Privacy Policy

Last Updated: September 2026

1. Data Controller

The entity responsible for the collection and processing of your personal data (the "Data Controller") on this website is:

SNEHA SPICES & HERBS (Trading as Sneha Exim)
Janayugam Nagar 38, Kollam - 691008, Kerala, India
European Sales Desk: +420 702 823 184
Compliance & Data Protection Email: export@snehaexim.com

2. Regulatory Framework & Scope

We process personal and corporate data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 for our European business partners and visitors, as well as India's Digital Personal Data Protection Act, 2023 (DPDPA) for our statutory operations.

3. Data We Collect

We only collect data that is voluntarily submitted by you through our wholesale inquiry and RFQ forms:

• Company Name & Authorized Contact Person Name
• Corporate Business Email Address
• Destination Country & Port of Discharge
• VAT ID / Corporate Tax Identification Number (optional)
• Preferred Incoterms, estimated volume/quantities, and custom shipment specifications

Technical Server Logs: When you access our website, our hosting infrastructure automatically collects technical connection logs (such as masked IP address, browser type, device operating system, referring URL, and timestamp). This data is processed strictly to safeguard server integrity, prevent cyber attacks, and maintain web availability under GDPR Art. 6(1)(f).

4. Legal Basis & Purpose of Processing

We process this data exclusively to respond to your wholesale inquiries, generate commercial offers, evaluate procurement feasibility, and compute logistics. The legal basis for this processing is taking pre-contractual steps at your explicit request (GDPR Article 6(1)(b)) and fulfilling international trade documentation requirements.

5. International Cross-Border Data Transfers

Because Sneha Spices & Herbs is headquartered in Kerala, India, inquiries submitted by buyers located in the European Economic Area (EEA) are transferred to and processed at our operational base in India. This cross-border transfer is lawful pursuant to GDPR Article 49(1)(b), as it is strictly necessary for the execution of pre-contractual measures taken at your request (i.e. preparing wholesale pricing and shipment estimates). We enforce strict organizational and technical measures to protect the confidentiality and security of all international correspondence.

6. Cookies, Local Storage & External Fonts

• No Advertising or Tracking Cookies: This website does not deploy third-party tracking, profiling, or behavioral advertising cookies.
• Browser Local Storage: We use your browser's local storage mechanism (localStorage key: sneha_spices_cart) exclusively to preserve your chosen items in your wholesale quote basket across page transitions. No personally identifiable tracking data is stored in local storage.
• Typography Assets (Google Fonts): We use Google Fonts to render readable and consistent typography. Requests for web fonts load style assets directly to present the site aesthetically.

7. Data Sharing & Retention

We do not sell, lease, or monetize your personal or business data. Data is shared only with verified international freight forwarders or customs clearing partners when strictly necessary to prepare ocean or air freight estimations for your quotation. Personal data is retained solely for the period necessary to complete your inquiry, or as required by applicable tax, customs, and commercial recordkeeping laws.

8. Your Rights Under GDPR

If you are located in the European Union or EEA, you hold the following statutory data rights:

• Right of Access (Art. 15): Request verification and a copy of personal data held about you.
• Right to Rectification (Art. 16): Correct inaccurate, outdated, or incomplete data.
• Right to Erasure (Art. 17): Request deletion of your contact records when retention is no longer legally mandated.
• Right to Restriction & Objection (Arts. 18 & 21): Limit or object to certain aspects of processing.
• Right to Data Portability (Art. 20): Obtain your submitted data in a structured, standard format.
• Right to Lodge a Complaint (Art. 77): You have the right to lodge a complaint with an official Data Protection Supervisory Authority in your EU Member State if you believe your personal data has been handled inconsistently with GDPR regulations.

To exercise any of your data protection rights, please contact our Compliance & Data Protection team at export@snehaexim.com.