Privacy Policy

Last updated: April 2026

ThermDry ("we", "us", "our") is a manufacturer and exporter of dehydrated food powders and beverages, operating the website thermdry.in ("the Website"). This Privacy Policy explains what personal data we collect when you visit the Website or submit an inquiry, how we use it, and what rights you have under India's Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000 (IT Act).

By using this Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use the Website or submit any inquiry form.

1. Information We Collect

We collect personal data only when you voluntarily provide it through the inquiry form on our Contact page. We do not collect personal data through passive browsing of this Website.

1.1 Information you provide directly

When you submit an inquiry form, we collect:

• Full name
• Business email address
• Phone number (optional)
• Company name and country
• Your inquiry message

1.2 Information collected automatically

We use Umami Analytics to understand how visitors use our Website. Umami is a privacy-first analytics platform that does not use cookies, does not collect personally identifiable information, and does not track users across websites. It collects only aggregated, anonymous data such as page views, referrer source, and browser type. No personal data is collected or stored through our analytics.

We do not use advertising cookies, remarketing pixels, third-party tracking scripts, or any technology that identifies individual users through passive browsing.

2. How We Use Your Information

We process your personal data for the following specific purposes:

• Responding to your inquiry — to understand your requirements and provide you with relevant product information, pricing, or export documentation.
• Business communication — to follow up on your inquiry, send samples (if requested), or share catalogue updates that are directly relevant to your stated interest.
• Compliance with legal obligations — to retain records as required by applicable Indian law, including GST, customs, and export regulations.

We do not use your personal data for unsolicited marketing, do not sell or rent your data to any third party, and do not use automated decision-making or profiling based on your data.

3. Cookies and Tracking

This Website does not use cookies. We do not set any first-party or third-party cookies on your browser. Our analytics tool (Umami) is specifically chosen because it operates without cookies and without collecting personal data.

Because we use no cookies, no cookie consent banner is shown on this Website. If we ever add functionality that requires cookies, we will update this policy and implement a consent mechanism before doing so.

4. Data Sharing and Disclosure

We do not sell, trade, or transfer your personal data to outside parties. Limited sharing may occur in the following circumstances only:

• Service providers — We use Web3Forms to route inquiry form submissions to our email inbox. Web3Forms processes your form data solely to deliver it to us and does not retain or use it for any other purpose. Web3Forms is subject to its own privacy policy.
• Legal requirements — We may disclose your personal data if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our legal rights or to prevent fraud or harm.
• Business transfers — In the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction. We will notify you via a prominent notice on this Website before your data becomes subject to a different privacy policy.

5. Data Retention

We retain personal data collected through inquiry forms for a maximum of 24 months from the date of your inquiry, or until the commercial relationship arising from that inquiry is concluded — whichever is earlier. Data associated with active business relationships (purchase orders, export transactions) may be retained for up to 7 years as required by Indian accounting and tax law.

After the applicable retention period, we will delete or anonymise your personal data. If you request erasure before the retention period ends, we will comply unless retention is required by law (see Section 6 — Your Rights).

6. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act 2023, you have the following rights regarding personal data we hold about you:

6.1 Right to access information

You may request a summary of the personal data we hold about you, the purposes for which it is being processed, and the identities of any Data Fiduciaries and Data Processors with whom it has been shared. We will respond within 30 days of a verified request.

6.2 Right to correction and erasure

You may request correction of inaccurate or incomplete personal data and erasure of personal data that is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no legal basis for continued processing exists. We will complete erasure or correction within 30 days of a verified request, subject to any legal retention obligations.

6.3 Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact us at the address in Section 9 below.

6.4 Right to nominate

You may nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity. Please contact our Grievance Officer to register a nominee.

6.5 Right to grievance redressal

You have the right to have your grievances addressed expeditiously. If you believe your rights under the DPDP Act have been infringed, contact our Grievance Officer (see Section 8). If you are not satisfied with our response, you may approach the Data Protection Board of India once it is established and operational.

7. Data Breach Notification

In the event of a personal data breach that is likely to result in harm to any affected Data Principal, we will notify the Data Protection Board of India and all affected Data Principals in accordance with Section 8(6) of the DPDP Act 2023 and within the timelines prescribed by the Board. Notifications will be sent to the email address provided at the time of inquiry.

8. Grievance Officer

In accordance with the Information Technology Act 2000 and the DPDP Act 2023, we have designated a Grievance Officer to address complaints and queries relating to the processing of your personal data. You may contact our Grievance Officer at:

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Website after a policy update constitutes acceptance of the revised policy.

10. Contact for Privacy Queries

For any questions about this Privacy Policy or about how we handle your personal data, please contact us:

• Email: privacy@thermdry.in
• Address: ThermDry and Minerals LLP, 22, 37, Ranchhod Park B/s, Ganesh Park, Opp Mahadev, Isanpur, Ahmedabad, Gujarat 382443, India