1. Data Fiduciary Identity & Statutory Scope
Under the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for determining the purposes and means of processing personal data through this website is:
Scope of this Notice: This policy applies to digital personal data collected directly from individuals (“Data Principals”) who browse our poultry product catalogue, submit contact or product enquiry requests, or subscribe to farm updates through this website.
2. Personal Data Collected & Requirement Status
In compliance with the principle of Data Minimization under the DPDPA, we only collect digital personal data that is strictly necessary to fulfill your catalogue enquiry or quotation request. Below is the complete, itemized breakdown of personal data collected through our verified website forms:
| Data Field | Status | Technical Validation | Operational Purpose |
|---|---|---|---|
| Full Name / Farm Name | Required | Trimmed, min 2 characters | Personalized identification and respectful communication for poultry quotations. |
| Telephone / Mobile Number | Required | 10 to 15 digits | Direct telephone call or WhatsApp communication regarding live chick availability, hatch dates, vaccination, and delivery feasibility. |
| Email Address | Optional | Standard email regex validation | Transmission of formal written price estimates, pro-forma invoices, breed specification sheets, or farm newsletter updates. |
| Product & Category Requirement | Contextual | Matched to verified catalogue item | Identifies the specific breed, equipment, or feed requested (e.g., Kadaknath day-old chicks, incubators). |
| Requirement Message / Quantity | Required | Trimmed, min 5 characters | Understanding batch size, brooding questions, delivery pincode, or technical consultation requirements. |
3. Specified Purposes of Processing (Notice under Section 5 DPDPA)
In accordance with Section 5 of the DPDPA, 2023, personal data provided by you is processed exclusively for the following specified, legitimate business purposes:
- Responding to Catalogue Enquiries: Reviewing and responding to your enquiries submitted through our website modals, contact desk, or product showcase pages.
- Custom Price Estimations & Quotations: Generating bespoke quotation estimates based on batch volume, delivery destination, and biological seasonality.
- Hatchery Schedule & Stock Coordination: Informing you regarding upcoming hatch dates, vaccine verification, and bio-secure transit logistics.
- Customer Relationship & Technical Guidance: Assisting poultry farmers with pre-booking queries, brooding management guidance, and equipment specifications.
4. Lawful Basis & Consent Mechanism
Under Section 4 and Section 6 of the DPDPA, processing of personal data is carried out on the basis of:
- Consent: When you voluntarily submit an enquiry form or message on our website, you provide free, specific, informed, unconditional, and unambiguous consent for us to contact you regarding your requested poultry products.
- Legitimate Uses (Section 7 DPDPA): Where you have voluntarily provided your personal data to PPF Group for a specific purpose (such as requesting a quotation or delivery estimate) and have not indicated that you do not consent to the use of your personal data for that specific purpose.
- Right to Withdraw Consent: You have the right to withdraw your consent at any time by contacting our Privacy Desk. Upon receipt of your withdrawal, we will cease processing your personal data for enquiry communication, unless retention is required by applicable law.
5. Storage, Hosting & Security Safeguards
In accordance with Section 8(5) of the DPDPA, we take reasonable security safeguards to prevent personal data breaches:
All communications between your browser and our web application are encrypted using Transport Layer Security (TLS/HTTPS).
Enquiry records are stored in a managed MongoDB database cluster. Connection secrets are maintained strictly in server-side environment configurations.
Administrative access to enquiry records requires cryptographically signed HMAC-SHA256 session tokens with 24-hour expiration and edge middleware guards.
Enquiry submissions are protected by server-side input validation and a 15-second deduplication lock preventing automated bot spam.
6. Data Sharing, Processors & Non-Disclosure
We do not sell, rent, commercialize, or trade customer personal data with advertising networks, third-party data brokers, or marketing syndicates.
Under Section 8(2) of the DPDPA, we may engage verified Data Processors only under valid agreements to support our technical infrastructure:
- Cloud Hosting & Database Infrastructure: Vercel (application hosting) and MongoDB Atlas (database storage).
- Logistics & Transport Carriers: Designated regional live poultry dispatchers or transport providers solely to fulfill delivery of finalized livestock orders.
- Statutory & Law Enforcement Compliance: When strictly mandated under applicable Indian statutory law, court orders, or governmental directives.
7. Data Retention & Secure Deletion
In compliance with Section 8(7) of the DPDPA, personal data is retained only for as long as is reasonably necessary to fulfill the specified purpose for which it was collected (e.g. processing your quotation, coordinating upcoming hatch dates, or answering agricultural enquiries), or to comply with statutory legal requirements.
Once an enquiry is concluded, inactive, or upon receipt of a valid erasure request from the Data Principal, records are periodically reviewed, securely archived, or permanently deleted from our database.
8. Rights of Data Principals under DPDPA
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you are entitled to exercise the following statutory rights regarding your personal data:
Right to Access Information (Sec. 11)
You may request a summary of the personal data currently processed by us, along with details of processing activities and identities of any Data Processors involved.
Right to Correction & Erasure (Sec. 12)
You have the right to request correction of inaccurate data, completion of incomplete information, or deletion/erasure of personal data no longer necessary for the specified purpose.
Right of Grievance Redressal (Sec. 13)
You have the right to readily available grievance redressal through our designated Grievance Officer regarding any act or omission by us regarding your data rights.
Right to Nominate (Sec. 14)
You have the right to nominate any other individual who shall, in the event of death or incapacity, exercise your data rights in accordance with the DPDPA Rules.
How to Exercise Your Rights: Submit your request via email to ppfgroupofcompanies@gmail.com with the subject line “DPDPA Rights Request - [Your Name]”. We will verify your identity (via confirmation from your submitted phone/email) and respond within statutory timeframes.
9. Processing of Children's Personal Data (Section 9 DPDPA)
In compliance with Section 9 of the DPDPA, 2023:
- Our website is an agricultural catalogue and trade showcase intended strictly for commercial farmers, hatchery operators, and adults (individuals who have completed 18 years of age).
- We do not knowingly collect, solicit, or process personal data of children (individuals under 18 years of age) without verifiable consent from their parent or lawful guardian.
- We do not engage in tracking, behavioral monitoring, or targeted advertising directed at children.
- If we become aware that personal data of a child has been submitted without verifiable parental consent, we will take immediate steps to delete such data from our records.
10. Grievance Redressal Mechanism & Officer
In accordance with Section 12 of the DPDPA and the Digital Personal Data Protection Rules, 2025, any Data Principal who has a grievance regarding personal data processing may contact our designated Grievance Desk:
11. Updates to this Policy & Compliance Review
We reserve the right to update this Privacy Policy from time to time as statutory notifications under the DPDPA, 2023 and the DPDPA Rules, 2025 are issued by the Central Government, or to reflect changes in our operational enquiry practices. The “Last Updated” date at the top of this document indicates the effective date of the current version.