Effective Date: 10th March 2025
Last Updated: 10th April 2026
1. Who We Are
Aqua Matsya (“Aqua Matsya,” “we,” “our,” or “us”) is operated by 21V Agritech Pvt. Ltd., an Indian company. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit aquamatsya.com, create an account, place an order, contact us, subscribe to our communications, or otherwise interact with our website, products, and services.
Controller / Business Contact
21V Agritech Pvt. Ltd.
Cherry Hills, Embassy Golf Links Business Park, Challaghatta, Bangalore – 560071
Email: [email protected]
For privacy-related requests, please contact us at the email address above.
2. Scope of This Policy
This Privacy Policy applies to personal data collected through:
- our website and online store;
- account creation and checkout;
- customer support and other communications;
- newsletter and promotional sign-ups;
- reviews, testimonials, survey responses, and user submissions;
- cookies, analytics, and similar technologies used on our website.
It does not apply to third-party websites, payment pages, or services that we do not control, even if they are linked from our website.
3. The Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Identity and contact information
Name, billing address, shipping address, email address, phone number, account details, and similar identifiers.
Order and transaction information
Products purchased, order history, shipping details, payment status, refund and return details, and related customer service records.
Payment information
Payment details required to complete a transaction may be processed by our payment partners. We typically do not store full payment card numbers or security codes ourselves.
Account and profile information
Login details, saved preferences, wishlist items, cart activity, and account settings.
Communications and submissions
Messages you send us, support requests, reviews, testimonials, photographs, comments, and any other content you choose to provide.
Technical and usage information
IP address, browser type, device information, referral URLs, pages viewed, session activity, approximate location derived from IP, and similar website usage data.
Marketing and preference information
Your subscription status, communication preferences, and interactions with our emails or promotions.
4. Sources of Personal Data
We collect personal data:
- directly from you, when you place an order, create an account, fill out a form, subscribe, or contact us;
- automatically, through cookies, server logs, analytics tools, and similar technologies when you browse our website;
- from service providers and partners, such as payment processors, shipping partners, fraud-prevention providers, analytics providers, or email delivery tools, where relevant to our services.
5. How We Use Personal Data
We use personal data for the following purposes:
- to create and manage your account;
- to process payments, fulfil orders, arrange shipping, and manage returns or refunds;
- to communicate with you about orders, service messages, and customer support matters;
- to improve our website, products, content, and customer experience;
- to detect, prevent, and investigate fraud, abuse, security incidents, or unlawful activity;
- to send marketing communications where permitted by law and in line with your preferences;
- to publish reviews, testimonials, or community submissions where you have chosen to provide them and, where required, consented to such use;
- to comply with legal, tax, accounting, recordkeeping, and regulatory obligations;
- to establish, exercise, or defend legal claims.
6. Lawful Bases for Processing
Where data protection laws require a lawful basis, we generally rely on one or more of the following:
- Performance of a contract — for account creation, order processing, payment handling, shipping, returns, and core customer service.
- Legitimate interests — for website administration, fraud prevention, service improvement, analytics, operational security, and business continuity, provided those interests are not overridden by your rights.
- Consent — for non-essential cookies, certain marketing communications, and specific uses where consent is required.
- Legal obligation — where we must retain or disclose information to comply with applicable law, taxation, accounting, regulatory requests, or lawful process.
Where we rely on consent, you may withdraw it at any time. Withdrawal will not affect processing already carried out lawfully before the withdrawal.
7. Cookies and Similar Technologies
We use cookies and similar technologies to operate the website, remember preferences, measure performance, understand usage, and, where applicable, support marketing or social media features.
These technologies may include:
- strictly necessary cookies, required for site operation, cart functionality, checkout, fraud prevention, and security;
- analytics or performance cookies, used to understand website traffic and improve performance;
- preference cookies, used to remember settings and enhance your browsing experience;
- marketing or advertising cookies, if used, to measure campaigns or support remarketing and related activities.
Where required by law, we request consent before placing non-essential cookies or similar technologies on your device. You may manage your preferences through our cookie banner or your browser settings. Disabling certain cookies may affect site functionality.
