Last updated: [ADD DATE]
Template — legal review required. This policy is a starting framework for an Indian business. Have it reviewed by a qualified lawyer, including for compliance with the Digital Personal Data Protection Act, 2023 and its rules, the Information Technology Act, 2000 and related rules, before publishing.
Who we are
This website is operated by [ADD COMPANY / LEGAL ENTITY NAME], [ADD REGISTERED OFFICE ADDRESS] (“Positive Ayurveda”, “we”, “us”).
Information we collect
- Information you give us: name, email, mobile number, city, the product you are interested in and your message when you use our contact or enquiry forms; your name and email when you subscribe to our newsletter.
- Order information: [ADD IF YOU SELL DIRECTLY — delivery address, order details; payment details are processed by the payment provider].
- Technical information: device and browser type, pages visited and approximate location derived from IP address, collected through cookies and analytics if enabled.
Contact forms
We use the information you submit only to respond to your enquiry and provide the information or service you requested. Please do not share health records or sensitive medical details through our forms.
Cookies
We use essential cookies to make the site work. If analytics is enabled, analytics cookies help us understand how the site is used. You can block or delete cookies in your browser settings. [ADD COOKIE CONSENT APPROACH — legal review]
Analytics
We may use [ADD ANALYTICS PROVIDER, e.g., Google Analytics 4] to measure traffic in aggregate. We do not use analytics data to identify you personally.
Third-party services
We may use service providers for website hosting, email delivery, form handling, payments and shipping. They process data on our behalf under appropriate agreements. Links to marketplaces such as Amazon or Flipkart take you to sites governed by their own privacy policies.
Retention
We keep enquiry data for [ADD RETENTION PERIOD] and newsletter data until you unsubscribe, unless a longer period is required by law.
Security
We use reasonable technical and organisational measures, including encrypted (HTTPS) connections, to protect your information. No method of transmission over the internet is completely secure.
Your choices and rights
You may ask to access, correct or erase your personal data, withdraw consent, or unsubscribe from emails at any time. Contact our Grievance Officer below. [LEGAL REVIEW: confirm rights and response timelines under applicable law]
Grievance Officer and contact
Name: [ADD GRIEVANCE OFFICER NAME]
Email: [ADD EMAIL]
Address: [ADD REGISTERED OFFICE ADDRESS]
Changes
We may update this policy and will post the revised version on this page with a new “last updated” date.