Privacy Policy

March 25, 2026

OCHRE SPIRITS PRIVATE LIMITED

Privacy Policy

Version 2.0  | Effective Date: 25th March 2026 |  Last Updated: 25th March 2026

 

IMPORTANT NOTICE: This website contains content related to alcoholic beverages and is intended strictly for individuals who are of legal drinking age as applicable in their state or territory in India. By accessing this website, you confirm that you are of legal drinking age. Persons below the legal drinking age are strictly prohibited from accessing this Platform. Our e-commerce store sells only non-alcoholic beverages and premix products and does not facilitate the sale of alcohol online.

 

1. Introduction and Scope

This Privacy Policy ("Policy") is published by Ochre Spirits Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at 2nd Floor, No. 17, 7th Main Road, Indiranagar, Bengaluru, Karnataka 560 038 ("Ochre Spirits," "we," "our," or "us"), CIN: U10799GA2023PTC015881.

This Policy applies to all personal data collected, stored, processed, or used by us through:

  • Our website at https://ochrespirits.com (the "Website")
  • Our e-commerce platform accessible through the Website, which sells non-alcoholic beverages and premix products
  • Our mobile application, if any, made available from time to time
  • Our physical outlets, tasting rooms, and hospitality establishments
  • Any other digital or physical touchpoint through which we interact with you

(collectively referred to as the "Platform")

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), the Consumer Protection Act, 2019, and all other applicable Indian laws and regulations in force from time to time.

By accessing or using our Platform, registering an account, or purchasing products from us, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree with any part of this Policy, you must immediately discontinue your use of the Platform.

 

2. Age Verification and Access Restriction

Our Platform displays content and information related to alcoholic beverages manufactured and distributed by Ochre Spirits Private Limited. Accordingly, access to the Platform is strictly restricted to individuals who meet the legal drinking age requirement applicable in their respective state or union territory in India.

We implement an age verification gate at the point of entry to the Website. By proceeding past this gate, you represent and warrant that you are of legal drinking age in your jurisdiction. We reserve the right to restrict or terminate access to any user who misrepresents their age.

Our e-commerce store sells only non-alcoholic beverages and premix products. However, given the brand context, the age gate applies to the Website as a whole. We do not knowingly permit minors to access any part of our Platform. If we become aware that a minor has accessed the Platform or submitted personal data, we will take immediate steps to restrict access and delete such data.

Ochre Spirits Private Limited shall not be liable for any misrepresentation of age by a user and the consequences arising therefrom shall be solely the responsibility of the individual concerned.

 

3. Personal Data We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we may collect include:

3.1 Data You Provide Directly

  • Identity data: full name, date of birth, gender
  • Contact data: email address, mobile number, delivery address
  • Account credentials: username and password (stored in encrypted form)
  • Age verification data: self-declaration or government-issued ID where required
  • Transaction data: purchase history, order details, billing information
  • Payment data: UPI ID, bank account details, or card information processed through our payment gateway partners. We do not store raw card or bank account data on our servers
  • Communication data: messages, queries, complaints, or feedback submitted through our Platform
  • Reservation and event data: booking details, dietary preferences, and event attendance records

3.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, device type, operating system
  • Usage data: pages visited, time spent, click behaviour, referring URLs
  • Cookie data: session identifiers and preference data as described in Section 6 below

3.3 Data from Third Parties

  • Data from payment gateway providers confirming transaction status
  • Data from social media platforms where you interact with our official pages or use social login features, subject to the privacy settings of those platforms

We do not collect sensitive personal data or information as defined under the SPDI Rules except to the extent strictly required for identity verification or payment processing, and only with your explicit consent.

 

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

  • Account registration and management: to create, maintain, and manage your user account on our Platform
  • Order fulfilment: to process, confirm, and deliver your orders for non-alcoholic beverages and premix products purchased through our e-commerce store
  • Payment processing: to facilitate secure payment transactions through authorised payment gateway partners
  • OTP-based authentication: to verify your mobile number and email address at the time of registration and for subsequent login sessions, ensuring secure access to your account
  • Age verification: to ensure compliance with applicable laws governing access to alcohol-related content
  • Customer support: to respond to queries, complaints, and feedback
  • Marketing communications: to send you information about new products, offers, events, and updates, subject to your consent and right to opt out at any time
  • Legal and regulatory compliance: to fulfil obligations under the Excise Act and rules applicable to the alcoholic beverage industry, consumer protection laws, tax laws, and any other applicable regulations
  • Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activities
  • Analytics and improvement: to understand how users interact with our Platform and to improve our products and services

We will not use your personal data for any purpose other than those described above without obtaining your prior consent.

