Privacy Policy & Data Protection

1. Who We Are & Contact

DIMITTI operates this website for DIMITTI Luxury Herbal Clay Bar. This policy explains how we handle information when you browse the site, send a delivery request or contact us.

For privacy questions, access, corrections, deletion or complaints, email contact.dimitti@gmail.com with the subject “Privacy request”.

2. Information We Collect

• Delivery details: Your name, Indian mobile number, delivery address, city, PIN code and selected pack. Email is optional.
• Request records: A request reference, submission and update times, request status, duplicate submissions, notification delivery status and, where provided for dispatch, courier and tracking details.
• Support communications: Details you send us by email, call or message.
• Security information: The server uses your IP address and mobile number for rate limiting. Rate-limit identifiers in the application database are stored as keyed hashes. Hosting providers may also process connection information and access logs.

3. Why We Use Your Information

We use your details to receive and verify your request, check availability and delivery serviceability, confirm prices and payment arrangements, coordinate dispatch, send request or tracking updates, and answer your questions. We also use request records to prevent duplicate submissions, spam and misuse.

By sending a delivery request, you ask us to use the submitted details for these purposes and contact you about that request. Optional feedback is voluntary. We do not use delivery requests to enrol you in advertising campaigns.

This website does not collect online payments, card details, bank credentials or UPI PINs. Do not send passwords or payment credentials in the form or by email.

4. Service Providers & Sharing

We do not sell or rent your personal information to advertisers or data brokers. Authorized DIMITTI staff use your details to manage requests and support.

• Email and staff alerts: When configured, request details including name, phone, email, address and selected pack are sent through Google Gmail and Telegram to configured DIMITTI recipients. Optional customer confirmations and dispatch emails are sent through Gmail.
• Hosting and delivery: Our hosting provider processes website traffic and stores application data. Delivery providers receive the contact and address details needed to fulfil an agreed dispatch.
• Fonts: Pages load fonts from Google Fonts. Your browser connects to Google servers, which receive connection information such as your IP address and browser information.
• Legal requests: Information may be disclosed where required by applicable law.

Providers may process information outside India under their own terms and privacy policies. See Google’s Privacy Policy and Telegram’s Privacy Policy.

5. Storage, Security & Retention

Request details are stored in our application database with restricted file permissions. Admin access requires authentication. Use the HTTPS version of this website to protect information in transit. No storage or transmission method can guarantee absolute security.

The application removes completed, spam and archived requests after 30 days without an update. Other requests are removed after 180 days without an update. Cleanup runs when the application starts and during its regular background processing, independently of whether notifications succeeded.

This cleanup removes request details, associated duplicate-request links, Telegram delivery records and request audit entries from the active application database. It does not automatically erase copies already sent by email or Telegram, hosting logs, backups or details held by a delivery provider. Those copies require separate handling and may be retained where needed for an outstanding issue or applicable legal obligation.

6. Cookies & Browser Storage

The application does not use advertising or profiling cookies. Admin sign-in uses an essential session cookie. If you select “Remember my details on this device”, your contact and address details are saved in your browser after a successful request. This is optional and is unchecked for a new visitor.

Remembered details remain until you uncheck that option or clear the browser’s site data. Avoid saving them on a shared device. Deleting a server record does not clear a copy saved in your browser.

7. Access, Correction, Withdrawal & Deletion

Email contact.dimitti@gmail.com to request a copy of your information, correct it, withdraw permission for further request-related contact, ask for deletion or raise a privacy complaint. Include your request reference where available. We may ask for limited information to verify that the request is yours; do not send identity documents unless we explain why they are needed.

We review verified requests and explain any information that must be retained for an unresolved issue or legal obligation. Withdrawal may prevent us from fulfilling a pending request. Deletion from the active database does not recall messages already delivered or erase external copies automatically; we handle copies under our control separately and explain any limits.

8. Updates

We will publish policy changes here with an updated date. See our Terms of Service for delivery requests and product use.