PRIVACY POLICY

Guruved Ayurveda Healthcare

1. Introduction

1.1 Guruved Ayurveda Healthcare, a partnership firm registered under the Indian Partnership Act, 1932, having its principal place of business at Rampura Road, Near Aman Traders, Bhawanigarh, District Sangrur, Punjab 148026 ("Guruved Ayurveda", "we", "us" or "our"), operates the website www.guruved.in ("Website").

1.2 This Privacy Policy sets out the manner in which personal data is collected, used, disclosed, retained and protected, and the rights available to you in respect of such data.

1.3 This Policy is published in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and has been framed having regard to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as the provisions thereof are brought into force.

1.4 For the purposes of the Digital Personal Data Protection Act, 2023, we act as a Data Fiduciary and you are the Data Principal.

1.5 By using the Website or placing an order, you consent to the collection and processing of personal data in the manner described in this Policy. If you do not consent, you must not use the Website.

2. Application

This Policy applies to personal data collected through the Website, including its checkout, account and product recommendation functions; through our customer service channels, including electronic mail, telephone and messaging applications; and through marketing communications and social media pages operated by us. It does not apply to third party websites or services to which the Website may link, which are governed by their own privacy policies.

3. Categories of Personal Data Collected

3.1 Data furnished by you directly:

(a) Identity particulars, being your name and, where voluntarily furnished, your date of birth;

(b) Contact particulars, being your electronic mail address, mobile number, billing address, delivery address and pin code;

(c) Transaction particulars, being the Products ordered, order value, order history, invoice particulars and, where a tax invoice is sought, your Goods and Services Tax identification number;

(d) Payment reference particulars, being the mode of payment, transaction identifier, payment status and such masked card or account identifiers as are furnished to us by the Payment Partner;

(e) Account particulars, being your username, password (retained in encrypted form), saved addresses and saved preferences;

(f) Correspondence, being electronic mail, chat and messaging records, call records and any information volunteered by you in the course of customer service interactions;

(g) User content, being reviews, ratings, photographs and testimonials submitted by you;

(h) Marketing preferences, being your subscription and consent elections.

3.2 Data collected automatically: device and browser particulars, operating system, internet protocol address and the approximate location derived therefrom, pages and Products viewed, duration of visit, referring and exit pages, clickstream data, and cookie identifiers as described in Clause 8.

3.3 Data received from third parties: delivery status and address verification data from Delivery Partners; payment status and risk indicators from Payment Partners; aggregated campaign data from advertising platforms; and information you make available through interaction with our social media pages.

3.4 Lifestyle preference information. Certain optional features of the Website, including a product recommendation questionnaire, invite you to indicate general lifestyle preferences such as dietary habits, exposure to sunlight or wellness objectives. The furnishing of such information is entirely voluntary and is not a condition of purchase. Such information is used solely to indicate which of our Products may correspond to the preferences stated. We neither seek nor require medical records, diagnoses, prescriptions, laboratory results or particulars of any medical condition or treatment, and you are requested not to enter such information in any field on the Website or in correspondence with us. Where such information is nonetheless received, it shall be deleted unless its retention is required for a lawful purpose.

3.5 Children. The Website and the Products are directed at adults. We do not knowingly collect the personal data of any person below eighteen years of age. Where we become aware that such data has been collected without verifiable parental or guardian consent, the same shall be deleted. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

4. Data Not Collected

Consistent with directions issued by the Reserve Bank of India, we do not collect or retain your complete card number, card verification value, card personal identification number, Unified Payments Interface personal identification number, net banking password or any one-time password. Such particulars are entered directly within the secure environment of the Payment Partner. No employee or representative of the Firm shall request such particulars from you, and any such request should be treated as fraudulent and reported to us.

5. Purposes of Processing

Personal data is processed for the following purposes:

(a) performance of the contract of sale, including processing of payment, generation of invoices, arrangement of dispatch and delivery, and administration of returns, refunds and replacements;

(b) communication with you in relation to your order, including confirmation, verification of cash on delivery orders, dispatch and delivery notifications, and follow up in respect of failed deliveries;

(c) administration of your account, including authentication and maintenance of order history;

(d) provision of customer service and redressal of grievances;

(e) improvement of the Website, the Products and our services, including analytics, diagnosis of errors and internal research;

(f) transmission of marketing communications, where you have consented to receive the same;

(g) personalisation of your experience on the Website;

(h) prevention and detection of fraud and misuse, including fraudulent orders, repeated refusal of cash on delivery consignments and abuse of promotional codes;

(i) compliance with law, including the maintenance of tax and food safety records, response to lawful requests of any competent authority, and the establishment or defence of legal claims.

Personal data is processed on the basis of your consent and on such other legitimate bases as are permitted under applicable law, including the performance of the contract concluded upon placing an order and compliance with legal obligations to which we are subject.

6. Marketing Communications

6.1 Promotional communications by electronic mail, short message service or messaging application are transmitted only where you have subscribed or otherwise consented.