 

5. OTP-Based Registration and Authentication

When you register on our Platform, we collect your mobile number and email address and verify them through a one-time password (OTP) sent via SMS and email respectively. This OTP-based authentication is implemented as a security measure to ensure that the contact details provided are accurate and belong to the registering individual.

OTPs are time-limited, single-use codes and are not stored on our servers beyond the duration required for verification. We use industry-standard encryption and secure communication protocols to transmit OTPs. You are responsible for maintaining the confidentiality of OTPs received on your registered devices. Ochre Spirits Private Limited shall not be liable for any loss arising from the disclosure of an OTP by you to any third party.

By registering on our Platform, you expressly consent to receiving OTPs on your registered mobile number and email address for authentication purposes. This consent is separate from and in addition to any consent provided for marketing communications.

 

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies on our Website. Cookies are small text files placed on your device that help us provide a better browsing experience.

We use the following categories of cookies:

  • Strictly necessary cookies: required for the Website to function and cannot be disabled. These include session management, security, and age verification cookies
  • Functional cookies: remember your preferences and settings to provide a personalised experience
  • Analytics cookies: collect anonymised information about how visitors use our Website, which we use to improve performance and content
  • Marketing cookies: used to deliver relevant content and track the effectiveness of our campaigns

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. A cookie consent mechanism is presented to you on your first visit to the Website. Continued use of the Website after managing your preferences constitutes your acceptance of the applicable cookie categories.

 

7. Sharing and Disclosure of Personal Data

We do not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following circumstances:

  • Service providers: with third parties engaged to perform services on our behalf, including payment gateway providers, logistics and delivery partners, SMS and email service providers, cloud hosting providers, and marketing agencies. These parties are contractually obligated to process your data only for the specified purpose and to maintain appropriate security standards
  • Group entities: with subsidiaries, affiliates, or internal departments of Ochre Spirits Private Limited involved in fulfilment, manufacturing, or hospitality operations
  • Legal and regulatory compliance: with government authorities, regulatory bodies including the Excise Department, law enforcement agencies, or courts of law, where we are required to do so by law or in response to a valid legal process. We will, where permitted, endeavour to notify you of such disclosure
  • Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy. We will notify you of any such transfer
  • Fraud prevention: with fraud detection agencies or other parties where necessary to protect the rights, property, or safety of Ochre Spirits Private Limited, our users, or the public

All third parties with whom we share personal data are required to treat such data with the same level of protection as we do and are prohibited from using it for any other purpose.

 

8. Data Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Encrypted storage of passwords and authentication credentials
  • Access controls limiting data access to authorised personnel only
  • Regular review of our data collection, storage, and processing practices
  • Secure payment processing through PCI-DSS compliant payment gateway partners

You acknowledge that no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to notify us immediately at yo@ochrespirits.com of any unauthorised access to or use of your account.

Ochre Spirits Private Limited shall not be liable for any breach of security resulting from your failure to maintain the confidentiality of your account credentials, or from circumstances beyond our reasonable control including but not limited to force majeure events, cyberattacks of an unprecedented nature, or third-party system failures.

 

9. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

  • Account data is retained for the duration of your account registration and for a period of three (3) years thereafter, or as required by applicable law, whichever is longer
  • Transaction and order data is retained for a minimum of eight (8) years in compliance with applicable tax and financial record-keeping requirements
  • Marketing data is retained until you withdraw your consent or opt out of marketing communications
  • Security and fraud prevention logs may be retained for up to two (2) years

Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data in accordance with our internal data deletion protocols. Where data is anonymised, it may be retained indefinitely for analytical purposes without identifying any individual.

