
  • correct, complete or update inaccurate or incomplete personal data;
  • erase personal data that is no longer necessary or that we are not legally required to retain;
  • withdraw consent for consent-based processing;
  • stop promotional emails by using the unsubscribe link or contacting us;
  • close your customer account; or
  • raise a privacy grievance and receive information about available escalation channels.

You may update certain account information through your account page. For other requests, email contact@harvestlo.com using the subject line “Privacy Request”. We may need to verify your identity before acting on a request. We will respond within the period required by applicable law. Certain information may be withheld or retained where required for legal, security, fraud-prevention, payment, tax or record-keeping purposes.

13. Children’s privacy

Harvestlo is a general-audience shopping website and is not intended for anyone under 18 years of age to use independently. We do not knowingly seek to collect personal data from children. A parent or lawful guardian should place an order or create an account on behalf of a minor where appropriate. If you believe a child has provided personal data to us without valid parental or guardian involvement, contact contact@harvestlo.com so we can review and take appropriate action.

14. Third-party websites and embedded content

Our website may link to or embed content from third-party websites. Those services may collect information and use cookies under their own privacy policies. Harvestlo does not control their independent privacy practices, so we encourage you to review the relevant third-party notice before providing information.

15. Changes to this Privacy Policy

We may update this Policy when our practices, service providers, website features or legal obligations change. The revised version will be posted on this page. If a change materially affects how we use personal data, we will provide additional notice or seek renewed consent where required.

16. Contact and grievance handling

Questions, requests or complaints about this Privacy Policy or Harvestlo’s handling of personal data may be sent to:

Northern Crest Industries Pvt. Ltd. (Harvestlo)
Central Market, Abi Guzar Bund
Srinagar, Jammu and Kashmir 190001, India
Email: contact@harvestlo.com
Website: https://harvestlo.com/

Please include enough information for us to understand and respond to your request, but do not send passwords, CVVs, UPI PINs or other sensitive payment credentials by email.