Privacy Policy

Last updated: 28 September 2026

Draft — pending your review before publishing. Anything in [brackets] needs a real value filled in.

1. Who We Are

Galactica (Galactica Organic Milk & Foods Private Limited), based at Plot No. 72, Haldharu Aashram Road, Kamrej, Surat 394310, operates this website and delivers A2 dairy products across Mumbai.

2. What We Collect

• Name and phone number (and an email address only if you give us one when ordering by phone)
• Delivery address, area, and pincode
• Order, subscription, and wallet transaction history
• Account PIN (stored as a one-way hash — we never see or store your actual PIN)

We do not collect or store your card, UPI, or bank details. Payments are processed directly by Razorpay, our payment partner, under their own security standards.

3. Why We Collect It

• To create and manage your account. When you pay for an order without logging in, we save it to an account for the phone number you gave; you can claim that account by asking us for a code, which we send on WhatsApp to that number
• To schedule and deliver your orders and subscriptions
• To process payments and wallet top-ups via Razorpay
• To send order and delivery updates, including via WhatsApp
• To respond to your inquiries
• To meet our legal and tax obligations

4. Who We Share It With

We do not sell, trade, or rent your personal information to anyone. We share data only with:

• Razorpay — to process payments and wallet top-ups
• Our own delivery staff — to fulfil your order

We may also disclose information if legally required to.

5. Your Wallet

Your Galactica wallet holds store credit for your orders. It can't be used as cash, withdrawn to a bank at will, or transferred to anyone else. If you'd like a refund of your unused balance to your original payment method, email us at wecare@galactica.org.in or message us on WhatsApp and we'll process it.

6. Cookies

We use one cookie to keep you signed in. We do not currently use any advertising or analytics tracking cookies.

7. Data Security

Your data is stored on encrypted, access-controlled infrastructure. PINs are hashed, never stored in plain text, and all traffic to this site is encrypted (HTTPS).

8. Your Rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to access, correct, or delete your personal data. To delete your account, use Delete my account on your My Account page, or contact wecare@galactica.org.in or 9920799307. We remove your name, phone number, PIN and addresses; invoices and payment records are kept for as long as tax law requires.

9. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and applicable IT Rules, we have appointed a Grievance Officer to address complaints or concerns about how your personal data is handled.

Name: [grievance officer name]
Designation: [designation]
Email: [grievance officer email]
We acknowledge every grievance within 48 hours and resolve it within one month, as required under the Consumer Protection (E-Commerce) Rules, 2020.

10. Data Retention

We retain your order and account information for as long as your account is active, and for a further period afterward as required for accounting and legal compliance.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

12. Contact Us

Galactica Organic Milk & Foods Private Limited
Plot No. 72, Haldharu Aashram Road, Kamrej, Surat 394310
WhatsApp: 9920799307
Email: wecare@galactica.org.in