Privacy policy

Last Updated: 13 July 2026

1. INTRODUCTION AND SCOPE 

This Privacy Policy applies to Casa De Villota Private Limited (“Company”, “Burp!”, “we”,  “us”, or “our”), the owner and operator of the Burp! brand and website located at drinkburp.com,  including all related websites, mobile applications, social media pages, customer support  channels, promotions, and services (collectively, the “Platform”). 

Registered Office: 

78, Ground Floor, Kailash Hills, East of Kailash, New Delhi – 110065, India 

This Privacy Policy explains how we collect, use, process, store, disclose, and protect your  Personal Data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDPA”)  and other applicable laws. 

By accessing or using our Platform, creating an account, placing an order, subscribing to our  communications, or otherwise interacting with us, you acknowledge that you have read and  understood this Privacy Policy. 

This Privacy Policy does not apply to third-party websites, applications, or services that may be  linked from our Platform. Such third parties maintain their own privacy practices and policies. 

2. PERSONAL DATA WE COLLECT 

We may collect Personal Data directly from you, automatically through your use of the Platform,  and from third-party service providers. 

A. Information You Provide Directly 

We may collect: 

  1. Full name
  2. Email address
  3. Mobile phone number
  4. Billing address
  5. Shipping address
  6. Account login credentials
  7. Date of birth (if provided)
  8. Social media handles
  9. Product preferences
  10. Customer reviews and feedback
  11. Survey responses
  12. Communications with customer support
  13. Information submitted during promotions, contests, referrals, and loyalty programs
  14. Employment-related information submitted during recruitment 

B. Information Collected Automatically 

When you use the Platform, we may collect: 

  1. IP address
  2. Device identifiers
  3. Browser type and version
  4. Operating system
  5. Website activity and usage information
  6. Referral URLs
  7. Session information
  8. Cookie identifiers
  9. Approximate location information derived from IP address 

C. Information from Third Parties 

We may receive information from: 

  1. Shopify
  2. Cashfree Payments
  3. India Post
  4. Delhivery
  5. Google Analytics
  6. Meta Platforms
  7. Google Ads
  8. WhatsApp Business service providers
  9. Social media platforms
  10. Marketing and analytics providers 

D. Payment Information 

Payments are processed through authorized payment processors. 

We do not store complete debit card, credit card, UPI PIN, CVV, or net banking credentials on  our servers.

3. PURPOSES FOR WHICH WE USE YOUR DATA

We process Personal Data for the following purposes: 

A. Order Fulfillment 

  1. Process purchases
  2. Verify transactions
  3. Deliver products
  4. Manage returns, replacements, and refunds
  5. Send transactional communications 

B. Account Management 

  1. Create and maintain accounts
  2. Authenticate users
  3. Manage customer preferences 

C. Customer Support 

  1. Respond to enquiries
  2. Resolve complaints
  3. Improve customer experience 

D. Marketing and Promotions (Based on Consent) 

  1. Send newsletters
  2. Provide promotional offers
  3. Inform users about new products
  4. Conduct surveys and campaigns
  5. Operate referral and loyalty programs 

You may withdraw your marketing consent at any time. 

E. Website Analytics and Improvement 

  1. Understand Platform usage
  2. Improve website performance
  3. Diagnose technical issues
  4. Develop new products and services 

F. Security and Fraud Prevention

  1. Detect suspicious activity
  2. Prevent unauthorized access
  3. Protect customers and the Platform 

G. Legal and Regulatory Compliance 

  1. Comply with applicable laws
  2. Maintain tax and accounting records
  3. Respond to lawful requests from authorities 

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, pixels, SDKs, and similar technologies. 

These technologies help us: 

  1. Operate the Platform
  2. Remember preferences
  3. Measure website performance
  4. Analyze user behavior
  5. Deliver personalized advertising 

You can choose which cookies you allow.

[Accept All Cookies]

[Reject Non-Essential Cookies]

[Manage Preferences]

By clicking “Accept All Cookies,” you consent to the use of analytics and marketing cookies.

Types of cookies used: 

Essential Cookies (Always Active)

Necessary for Platform operation and cannot be disabled. Examples: Account login, Shopping cart functionality, Security and fraud prevention. 

