Privacy Policy
Last updated: June 2026
1. Data Controller
The data controller responsible for your personal data is: H&G Ventures Private Limited (trading as AERI Makhana), TF-302, Shanti Heights, Jawahar Nagar, Halol-389350, Gujarat, India, India. Email: kriya@aerisnacks.com.
2. What Data We Collect
We collect: identity data (name); contact data (email, phone, delivery/billing address); transaction data (order history, payment method type); technical data (IP address, browser, cookies); marketing preferences; communications you send us.
3. Legal Basis for Processing (GDPR Art. 6)
We process your data on these grounds: Performance of contract (order processing); Legal obligation (tax & accounting); Legitimate interests (improving website, fraud prevention); Consent (marketing emails, non-essential cookies — withdrawable at any time).
4. How We Use Your Data
We use your data to: process and fulfil orders; send confirmations, shipping updates, and receipts; respond to enquiries; send marketing communications (consent only); improve our website through analytics; comply with legal obligations; prevent fraud.
5. Data Sharing
We do not sell your personal data. We share it only with: payment processors (PayPal); shipping and logistics providers; email service providers; website analytics providers (Google Analytics); legal and regulatory authorities where required by law. All third-party providers are contractually bound by GDPR.
6. International Data Transfers
As H&G Ventures Private Limited (trading as AERI Makhana) is based in India, your data may be transferred to and processed in India. We protect transfers by implementing Standard Contractual Clauses (SCCs) as approved by the European Commission. You may request a copy of the relevant safeguards by contacting kriya@aerisnacks.com.
7. Data Retention
Order data: 10 years (French accounting law); Customer account data: 3 years from last activity; Marketing consent records: until withdrawal + 3 years; Cookie data: maximum 13 months (CNIL guidance).
8. Your Rights (GDPR Art. 15-22)
You have the rights of: Access, Rectification, Erasure, Restriction, Portability, Objection, and Withdrawal of Consent. To exercise any right: kriya@aerisnacks.com. We respond within 30 days. Complaints: CNIL — www.cnil.fr.
9. Cookies
Our website uses: strictly necessary cookies (cart, login — always active); analytics cookies (Google Analytics — consent required); marketing cookies (Meta Pixel — consent required). Manage preferences via our cookie consent banner or footer settings link.
10. Data Security
We implement SSL/TLS encryption, access controls, and secure payment processing. In the event of a data breach, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
If you have any questions about this document, please contact us.