Privacy policy

This Privacy Policy explains how Aurum Grove Limited (“we”, “us”, “our”), trading as Saakshi’s and operating www.saakshis.com (the “Site”), collects, uses, shares and protects your personal data. We handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). Please read it alongside our Cookie Policy.

Who we are

The data controller responsible for your personal data is Aurum Grove Limited (trading as “Saakshi’s”).

For any privacy question, to exercise your rights, or to make a complaint, please contact us using the details above.

The personal data we collect

  • Order & account data — name, billing and delivery address, email, phone number, order and subscription history, and payment confirmation (we do not store full card details; payments are handled securely by our payment providers).
  • Communications & support data — messages you send us (email, SMS, chat, phone), reviews, and survey responses.
  • Marketing preferences — your email and SMS consent choices and how you engage with our messages.
  • Device & usage data — where you consent to non-essential cookies: IP address, device/browser type, time zone, pages and products viewed, and how you interact with the Site.
  • Delivery data — delivery address, chosen date/slot and any delivery instructions.

How and why we use your personal data

We must have a lawful basis under the UK GDPR for using your personal data. We rely on the following:

What we do Lawful basis
Process and deliver your orders and subscriptions, take payment, and provide order confirmations and support. Performance of our contract with you.
Send service messages (order updates, delivery notifications, and reminders relating to a checkout you started). Contract; our legitimate interest in keeping you informed about your order.
Send marketing emails and SMS about our products, offers and recipes. Your consent (you can withdraw it at any time).
Set non-essential analytics and advertising cookies and measure marketing performance. Your consent (via our cookie banner).
Operate, secure and improve the Site, prevent fraud, and keep proper business records. Our legitimate interests; legal obligations.
Meet legal, tax and regulatory requirements. Compliance with a legal obligation.

Cookies and similar technologies

We use strictly necessary cookies (always on), and — only with your consent — analytics cookies (e.g. Google Analytics 4, Microsoft Clarity) and marketing cookies (e.g. Google Ads, Meta/Facebook Pixel, TikTok). Non-essential cookies are switched off by default; they are set only if you select “Accept”, and you can change or withdraw your choice at any time using the “Cookie settings” option on the Site. We operate Google Consent Mode v2 so our Google tags respect your choice. Full details are in our Cookie Policy.

Who we share your personal data with

We do not sell your personal data. We share it only with trusted service providers (“processors”) acting on our instructions, and where required by law. These include:

  • Shopify — ecommerce platform, hosting and checkout (privacy).
  • Payment providers (e.g. Shopify Payments, PayPal) — secure payment processing.
  • Google — Analytics 4 and Ads, with your consent (privacy).
  • Meta Platforms — advertising pixel, with your consent (privacy).
  • Microsoft Clarity — usage analytics, with your consent (privacy).
  • TikTok — advertising measurement, with your consent (privacy).
  • GoHighLevel — CRM, email and SMS messaging.
  • Appstle (subscriptions), Zapiet (delivery scheduling), Loox and Rivo (reviews and loyalty).
  • Delivery partners (e.g. DPD, DHL) — to deliver your order.

We may also disclose personal data where necessary to comply with the law, respond to a lawful request, or establish, exercise or defend our legal rights.

International transfers

Some providers are based outside the UK (for example in the United States or the EEA). Where your personal data is transferred outside the UK, we put appropriate safeguards in place — such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses — so your data remains protected.

How long we keep your personal data

We keep personal data only for as long as necessary for the purposes above. Order and transaction records are generally retained for up to 7 years to meet tax and accounting obligations. Marketing data is kept until you withdraw consent or unsubscribe; we may retain a minimal suppression record indefinitely so we can honour your opt-out. We then securely delete or anonymise data we no longer need.

Data security

We use appropriate technical and organisational measures to protect your personal data. However, no transmission of information over the internet is completely secure, and any transmission is at your own risk. Once we receive your data we apply procedures and security features to help prevent unauthorised access.

Marketing

We send marketing emails and SMS only where you have consented. Every marketing email has an unsubscribe link, and you can stop marketing texts at any time by replying STOP, or by emailing concierge@saakshis.com. Opting out of marketing does not affect service messages about orders you have placed.

Your rights

Under the UK GDPR you have the right to: be informed; access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and withdraw consent at any time where we rely on it. You also have the right not to be subject to a decision based solely on automated processing that significantly affects you — we do not carry out such processing.

To exercise any right, email concierge@saakshis.com and we will respond within one month. Some rights are subject to legal exemptions: we may keep certain data where we are legally required or permitted to do so, may continue processing where we have compelling legitimate grounds, and may decline requests that are manifestly unfounded or excessive, in each case to the extent permitted by law.

If you do not provide your personal data

Some data is necessary for us to take and fulfil your order or provide a subscription. If you choose not to provide it, we may be unable to process your order or provide the relevant service.

Children

The Site is intended for individuals aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Complaints

If you have a concern, please contact us first at concierge@saakshis.com so we can try to resolve it. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/, helpline 0303 123 1113.

Changes to this policy

We may update this Privacy Policy from time to time for legal, operational or regulatory reasons. We will post any changes on this page with a new date below, and your continued use of the Site after an update constitutes acceptance of the revised policy.

Last updated: 26 May 2026