6.2 Communications relating to an order placed by you, including confirmation, dispatch, delivery, payment and delivery exception notifications, are transmitted in performance of the contract and do not constitute marketing communications.

6.3 Consent to marketing communications may be withdrawn at any time by using the unsubscribe facility in any marketing electronic mail, by replying "STOP" to any marketing message, or by writing to [support@yourdomain.in].

6.4 Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal, nor shall it discontinue communications relating to a pending order.

7. Disclosure of Personal Data

7.1 We do not sell personal data.

7.2 Personal data is disclosed only to the following categories of recipients and only to the extent necessary:

(a) Payment Partners, being [name of gateway], for the processing of payments and refunds and for risk screening;

(b) Delivery Partners and courier aggregators, being [name], for delivery, tracking, handling of delivery exceptions and reverse pick-up;

(c) communication service providers, for the transmission of order and marketing communications;

(d) analytics and advertising service providers, including Google Analytics and Meta, in respect of pseudonymised identifiers, device and usage data and conversion events;

(e) technology and hosting service providers, including Shopify Inc., for the operation of the Website and checkout;

(f) professional advisers engaged in the provision of accounting, taxation, audit or legal services;

(g) governmental and regulatory authorities, where required by law or pursuant to lawful process;

(h) any successor entity, in the event of restructuring, admission of partners, conversion of the Firm, amalgamation or transfer of the business, subject to this Policy continuing to apply.

7.3 Service providers are required to process personal data only in accordance with our instructions, to maintain appropriate security safeguards, and not to use such data for their own unrelated purposes.

8. Cookies and Similar Technologies

8.1 Cookies and similar technologies are used to operate the Website, to retain your cart and preferences, to measure traffic, and, where you consent, to measure and improve advertising.

8.2 The categories employed are: strictly necessary cookies, which support the cart, checkout, security and session management and which cannot be disabled; analytics and performance cookies, including Google Analytics; and marketing cookies, including the Meta pixel.

8.3 Non-essential cookies may be managed or refused through the consent notice presented on the Website or through your browser settings. Disabling strictly necessary cookies may prevent the Website from functioning.

8.4 Certain analytics and advertising providers may combine data collected on the Website with data held by them from other sources, in accordance with their own privacy policies.

9. Transfer Outside India

Certain service providers, including hosting, analytics and communication providers, may process or store data on servers situated outside India. Where such transfer occurs, we take reasonable steps to ensure that the data continues to be afforded protection comparable to that provided under this Policy, and we observe such restrictions on transfer to specified territories as may be notified by the Central Government.

10. Retention

10.1 Personal data is retained only for so long as is necessary for the purposes for which it was collected, and thereafter in accordance with the following:

10.2 Where personal data is no longer required and no legal obligation requires its retention, it shall be erased or irreversibly anonymised.

11. Security

11.1 We implement reasonable security practices and procedures, including transport layer encryption across the Website, processing of payments exclusively through Payment Partners certified to the Payment Card Industry Data Security Standard, restriction of internal access on a need-to-know basis, encrypted storage of account passwords, and periodic review of access rights and of the security posture of service providers.

11.2 No method of transmission or storage is entirely secure, and absolute security cannot be guaranteed. You remain responsible for maintaining the confidentiality of your credentials.

11.3 In the event of a personal data breach, affected persons and the Data Protection Board of India shall be notified in such manner and within such time as applicable law requires.

12. Rights of the Data Principal

12.1 Subject to applicable law, you are entitled to obtain a summary of the personal data held by us and of the processing undertaken; to require the correction or updating of inaccurate or incomplete data; to require erasure of personal data, save where its retention is required for a lawful purpose; to withdraw consent previously given, with the same facility with which it was given; to seek redressal of grievances in the manner set out in Clause 14; and to nominate another person to exercise your rights in the event of your death or incapacity.

12.2 Requests may be addressed to gurvedayurveda1@gmail.com from the electronic mail address registered with us. We may require reasonable verification of identity before acting upon a request. Requests shall be responded to within such time as applicable law prescribes and in any event without undue delay.

12.3 Where you are dissatisfied with our response, you may approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.

13. Third Party Links

The Website may link to third party websites, including social media platforms and review services. We are not responsible for the content, security or data practices of such websites, and you are advised to review their privacy policies before furnishing personal data.

14. Grievance Officer

Name: Gurwinder Singh

Electronic mail: gurvedayurveda1@gmail.com

Telephone: +91 76967 08534

Address: Rampura Road, Near Aman Traders, Bhawanigarh, District Sangrur, Punjab 148026

Working hours: Monday to Saturday, [10:00 a.m. to 6:00 p.m.], excluding public holidays

Complaints shall be acknowledged within forty-eight hours of receipt and shall ordinarily be resolved within one month of receipt.

15. Amendment

This Policy may be amended from time to time to reflect changes in our practices or in applicable law. The amended Policy takes effect upon publication on the Website, and the date of last revision shall be updated accordingly. Where the amendment is material, reasonable steps shall be taken to bring it to your notice.