Privacy

Last updated 16 October 2026.

Wholly Forest (whollyforest.com) collects only what we need to fulfill honey orders to an Indian address: name, email, mobile number, and delivery address. Payment card data is handled by PayU and is not stored on our servers. Checkout is guest-only. We do not create customer login accounts.

How we use data

Order processing, dispatch, invoices, and tracking messages
Unfinished checkouts: once you type a valid mobile number at checkout, we save it with the pack you chose and any details you have typed, so we can help on WhatsApp if the order does not go through. Email is optional.
Checkout autofill from details saved in your browser on this device (not synced to other phones or computers)
Approximate city, read from our hosting provider's edge headers on each page request, used only to show your delivery estimate. It is not stored, not linked to you, and not shared with any third party
Aggregate page-view counts via Vercel Web Analytics, run by the hosting provider that already serves this page. It sets no cookie, stores no session identifier, and builds no profile of you. We see totals such as which pages were viewed, not individual visitors
Ad measurement via the Meta Pixel on our public pages, so we can tell which Facebook and Instagram ads lead to orders. It records page and product views, checkout page visits, payment steps, and completed orders with the order value, and sets Meta's _fbp cookie in your browser. When an order is confirmed, our server also reports that purchase to Meta with the same order value, plus your IP address and browser type, so the order is counted once even if an ad blocker stops the pixel. When you click Pay, we save your IP address and browser type with your checkout details. We use them only for this report, so a purchase still counts when PayU confirms it to our server directly. With a confirmed order we also send Meta your mobile number and, if you gave one, your email, only as one-way SHA-256 codes (never in readable form), so Meta can match the order to the ad you clicked. We never send your name or address to Meta. If you arrived from an ad or a tagged link, we keep that link's campaign tags (utm and fbclid) with your order. You can opt out through your Facebook ad settings or by blocking third-party cookies. The admin portal does not load it
Site and ad measurement via the Google tag (Google Analytics and Google Ads) on our public pages, so we can see how visitors find us and which Google ads lead to orders. It records page visits, checkout page visits, and completed orders with the order value, and sets Google's _ga and _gcl_au cookies in your browser. We do not send your name, email, phone number, or address to Google. You can opt out with the Google Analytics opt-out browser add-on or by blocking third-party cookies. The admin portal does not load it
Fraud and bot checks via Cloudflare Turnstile on paid checkout
Creator program: if a creator's link brought you here, your browser keeps that creator's code for 30 days and we save it with your order so we can pay them a commission. Creators who register at /creators give us their name, Instagram handle, follower count, mobile number, delivery address, and optionally email and UPI ID. We use these only to run the program, ship their free jar, pay commissions, and contact them about it

Who we share with

Vercel (hosting and aggregate page-view counts), Meta Platforms (ad measurement through the Meta Pixel), Google (analytics and ad measurement through the Google tag), Supabase (order database), PayU (checkout), Resend (order email), Twilio (WhatsApp/SMS operations), Cloudflare Turnstile (bot checks), and courier partners (Delhivery, DTDC, Blue Dart, and similar) for AWB tracking. We do not sell customer lists or use the order book for unrelated advertising networks.

Retention and rights

Order records are kept for fulfillment, accounting, and dispute handling. Email help@whollyforest.com to ask for a copy or deletion of your customer profile, subject to records we must keep for tax or payment disputes.

Contact for privacy

Wholly Forest, Roorkee, Uttarakhand 247667, India. WhatsApp +91 82642 32209. Security reports: security.txt.