Privacy notice

Version 2026-10-26 · Status: Draft for review

In short

You can browse every product without an account, and without giving us any personal details.
We collect details only when you sign up, send an enquiry or complaint, write a review, or make a privacy request, and only to deal with that.
We don't sell your data, show advertising, or use third-party trackers or advertising cookies.
Anonymous visit statistics are counted only if you allow them.
You can see, correct or delete your data: make a privacy request, or delete your account from your account.

Who we are

This website is run by Cokhani Frozen Foods Pvt. Ltd. (“Albelly”, “we”). Address: Career Planet Public School, Palwas Mor, Bhiwani, 127021. Email: chokhanifrozenfoodspvtltd@gamil.com. Phone: 9991001234.

Questions about your personal data: Privacy contact.

What we collect, and why

Your account: Name, email address, mobile number and password (stored only as a secure hash by our sign-in provider; we never see it), when you signed up and last signed in. To let you sign in, show your enquiries and their replies, and stop misuse.
Enquiries and complaints: Name, mobile number, email (optional), town, the details you type (for example shop name, product, where you bought it) and your message, plus our replies and internal notes. To answer you. You need an account to send one, so we can show you our replies.
Reviews: Name, town, rating and review, which we publish with your permission; your mobile number, which is never published and is used to limit repeat reviews; and a scrambled reference to your account.
Privacy requests: Name, the email or mobile number you used with us, and the details of your request. To check it is you, deal with the request and keep a record of what we did.
Visit statistics (only if you allow them): Which page or product was viewed, searches that found nothing, taps on our phone/WhatsApp/email/map links, and enquiry forms opened and sent. No name, account, IP address, cookie or device identifier is stored with them.
Website error reports: When something on the site breaks, the page address and the error message are recorded so we can fix it. They don't include your name, account or the contents of forms.
Security: To limit abuse, the server briefly counts requests per IP address in memory; it isn't stored by us. Our hosting and sign-in providers keep their own access logs, which include IP addresses.

We use your data on the basis of your consent (for example to publish a review, or to count visit statistics), or because you gave it to us for a specific purpose such as answering your enquiry, as the Digital Personal Data Protection Act, 2023 allows. We don't send marketing emails.

Who can see it

Only Albelly's admin team, who must use two-step sign-in, and the service providers that run the website for us. Each receives only what its job needs. We don't sell or rent personal data. We disclose it to authorities only when the law requires.

Supabase: database, sign-in and file storage for this website: account, enquiry, review, privacy-request and admin records. Data region: Data region.
Hosting: Hosting provider. Runs the website; keeps request logs, including IP addresses.
Cloudflare Turnstile: the “I'm human” check on the log-in and sign-up forms. Cloudflare receives your IP address and information about your browser to tell people from automated sign-ups; it doesn't set advertising cookies.
Email: Email provider. Sends password-reset and privacy-request verification emails: your email address and the email's content.

How long we keep it

Your account, and reviews you published: until you delete them or your account.
Anonymous usage statistics: Proposed: 13 months (Page, search and contact-tap counts. No personal data.)
Resolved website issues: Proposed: 1 year (Error reports the site sent itself, after they were resolved.)
Read admin notifications: Proposed: 1 year (Notifications the team has already read.)
Rejected and spam reviews: Proposed: 1 year (Name, phone, town and text of reviews that were never published or were removed.)
Closed enquiries and complaints: Proposed: 2 years (Contact details, messages, notes and history of enquiries closed for this long.)
Unverified privacy requests: Proposed: 1 year (Requests whose sender never confirmed them.)
Completed or refused privacy requests: Proposed: 2 years (The request and how it was handled, kept as evidence of what was done.)
Analytics choices from browsers: Proposed: 2 years (Random browser id, choice, notice version and time.)
Records of admin actions (who changed what, and when) are kept so misuse can be investigated. They hold account references, not contact details.

Deleted data can remain in our database provider's backups until those backups expire on their normal schedule; it isn't restored from them except to recover from a failure.

Cookies and browser storage

We don't use advertising or third-party cookies. This is everything the site stores in your browser:

sb-…-auth-token (cookie) (Necessary): Keeps you signed in. Set only when you sign in; removed when you sign out.
__prerender_bypass (cookie) (Necessary (admins only)): Lets an Albelly admin preview unpublished changes. Never set for visitors.
albelly-privacy (local storage) (Necessary): Remembers your analytics choice, the notice version and a random id for the record of that choice.
albelly-cursor (local storage) (Preference): Remembers if you switched the Albu cursor off.
albelly-loader (session storage) (Preference): Shows the mascot loading screen only once per visit.

Change your statistics choice at any time: .

Your rights

You can ask us to:

tell you what personal data we hold about you and how we use it, and who we have shared it with;
correct, complete or update it;
delete it (unless the law requires us to keep it);
withdraw a consent you gave; withdrawing is as easy as giving it, and doesn't affect what was done before;
deal with a complaint about how we handled your data;
let someone you nominate act for you if you can't, for example through illness.

Make a privacy request. You don't need an account. If you have one, you can delete it yourself from your account. We aim to reply within a set period. If you aren't satisfied with our answer, you can complain to the Data Protection Board of India.

Children

Our accounts, reviews and enquiry forms are meant for adults. If you are under 18, please ask a parent or guardian to contact us for you.

Keeping it safe

The site uses HTTPS. Access to customer records is limited to Albelly's admin team, enforced by the database itself. Admins use two-step sign-in, and their actions are logged. If a breach affects your data, we will tell you, and what you can do, without delay.

Changes

When this notice changes we update the version above. If the change affects visit statistics, we ask for your choice again.