Madhukosha

Consent Policy and Consent Notice

Operated by Madhukosha Apiary Services Private Limited

Version 1.0 | Effective Date: 1 September 2026 | Last updated: 1 September 2026 | Jurisdiction: Bengaluru, Karnataka, India

This Consent Policy explains how Madhukosha Apiary Services Private Limited (“Madhukosha”, “we”, “us”) asks for, records, honours and withdraws consent to the processing of personal data under section 6 of the Digital Personal Data Protection Act, 2023 and Rule 3 of the Digital Personal Data Protection Rules, 2025. Part A is an internal standard that binds us. Part B is the Consent Notice that we present to you, and which stands on its own. This Policy forms part of, and must be read with, the Privacy Policy, the Cookie Policy and the Terms of Use.

Purpose and Scope of this Policy

This Policy applies to every processing activity for which we rely on your consent. It does not apply to processing we carry out on a legitimate use under section 7 of the Digital Personal Data Protection Act, 2023, which is described in the Privacy Policy.
We rely on consent for exactly three things: analytics cookies and similar technologies; marketing and promotional communications; and the use of your contact details to build advertising audiences on Meta and Google platforms. Everything else we do rests on section 7(a), because you voluntarily provided the data for the purpose concerned.

The Standard We Apply

Free. We do not make the supply of a quotation, the sale of a PolliHab, delivery, or any support conditional on your consent to marketing, advertising audiences or analytics. You may decline all three and still buy from us.
Specific. We ask separately for each purpose. We do not obtain a single consent covering marketing and analytics together, and we do not treat consent to one purpose as consent to another.
Informed. We give you the Consent Notice in Part B, in clear and plain language, before or at the moment we ask for your consent.
Unconditional and unambiguous, by clear affirmative action. Consent is given by ticking a box that is not pre-ticked, or by selecting “Accept” on our cookie banner. We do not treat silence, inaction, scrolling, continued browsing or a pre-ticked box as consent.
Limited to what is necessary. We ask only for the personal data that the stated purpose actually requires, and we do not extend the consent to any further data.
Withdrawable as easily as it was given. Every route by which consent can be given has a corresponding route by which it can be withdrawn, in no more steps.
Provable. Where consent is the basis of processing, the burden of proving that notice was given and consent was obtained rests on us. We therefore keep a consent record as described in clause 5.

Where and How We Ask

Consent point	Where it appears	Mechanism	What it covers
Marketing and advertising consent	Immediately below the enquiry or order form fields, as a distinct block separated from the submit action	A single un-pre-ticked checkbox, with the Consent Notice in Part B displayed beside it or behind a link that opens it in place	Marketing and promotional communications by email, WhatsApp and telephone; and inclusion of the mobile number and email address in advertising audiences on Meta and Google platforms
Analytics cookies	A cookie banner shown on first visit, before any non-essential cookie is set	“Accept analytics” and “Reject” presented with equal prominence, plus a link to manage preferences	Google Analytics cookies and similar technologies, as described in the Cookie Policy

No dark patterns. The accept and reject options are given equal visual weight. We do not pre-select any option, do not obstruct the reject path, do not repeat the request after it has been declined in the same session, and do not use confirmshaming language.
No consent for children. The Platform is not directed at children and we do not process the personal data of a child. Accordingly we do not operate a verifiable parental consent flow. If we ever direct any part of the Platform at children, this Policy must be revised before that happens.

