Privacy policy
This Privacy Policy (DPDP) explains how BLISS CHOCOLATES INDIA PRIVATE LIMITED (“Comply DP”, “we”, “us”) processes personal data when you visit our Website or contact us. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as a Data Fiduciary for personal data we collect on this Website, and you are the Data Principal.
Note: DPDP requires a clear notice to enable specific and informed consent. This policy is written to function as that notice for Website interactions. The notice must be understandable on its own, in plain language, and include an itemised description of personal data and specified purposes.
1) Who we are (Data Fiduciary contact)
Legal name: BLISS CHOCOLATES INDIA PRIVATE LIMITED
CIN: U15549KA2015PTC079529
Address: Survey No. 56/6, Avalahalli Village, Bidarahalli Hobli, Bangalore East, Bangalore Urban, Karnataka – 560 049
Business contact (privacy queries/rights requests):
Email: privacy@smoorchocolates.com
Phone: +91 8822201202
Contact person / authorised representative:
We publish business contact information for questions about processing of personal data.
2) What personal data we process (Website)
Depending on how you use the Website, we may process:
A) Data you provide
- Contact details: name, email, phone number, address, company name
- Messages/content: enquiry text, attachments you upload
- Account data (if you create an account): login email/phone, password (hashed), profile settings
B) Data we collect automatically
- Device & usage data: IP address, browser type, pages viewed, timestamps, referrer/UTM parameters
- Cookie/identifier data: cookie IDs and preference flags (see Cookie Policy)
We aim to limit collection to what is necessary for the specified purpose(s).
3) Why we process personal data (Specified purposes)
We process personal data for the following specified purposes:
- Responding to enquiries and scheduling calls to address them
- Providing requested services (e.g., delivery of your orders)
- Account administration (if applicable)
- Improving Website performance and user experience (only where enabled via cookie choices)
- Marketing communications (only where enabled / consented)
- Security and fraud prevention, incident detection, and maintaining logs
- Legal compliance and enforcing our terms
DPDP notice must include the specified purposes and a clear description of services/uses enabled by processing.
4) Consent, withdrawal, and language options
Where we rely on consent, we request consent through a clear affirmative action. Consent is intended to be free, specific, informed, unconditional, and unambiguous, and limited to necessary data for the specified purpose.
You can withdraw consent at any time, and we keep withdrawal as easy as giving consent. We will also provide a clear link/means for withdrawal, exercising rights, and making a complaint.
Language: Our notice/consent request can be accessed in English or any language in the Eighth Schedule to the Constitution.
5) Sharing of personal data (Processors & tools)
We may share personal data with Data Processors (e.g., hosting, email delivery, CRM, analytics, customer support) only as needed to provide services and operate the Website.
We remain responsible for processing done by us or on our behalf by processors, and we use processors only under a valid contract.
Typical processor categories:
- Email/SMS/WhatsApp providers (for transactional messages)
- CRM, customer support, ticketing tools
- Payment gateway providers (where applicable)
- IT hosting, analytics, and security service providers
6) Security safeguards
We take reasonable security safeguards to prevent personal data breach.
These include, at minimum: encryption/obfuscation/masking where appropriate, access controls, logging/monitoring, backups, and security obligations in processor contracts.
7) Retention and deletion
We retain personal data only as long as necessary for the specified purpose or for legal compliance. We erase personal data upon withdrawal of consent or when it is reasonable to assume the specified purpose is no longer being served (unless retention is required by law), and we cause processors to erase data we provided to them for processing.
Security logs relevant to detecting unauthorised access and incident response may be retained for one year (unless another law requires longer).
8) Your rights (Data Principal)
Subject to DPDP and applicable laws, you can request:
- Access information: summary of personal data processed, processing activities, and identities of fiduciaries/processors we shared data with + description of data shared
- Correction/updating/completion and erasure, unless retention is necessary for specified purpose or law
- Grievance redressal through readily available means
- Nomination of another individual to exercise rights in case of death/incapacity
How to exercise rights / file grievances
Submit requests at: https://smoor.in/pages/contact-us or email
We prominently publish the means for making requests and any identifiers needed, and we respond via our grievance system within a period not exceeding 90 days.
9) Personal data breaches (intimation)
If we become aware of a personal data breach, we will (to the best of our knowledge) intimate affected individuals without delay with required details (breach description, consequences, mitigation, safety steps, and contact info).
We will also intimate the Data Protection Board as required, including detailed updates within 72 hours (or longer if allowed by the Board).
10) Cross-border transfers
If we transfer personal data for processing outside India, we will do so in line with any restrictions notified by the Government.
11) Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date and, where appropriate, provide additional notice.
12) Contact
Privacy and rights requests:
Business contact:
+91 8822201202
Address:
Survey No. 56/6, Avalahalli Village, Bidarahalli Hobli, Bangalore East, Bangalore Urban, Karnataka – 560 049
GRIEVANCES
If You have any queries relating to the processing or usage of information provided by You in connection with this Privacy Policy, please contact us at privacy@smoorchocolates.com or write to our Grievance Officer at the following address:
Ashwin Rathi, Grievance Officer,
Bliss Chocolates India Private Limited,
Survey No. 56/6, Avalahalli Village, Bidarahalli Hobli, Bangalore East, Bangalore Urban, Karnataka – 560 049
Last updated: January 19, 2026