Privacy Policy | Aurvadic

Introduction

This Privacy Policy explains how Aurvadic Wellness Private Limited ("Aurvadic", "we", "us") handles personal data when you visit our website or buy from us. We process personal data in line with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

Information we collect

We collect only what we need to run the store and serve you:

Account details: your name, email address, mobile number and an encrypted (hashed) password.
Order details: delivery addresses, items purchased, order notes and communication with our support team.
Payment details: payment status and transaction references. Card, UPI and bank details are handled by our payment gateway and are never stored on our servers.
Technical data: IP address, device and browser type, and cookies required for login, cart and security.

How we use your information

We use personal data to:

Process, deliver and support your orders, including sending order and delivery updates.
Manage your account, saved addresses and wishlist.
Prevent fraud, secure our systems and meet legal, tax and accounting obligations.
Send newsletters or offers only if you have subscribed. You can unsubscribe at any time.

Sharing with third parties

We share data only with service providers who help us operate the store, such as payment gateways, courier and logistics partners, email providers and hosting services. They may use it only to provide their services to us. We do not sell your personal data.

We may disclose information where required by law or to protect our rights, customers or the public.

Cookies

We use essential cookies to keep you signed in, remember your cart and protect forms against misuse. These cookies are necessary for the website to work. We do not use cookies to sell advertising.

Data security and retention

Passwords are stored as salted hashes, connections are encrypted with HTTPS, and access to customer data is restricted to authorised staff. We keep data only as long as needed for the purposes above or as required by law (for example, invoice records).

Your rights

You can access and update your profile and addresses from My Account. To request correction or deletion of your data, or to withdraw consent, email care@example.com. We may need to retain some records to meet legal obligations.

Grievance Officer

If you have a concern about how your data is handled, contact our Grievance Officer: Grievance Officer, grievance@example.com, Wellness House, MG Road, Bengaluru, Karnataka 560001, India. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.