Withdrawal

Consent given for	How to withdraw	Effect and timing
Marketing emails	Click the unsubscribe link at the foot of any marketing email	We stop within seven (7) days
Marketing on WhatsApp or telephone	Reply “STOP” to any marketing WhatsApp message, or tell us on a call, or email us	We stop within seven (7) days
Advertising audiences on Meta and Google	Email us with the subject line “Withdraw advertising consent”	We remove your contact details from the audience lists we control and instruct the platform to delete them, within seven (7) days
Analytics cookies	Select “Manage preferences” on our cookie banner and switch analytics off, and clear cookies in your browser	Immediate for future collection

Withdrawal does not affect the lawfulness of processing carried out before withdrawal. On withdrawal we cease the processing that depended on the consent and, unless retention is required by law or to establish or defend a legal claim, we erase the personal data concerned and cause our Data Processors to do the same.
All withdrawal requests may in every case be sent to hello@madhukosha.org. Withdrawing consent does not stop service and transactional messages about a quotation, payment or delivery, which do not depend on consent.

Consent Records We Keep

For every consent given or withdrawn we record: the identifier of the Data Principal (mobile number or email address); the purpose consented to; the version of the Consent Notice displayed; the date and time; the method of collection; and, where applicable, the date, time and method of withdrawal.
The consent record is kept separately from the record of acceptance of the Terms of Use. Acceptance of the Terms of Use is not consent under the Digital Personal Data Protection Act, 2023, and neither record substitutes for the other.
Consent records are retained for as long as the consent is in force and for three (3) years after withdrawal, so that we can prove what was asked and what was answered.

Review

This Policy, and the Consent Notice in Part B, must be reviewed whenever a new purpose, a new processor, a new communication channel or a new advertising platform is introduced, and in any event once every twelve (12) months.
A new purpose requires a fresh Consent Notice and fresh consent. Existing consents do not carry over to a new purpose.

Part B — Consent Notice

This notice is presented independently of every other document. It is understandable on its own. It is given under Rule 3 of the Digital Personal Data Protection Rules, 2025.

Who is asking. Madhukosha Apiary Services Private Limited, 305, 1st Floor, Heritage Street, 6th Block, Banashankari 6th Stage, Bengaluru, Karnataka 560060, India. Contact: hello@madhukosha.org.

What we are asking for. Your permission to use the personal data itemised below for the purposes stated below. Ticking the box is optional. If you do not tick it, we will still answer your enquiry, send you a quotation, sell you a PolliHab and deliver it.

The personal data concerned, itemised. Your name; your mobile number; your email address.

The purposes, and what they enable.

Purpose	What this enables
Marketing and promotional communications	We may send you emails, WhatsApp messages and telephone calls about the PolliHab, about new Madhukosha products, about seasonal pollination guidance, and about offers. Without this permission you will receive only messages about your own enquiry, quotation, payment and delivery.
Advertising audience targeting on Meta and Google	We may upload your mobile number and email address to Meta (Facebook, Instagram and WhatsApp) and to Google, so that those platforms can show you Madhukosha advertising, and so that they can find other people similar to you to show it to. Your contact details will be transferred to those companies, which process data in the United States and Ireland, for this purpose.

How long we will keep it for these purposes. For as long as your permission stands. If you withdraw it, we stop within seven (7) days and delete the data used for these purposes unless the law requires us to keep it. We keep a record of the permission itself for three (3) years after withdrawal, so that we can show what you agreed to.

How to withdraw your permission — as easily as you gave it. Click the unsubscribe link in any marketing email; or reply “STOP” to any marketing WhatsApp message; or email hello@madhukosha.org with the subject “Withdraw consent”. Full details are at https://madhukosha.org/consent-policy.

How to exercise your rights. You may ask us for a summary of the personal data we hold about you, ask us to correct or complete it, ask us to erase it, or nominate someone to exercise these rights for you. Email hello@madhukosha.org with the subject “Data Principal Request”. We reply within thirty (30) days. Full details are at https://madhukosha.org/privacy-policy.

How to complain. If you are not satisfied with our response, you may complain to the Data Protection Board of India. Details of how to do so are published by the Board and are linked at https://madhukosha.org/privacy-policy.

☐ I agree that Madhukosha may use my name, mobile number and email address for marketing and promotional communications, and for advertising audience targeting on Meta and Google, as described above.

← Back to Madhukosha