Privacy Policy

Himalayan Medicinal & Aromatic Producers Cooperative Ltd ("HMAP", "we", "us") respects your privacy. This page explains what personal information we collect, why, and what your rights are under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Who we are

HMAP is a farmer producer organisation, registration no. 70-DHPM-2026, at Village Manwah, Bhalra Bhaderwah, District Doda, Jammu & Kashmir 182221. For anything about your data, write to [email protected] or call +91 91033 64723.

What we collect

• If you send an enquiry or a membership application on this website: your name, mobile number, email (if given), village, panchayat, district, land area, crops and the message you write.
• If you are a member: the details in the member register: name, father's or husband's name, gender, date of birth, mobile, email, address, the last 4 digits of your Aadhaar, PAN, ration card number, bank name, account number and IFSC, nominee, land records, crop declarations, share certificates, photographs and documents you or our staff upload.
• When you use the website: basic technical information (IP address, browser, pages visited) that our server records to keep the site secure and working.

Why we use it

• To process your membership, issue share certificates and run the society as the law and our by-laws require.
• To buy produce, pay members, and keep accounts, audits and statutory records.
• To answer your enquiries and send you the codes and notices you ask for (for example a password-reset code).
• To keep the website and the member portal secure.

We use your information only for these purposes, and only with your consent or where the law allows it.

What is shown publicly

Only a member's name, photograph, panchayat and main crops can appear on the public Members page, and only if that member has given written consent. A member can withdraw this at any time and it will be removed. Your mobile number, Aadhaar, PAN, bank details, land and share details are never shown publicly.

How we protect it

• PAN, ration card number, bank account number and uploaded documents are stored encrypted.
• We keep only the last 4 digits of Aadhaar. We do not store the full number.
• Staff see only what their role needs, and staff logins use 2-step verification.
• The website uses HTTPS and the server is backed up every night.

No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

Cookies and third parties

We use only the cookies that are necessary: one that remembers your language and one that keeps you logged in to the member portal. We do not use advertising or tracking cookies.

Some pages show content from other services: Google Maps (Contact page), YouTube and other video players, and weather or market-price data. These services may receive your IP address when you open those pages. We use an email service to send codes and notices. We do not sell your information.

How long we keep it

Member records are kept while you are a member and afterwards for as long as the law requires for societies' accounts and audits. Enquiries are kept for up to 2 years. After that, we delete or anonymise the information.

Your rights

You may ask us to:

• show you the personal information we hold about you,
• correct or complete it,
• erase it, where we no longer need it for a legal reason,
• withdraw your consent (for example for the public Members list), and
• nominate someone to exercise these rights if you cannot.

Members can request corrections from the member portal. For anything else, write to [email protected] or use the Grievance Redressal page. If we do not resolve your complaint, you can approach the Data Protection Board of India.

Children

This website is not meant for children. We collect a child's information only through a parent or guardian.

Changes

If we change this policy, the date below changes. Please check it from time to time.