Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit sikkimsupreme.co.in (the “Site”) or buy from us. It applies to everyone who uses the Site, whether you’re a retail customer, a visitor to Sikkim, or a hospitality or wholesale buyer. It should be read with our Terms & Conditions.

1. Who We Are

The Site is operated by the Government Fruit Preservation Factory (“GFPF”, “we”, “us”, “our”), a Public Sector Undertaking of the Government of Sikkim under the Department of Commerce & Industries. Sikkim Supreme is GFPF’s consumer brand.

For the purposes of the Digital Personal Data Protection Act, 2023, GFPF is the Data Fiduciary responsible for your personal data.

Address: Government Fruit Preservation Factory, NH-10, Topakhani, Singtam, East Sikkim – 737134, India
Email: [email protected]

2. What We Collect

2.1 Information you give us

• Account and order details: your name, email address, phone number, and billing and delivery addresses.
• Business details: your business name, GSTIN and billing entity, if you open a business account.
• Messages and forms: anything you send us through our contact form, the business enquiry form, product reviews or email.
• Delivery claims: photos or unboxing videos you send us to report a damaged, leaking or missing item.
• Newsletter: your email address, if you sign up.

2.2 Information collected automatically

• Device and browser information: your IP address, browser type, device type and operating system.
• Site activity: pages visited, time spent on the Site, products viewed and the page that referred you to us.
• Cookies: information collected through cookies and similar technologies (see Section 5).

2.3 Information from our partners

• Payment status from our payment gateway, Razorpay. This covers whether a payment succeeded or failed and a transaction reference. It never includes your full card or bank details.
• Delivery status from Shiprocket, its courier partners and India Post.

3. Why We Use Your Data

We use your personal data only for clear, specific purposes:

We do not sell your personal data. We do not share it with anyone for their own marketing.

4. Who We Share It With

We share personal data only when it is needed to run the Site and deliver your order:

• Razorpay, to process your payment securely.
• Shiprocket, its courier partners and India Post, who receive your name, phone number and delivery address so they can deliver your order.
• Service providers that host and secure the Site and send our emails and SMS messages, acting only on our instructions.
• Government, regulatory and audit authorities, where required by law. As a state-owned enterprise, our records may also be subject to government audit.

Everyone we share data with is required to use it only for the purpose we share it for and to keep it secure.

5. Cookies

Cookies are small files stored on your device. We use three kinds:

• Essential cookies keep the Site, your cart, login and checkout working. They cannot be switched off.
• Functional cookies remember your preferences, such as saved addresses.
• Analytics cookies help us understand how visitors use the Site, in aggregate.

We ask for your consent before setting functional or analytics cookies, and you can change your choice at any time. You can also block or delete cookies in your browser settings, but blocking essential cookies may stop checkout from working.

6. Payment Security

All payments are processed by Razorpay, which follows the Payment Card Industry Data Security Standard (PCI DSS). We never see or store your full card number, CVV, UPI PIN or net banking password.

We keep transaction records, such as order value, date, items and payment reference, for accounting, tax and customer service purposes.

7. Business Accounts

If you open a business account, we also keep your GSTIN and business details. We use them only for GST invoicing, order history, repeat and standing orders, and correspondence about your account. They are protected in the same way as all other account data.

8. How Long We Keep Your Data

• Account data is kept while your account is active. If you ask us to delete your account, we erase your personal data unless we are legally required to keep it.
• Order and invoice records are kept for as long as GST, tax and accounting laws require, even after your account is closed.
• Newsletter data is kept until you unsubscribe.
• Enquiries, complaints and delivery claims are kept for as long as needed to resolve them, and afterwards only as long as the law requires.

When data is no longer needed, we delete it or anonymise it securely.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and how we use it.
• Correct or update inaccurate or incomplete data.
• Erase your data, subject to our legal retention obligations.
• Withdraw consent at any time, for newsletters or non-essential cookies for example. Withdrawing consent does not affect anything we did before you withdrew it.
• Nominate another person to exercise your rights if you die or become unable to act.
• Raise a grievance with us and receive a response (see Section 13).

To exercise any of these rights, email [email protected] from the email address linked to your account. We may need to verify your identity before acting on your request. Every newsletter also includes a one-click unsubscribe link.

10. How We Protect Your Data

We use reasonable security measures to protect your data, including:

• encrypted (HTTPS) connections across the Site;
• secure hosting;
• restricted, password-protected access to administrative systems; and
• payment processing handled entirely by Razorpay.

No system is completely secure, but we work to prevent unauthorised access, loss or misuse.

If a data breach affects your personal data, we will notify you and the Data Protection Board of India as the law requires.

11. Children

The Site is intended for adults. Accounts must be created and orders placed by people aged 18 or over. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or legal guardian.

If you believe a child has given us personal data, email [email protected] and we will delete it.

12. Where Your Data Is Stored

We are based in India, and your data is primarily processed and stored in India. Some of our service providers may process data outside India. Where they do, we require them to protect it to the standards set out in this policy and in Indian law.

13. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, we have appointed a Grievance Officer to handle concerns about your personal data.

Grievance Officer: Lhap T Dukpa
Email: [email protected]
Address: Government Fruit Preservation Factory, NH-10, Topakhani, Singtam, East Sikkim – 737134

We will acknowledge your complaint within 48 hours and aim to resolve it within one month. If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or in the law. The “Last updated” date at the top shows the latest version. If a change significantly affects how we use your data, we will notify you by email or through a notice on the Site.

15. Contact Us

For any question about this Privacy Policy or your personal data, email [email protected] or write to Government Fruit Preservation Factory, NH-10, Topakhani, Singtam, East Sikkim – 737134.