Poovundo
Chat on WhatsApp
AboutPrivacyTermsContact

Privacy Policy

Last updated: 31 July 2026

This policy explains what personal data Poovundo collects, why we use it, who we share it with, and the rights you have over it. It sits alongside our Terms & Conditions.

1. Who we are

Poovundo is a seasonal flower-delivery service in Kochi, Kerala, India, operated by Muhammed Irshad A J. For anything about your data, contact us at poovundo@gmail.com. Under India's Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal data described here.

2. What we collect

  • Account details: your name, email, WhatsApp number (which is your account identity), and occupation.
  • Consent: your opt-in to receive order updates on WhatsApp.
  • Order details: the flowers and quantities you request, your delivery date and time window, and — once your order is confirmed on the callback — your delivery location.
  • Payment references: the UPI transaction reference (UTR) and/or a payment screenshot for your advance and balance, kept as proof of the transfer. We do not collect or store card or bank-login details, because there is no online payment gateway.
  • Technical: a login session cookie that keeps you signed in for about seven days, plus basic server logs.

3. Why we use it

  • To process, confirm, and deliver your order.
  • To send you one-time login codes and the order updates you opted into, over WhatsApp.
  • To reconcile payments using the UTR or proof you provide.
  • To understand demand across the season — for example which occupation segments order most — so we can plan sourcing.
  • To keep basic business and tax records, and to prevent misuse.

4. Our basis for using it

We process your data with your consent and to provide the service you asked for. You can withdraw consent — for example to WhatsApp updates — at any time (see “Your rights” below); doing so does not affect an order already in progress.

5. Cookies and analytics

We use a single essential cookie to keep you logged in. We do not use advertising cookies, and we never sell your data.

On our public pages we also offer Google Analytics, which helps us see how many people visit and which pages are useful. It is entirely optional and off until you accept it. If you have not accepted, nothing is loaded and no request is made to Google at all.

If you do accept:

  • Google sets cookies beginning _ga to recognise a repeat visit, and receives your IP address (truncated), the pages you viewed, and general details like your device and browser.
  • We have turned off Google Signals, ad personalisation, and ad storage, so your visit is not used to build advertising audiences.
  • Analytics runs only on our public pages. It is never loaded once you are signed in, so your orders, delivery address, and WhatsApp number are never sent to Google.

You can change your mind at any time using the “Withdraw analytics consent” link at the bottom of any public page. Withdrawing stops the tracking immediately and deletes the _ga cookies already set.

6. WhatsApp messaging

Login codes and order updates are sent through WhatsApp, operated by Meta. Your use of WhatsApp is also governed by Meta's own privacy terms, which we do not control.

7. Who we share it with

We do not sell your data or share it for advertising. We share the minimum needed to run your order:

  • Delivery agents — your name, delivery location, contact, and order, so they can deliver to you.
  • Our flower vendor — aggregate quantities for sourcing, without your identity where it can be avoided.
  • UPI apps and hosting/service providers — to take payment and run the service.

8. Where it is stored

Your data is stored on our servers hosted in India (Google Cloud, Mumbai region).

9. How long we keep it

We keep your data while your account is active and for as long as we need it for your order, our business records, and legal or tax obligations. After that we delete or anonymise it.

10. Your rights

Under the DPDP Act you can ask us to give you a summary of the data we hold about you, correct or update it, delete it, or withdraw your consent. You can also raise a grievance. To exercise any of these, email us at poovundo@gmail.com and we will respond within a reasonable time.

11. Security

We take reasonable technical and organisational measures to protect your data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

12. Children

Poovundo is not directed at children under 18, and we do not knowingly collect their data.

13. Changes to this policy

We may update this policy from time to time. When we do, we change the “last updated” date above.

14. Grievances & contact

For any privacy question or grievance, contact Muhammed Irshad A J at poovundo@gmail.com, or use the Contact page.