Privacy Policy.

Who we are

PrimeFish is a brand operated by Grow Your Own Food Pvt Ltd, a company incorporated in India and part of the Vertigrove group. We sell fresh, traceable fish directly to consumers in Kochi, Kerala, via our website and mobile app.

This policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have. If anything is unclear, email us at maya@vertigrove.com.

What we collect and why

We collect only what we need. We do not collect location tracking data, microphone or camera access, or any sensitive personal data as defined under Indian law.

How we use your information

• Processing, packing, and delivering your orders
• Sending order confirmations, dispatch notifications, and delivery updates via WhatsApp and email
• Pre-filling your details at checkout to save you time
• Responding to customer service queries
• Improving our products, delivery routes, and app experience
• Complying with food safety regulations and tax obligations
• Preventing fraud and protecting our platform

We do not use your data for targeted advertising, and we do not build profiles to sell to third parties.

Who we share your data with

We share your data only with the services needed to run PrimeFish:

• Razorpay — processes online payments. Your payment credentials go directly to them; we only receive a confirmation of success or failure.
• MSG91 — sends WhatsApp notifications and OTPs on our behalf. Only your phone number is shared.
• Our delivery team — receives your name, phone number, and delivery address so they can complete your order.

We do not sell, rent, or trade your personal data with any other third party.

Data retention

• Account data — kept while your account is active, or until you request deletion.
• Order and subscription records — retained for 3 years after your last order, in case of queries or disputes.
• Financial records — anonymised transaction amounts and dates are retained for up to 7 years as required by Indian accounting and tax law. These records cannot be used to identify you after your account is deleted.

Your rights

Under India's Information Technology Act and applicable data protection principles, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate or incomplete information
• Deletion — request that we permanently erase your account and personal data
• Opt out — unsubscribe from marketing messages at any time

For any other data request, email us at maya@vertigrove.com.

Cookies and local storage

Our website uses a small number of cookies strictly necessary for the service to function — specifically, a session cookie that keeps you logged in and a CSRF token that protects form submissions from tampering. We do not use advertising cookies or third-party tracking pixels.

You can disable cookies in your browser settings, but doing so will prevent you from staying logged in.

Children's privacy

PrimeFish is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with data, please contact us immediately and we will delete it.

Changes to this policy

If we make material changes to how we handle your data, we'll update this page and notify registered users via email or WhatsApp at least 14 days before the changes take effect. The "Last updated" date at the top of this page always reflects the most recent version.

Contact us