 

10. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data:

  • Right to access: you may request a copy of the personal data we hold about you
  • Right to correction: you may request correction of any inaccurate or incomplete personal data
  • Right to withdrawal of consent: you may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal
  • Right to account deletion: you may request deletion of your account and personal data by contacting us at yo@ochrespirits.com. We will process such requests within a reasonable time, subject to our obligation to retain certain data as required by law
  • Right to restrict processing: in certain circumstances, you may request that we restrict the processing of your personal data

To exercise any of the above rights, please write to us at yo@ochrespirits.com. We will respond to your request within thirty (30) days. We reserve the right to verify your identity before processing any request.

 

11. Third-Party Links and Services

Our Platform may contain links to third-party websites, social media platforms, event pages, or partner sites. Ochre Spirits Private Limited is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to read the privacy policies of any third-party websites you visit. The inclusion of a link on our Platform does not imply our endorsement of the linked site or its privacy practices.

Where you use social login features or interact with our content on social media platforms, the data collected by those platforms is governed by their respective privacy policies and not by this Policy.

 

12. E-Commerce Store

Our online store sells only non-alcoholic beverages and premix products and does not facilitate the online sale of alcoholic beverages. All purchases made through our e-commerce store are subject to this Policy and our Terms and Conditions of Sale.

Payment transactions on our e-commerce store are processed by authorised third-party payment gateway partners. We do not store your full card details, CVV, or net banking credentials on our servers. All payment data is processed and stored by our payment partners in compliance with applicable payment security standards.

By making a purchase on our Platform, you consent to the sharing of your transaction data with the relevant payment gateway provider and, where applicable, logistics and delivery partners for the purpose of order fulfilment.

 

13. Children's Privacy

Our Platform is strictly not intended for use by individuals below the legal drinking age applicable in their state or territory. We do not knowingly collect personal data from minors. Our age verification gate is designed to prevent access by underage individuals.

If you are a parent or guardian and believe that your child has accessed our Platform or provided personal data to us without your consent, please contact us immediately at yo@ochrespirits.com. Upon verification, we will take appropriate steps to delete such data and restrict further access.

Ochre Spirits Private Limited accepts no liability for misrepresentation of age by any individual accessing the Platform.

 

14. Limitation of Liability

To the fullest extent permitted by applicable law, Ochre Spirits Private Limited, its directors, officers, employees, and agents shall not be liable for:

  • Any loss or damage arising from your failure to keep your account credentials confidential
  • Any unauthorised access to your account resulting from your actions or omissions
  • Any loss arising from the disclosure of OTPs or authentication codes to third parties
  • Any indirect, incidental, consequential, or punitive damages arising out of or in connection with this Policy or the processing of your personal data
  • Any breach arising from circumstances beyond our reasonable control

Nothing in this Policy limits our liability for fraud, wilful misconduct, or any liability that cannot be excluded or limited under applicable law.

 

15. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of our Grievance Officer are as follows:

Name: Danish Ali Akbar

Designation: Grievance Officer

Organisation: Ochre Spirits Private Limited

Address: 2nd Floor, No. 17, 7th Main Road, Indiranagar, Bengaluru, Karnataka 560 038

Email: Dan@ochrespirits.com

Working Hours: Monday to Friday, 10:00 AM to 6:00 PM (IST)

Any grievance or complaint regarding the processing of your personal data must be submitted in writing to the Grievance Officer. We will endeavour to acknowledge your complaint within 48 hours and resolve it within thirty (30) days of receipt.

 

16. Changes to This Policy

We reserve the right to update or modify this Policy at any time. Material changes will be communicated to registered users via email or a prominent notice on the Website at least fifteen (15) days prior to the change taking effect. Your continued use of the Platform after the effective date of any change constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically. The version number and effective date at the top of this document will reflect the most current version.

 

17. Governing Law and Dispute Resolution

This Policy is governed by and construed in accordance with the laws of India. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka.

 

18. Contact Us

If you have any questions, concerns, or requests regarding this Policy or the processing of your personal data, please contact us at:

Ochre Spirits Private Limited

2nd Floor, No. 17, 7th Main Road, Indiranagar, Bengaluru, Karnataka 560 038

Email: yo@ochrespirits.com

Phone: +91 95612 47426

CIN: U10799GA2023PTC015881

GSTIN: 29AAECO0398N2ZR

 

Ochre Spirits Private Limited  |  CIN: U10799GA2023PTC015881  |  GSTIN: 29AAECO0398N2ZR  | Version 2.0  |  25th March 2026