Last Updated: 29 March 2026
Company Name: Keetrilai Organics
Website: www.keetrilai.com
1. Purpose
This Data Retention Policy outlines how Keetrilai Organics collects, stores, retains, and deletes personal data of users in a secure and compliant manner.
We follow a data minimization and purpose limitation approach, ensuring data is retained only as long as necessary.
2. Scope
This policy applies to:
Customers and website users
Registered account holders
Marketing subscribers
Vendors and partners
3. Categories of Data & Retention Periods
| Data Type | Examples | Retention Period | Purpose |
|---|---|---|---|
| Account Data | Name, email, phone | Until account deletion or 3 years of inactivity | User management |
| Order Data | Order history, billing, shipping | 7 years | Tax & legal compliance |
| Payment Data | Transaction references (no full card storage) | As per payment gateway | Payment processing |
| Customer Support | Emails, chat logs | 2 years | Issue resolution |
| Marketing Data | Email subscriptions | Until consent withdrawn | Marketing communication |
| Website Usage Data | IP, cookies, analytics | 6–12 months | Analytics & performance |
4. Data Retention Principles
We adhere to the following principles:
Minimization: Collect only necessary data
Purpose Limitation: Use data only for stated purposes
Storage Limitation: Do not retain data indefinitely
Security: Protect stored data with appropriate safeguards
5. Data Deletion & Removal Requests
We provide users with clear mechanisms to request data removal (right to erasure).
5.1 User Rights
Users can request:
Deletion of personal data
Closure of their account
Removal from marketing communications
Restriction of processing
5.2 Methods to Request Data Removal
Users may request deletion through:
Option 1: Email Request
Email: wecare@keetrilai.com
Subject: “Data Deletion Request”
Include:
Registered email ID
Order ID (if applicable)
Specific request details
Option 2: Contact Form
Submit via website contact form selecting “Privacy/Data Request”
6. Data Deletion Process
Once a valid request is received:
Identity Verification
Confirm user identity to prevent unauthorized requests
Processing Timeline
Request processed within 7–30 days
Deletion Actions
Remove data from active databases
Anonymize historical data where deletion is not feasible
Notify third-party processors to delete data
Confirmation
User receives confirmation upon completion
7. Exceptions to Data Deletion
We may retain certain data where necessary for:
Legal obligations (tax, audit, regulatory compliance)
Fraud detection and prevention
Dispute resolution
Enforcement of terms and agreements
Such retained data will be:
Restricted in use
Securely stored
Deleted after legal obligations expire
8. Automatic Data Deletion
We implement automated mechanisms to:
Delete inactive accounts after 1 year.
Remove expired analytics data periodically
Clean up outdated logs and backups
9. Third-Party Data Handling
We ensure that third-party service providers:
Follow equivalent data retention and deletion standards
Process data only as instructed
Delete data upon request or contract termination
Examples include:
Payment gateways
Shipping providers
Marketing platforms
10. Data Security During Retention
We protect retained data using:
Encryption (in transit and at rest)
Access control policies
Regular audits and monitoring
11. Policy Updates
This policy may be updated periodically. Changes will be posted on our website with the revised date.
12. Contact for Data Requests
Email: wecare@keetrilai.com