Analytics Cookies (Optional)

Used to understand website usage and improve performance. Examples: Google Analytics, Website performance monitoring. Rentention: Up to 14 months. *Enable Analytics Cookies*

Marketing Cookies (Optional)

Used to measure and personalize advertising and its effectiveness. Examples: Meta Pixel, Google Ads Conversion Tracking. Retention: Up to 12 months. * Enable Marketing Cookies* 

Users may manage cookie preferences through browser settings or our cookie consent tools  where available. Disabling certain cookies may affect website functionality.

5. HOW WE SHARE YOUR DATA

We may share Personal Data only as necessary with: 

A. E-Commerce and Platform Providers 

Such as Shopify for website functionality and order management.

B. Payment Service Providers 

Such as Cashfree for payment processing and fraud prevention. 

C. Logistics Partners 

Such as India Post and Delhivery for delivery and shipment tracking. Shared data may include: 

  1. Name
  2. Mobile number
  3. Shipping address
  4. Order details 

D. Analytics Providers 

Such as Google Analytics. 

Shared information may include: 

  1. Device information
  2. Website activity
  3. Cookie identifiers 

E. Advertising Partners 

Such as Meta and Google. 

Where consent is provided, limited information may be used to measure advertising  effectiveness and provide relevant promotions. 

F. Professional Advisors 

Lawyers, accountants, auditors, consultants, and compliance advisors.

G. Authorities

Government agencies, regulators, law enforcement authorities, courts, and tribunals where  legally required. 

H. Corporate Transactions 

In connection with mergers, acquisitions, restructuring, financing transactions, or sale of assets. We do not sell Personal Data to data brokers. 

6. DATA RETENTION 

We retain Personal Data only for as long as necessary for the purposes described in this Privacy  Policy. 

Category 

Retention Period

Account Information 

Account life + 1 year

Orders and Transaction Records 

8 years

Tax and Invoice Records 

8 years

Customer Support Records 

3 years after closure

Marketing Preferences 

Until consent withdrawal

Recruitment Information 

1 year

Website Analytics Data 

Up to 14 months

Upon expiry of applicable retention periods, Personal Data will be deleted, anonymized, or  securely destroyed unless longer retention is required by law. 

7. YOUR RIGHTS UNDER DPDPA 

Subject to applicable law, you may exercise the following rights: 

Right to Access Information 

You may request details regarding the Personal Data we process about you.

Right to Correction 

You may request correction or updating of inaccurate or incomplete information.

Right to Erasure 

You may request deletion of Personal Data that is no longer required for lawful purposes.

Right to Withdraw Consent 

Where processing is based on consent, you may withdraw such consent at any time.

Right to Grievance Redressal 

You may raise concerns regarding the processing of your Personal Data.

Right to Nominate 

You may nominate another individual to exercise your rights in accordance with applicable law. To exercise these rights, please contact us using the details provided below. 

8. SECURITY OF YOUR DATA 

We implement reasonable technical and organizational safeguards, including: 

  1. Encryption during transmission
  2. Access controls
  3. Authentication measures
  4. Security monitoring
  5. Vendor management controls
  6. Employee confidentiality obligations 

While we strive to protect Personal Data, no method of transmission or storage can be  guaranteed as completely secure. 

9. CHILDREN’S PRIVACY 

The Platform is intended for individuals who are at least eighteen (18) years of age. We do not knowingly collect Personal Data from children.

If we become aware that Personal Data of a child has been collected inadvertently, we will take  reasonable steps to delete such information. 

10. INTERNATIONAL DATA TRANSFERS

We currently intend to store and process Personal Data within India. 

If Personal Data is transferred outside India in the future, such transfers shall be conducted in  accordance with applicable law and with appropriate safeguards. 

11. DATA BREACH RESPONSE 

In the event of a personal data breach that may affect your rights or interests, we will take  reasonable steps to: 

  1. Investigate the incident;
  2. Mitigate potential harm;
  3. Notify affected individuals where required; and
  4. Comply with reporting obligations under applicable law. 

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. 

Updated versions will be posted on the Platform together with the revised effective date. 

Continued use of the Platform following publication of an updated Privacy Policy constitutes  acknowledgment of such changes. 

13. GRIEVANCE OFFICER AND CONTACT DETAILS

For privacy-related requests, complaints, or grievances, please contact: 

Email: hello@drinkburp.com 

Response Timelines

  1. Privacy rights requests: Within 30 days.
  2. Grievance complaints: Within 15 business days. 

If you are not satisfied with our response, you may seek remedies available under applicable law,  including before the Data Protection Board of India, when operational.