8. Marketing Communications
If you subscribe to our newsletter or otherwise opt in to marketing, we may send you updates about products, launches, educational content, and brand communications.
You may unsubscribe at any time by:
- clicking the unsubscribe link in any marketing email; or
- contacting us at [email protected].
We may still send non-marketing service messages, such as order confirmations, shipping updates, or important account notices.
9. How We Share Personal Data
We may disclose personal data to the following categories of recipients where reasonably necessary:
- payment processors and payment service providers;
- website hosting, ecommerce, and technical infrastructure providers;
- shipping, courier, and fulfilment partners;
- analytics, email delivery, marketing, and communications providers;
- fraud prevention, security, and risk management providers;
- customer support tools and operational service providers;
- legal, financial, tax, insurance, or professional advisers;
- regulatory authorities, courts, law enforcement, or government bodies where required by law;
- a buyer, investor, successor, or transaction counterparty in connection with a merger, acquisition, restructuring, or asset transfer.
We do not sell your personal data.
We do not share personal data for cross-context behavioural advertising.
If either of those statements is not accurate for your actual analytics, advertising, or remarketing setup, they must be revised before publication.
10. International Data Transfers
Some of our service providers may process or store personal data outside your state, province, or country of residence. When we transfer personal data across borders, we take steps designed to ensure an appropriate level of protection under applicable law.
Depending on the jurisdictions involved, those steps may include:
- using service providers in countries recognised as providing adequate protection;
- contractual safeguards such as standard contractual clauses;
- technical, organisational, and security measures appropriate to the risks involved; and
- any additional steps required under applicable law.
11. Data Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfil orders, provide services, maintain records, resolve disputes, enforce agreements, and comply with legal, tax, accounting, or regulatory obligations.
In practice, retention may vary depending on the type of data, for example:
- account data — for as long as your account remains active and for a reasonable period thereafter;
- transaction and order records — for as long as required for commercial, accounting, tax, warranty, and legal compliance purposes;
- marketing data — until you unsubscribe or withdraw consent, after which we may retain minimal suppression information to honour your preferences;
- support communications — for as long as reasonably necessary to manage the relationship, quality control, and dispute resolution;
- analytics and cookie data — according to the settings and retention periods of the relevant tools and lawful basis used.
Where we no longer need personal data, we delete it, anonymise it, or securely isolate it unless continued retention is required by law.
12. Your Privacy Rights
Depending on where you live and the laws that apply, you may have rights such as the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion or erasure of personal data;
- object to certain processing or request restriction of processing;
- withdraw consent where processing is based on consent;
- request portability of certain data;
- opt out of marketing communications;
- complain to a relevant supervisory or regulatory authority.
Where applicable under California law, you may also have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment for exercising your rights.
To exercise your rights, contact us at [[email protected] / [email protected]]. We may need to verify your identity before fulfilling your request. Where legally permitted, we may decline or limit a request, in which case we will explain why.
13. Children’s Privacy
Our website is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children in a manner prohibited by applicable law.
If you believe a child has provided personal data to us without appropriate consent, please contact us so that we can review the situation and take appropriate steps.
14. Security
We use reasonable technical, organisational, and administrative safeguards designed to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, operational safeguards, and vendor due diligence appropriate to the nature of the data and the services involved.
No website, platform, or transmission method is completely secure, and we cannot guarantee absolute security.
15. Third-Party Links and Services
Our website may contain links to third-party websites, tools, platforms, payment pages, or social media services. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy notices before providing personal data to them.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, or privacy practices. When we do, we will revise the “Last Updated” date above. Where required by law, we will provide additional notice or seek consent for material changes.
17. Contact, Privacy Requests, and Grievances
For questions, privacy requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact:
21V Agritech Pvt. Ltd.
Cherry Hills, Embassy Golf Links Business Park, Challaghatta, Bangalore – 560071
Email: [email protected]
If applicable law grants you the right to lodge a complaint with a supervisory or regulatory authority, you may also do so with the authority responsible for your jurisdiction.