Privacy policy
This Privacy Policy applies to personal data processed through:
- The official Swasthya Veda website
- Mobile or tablet versions of our website
- Customer accounts created on our store
- Online checkout and order-processing systems
- Customer-care telephone calls
- Email communications
- SMS and WhatsApp communications
- Social-media messages sent directly to our official accounts
- Product reviews, surveys, contests, and feedback forms
- Advertising and marketing campaigns
- Returns, refunds, replacements, and grievance processes
- Any other official digital service that links to this Privacy Policy
This Privacy Policy does not automatically apply to independently operated third-party websites, applications, payment providers, social-media platforms, courier companies, marketplaces, or services that have their own privacy practices.
When you leave our website or interact directly with a third party, you should review that third party’s privacy policy.
2. Meaning of Personal Data
For the purpose of this Privacy Policy, “personal data” means information relating to an identifiable individual.
Personal data may include information that directly identifies you, such as your name or telephone number, as well as information that may identify you when combined with other data, such as an IP address, order history, device identifier, or delivery address.
Information that has been irreversibly anonymised so that it cannot reasonably identify an individual may not be treated as personal data under applicable law.
3. Personal Data We May Collect
Depending on how you interact with Swasthya Veda, we may collect the following categories of information.
3.1 Identity and account information
This may include:
- Full name
- Username or account name
- Account identifier
- Password in protected or encrypted form
- Date of birth, if voluntarily provided and relevant
- Gender, if voluntarily provided
- Profile information
- Account preferences
- Records of account creation, login, or authentication
We do not intend to collect identity information that is unnecessary for operating our store.
3.2 Contact information
This may include:
- Mobile number
- Telephone number
- Email address
- Billing address
- Shipping or delivery address
- City, district, state, country, and PIN code
- Preferred contact method
- WhatsApp number
- Alternative delivery contact supplied by you
If you provide another person’s name, telephone number, or address for delivery, you confirm that you are authorised to provide that information for the stated purpose.
3.3 Order and transaction information
This may include:
- Products ordered
- Product quantities
- Order value
- Coupon or discount information
- Order date and time
- Billing and delivery information
- Payment status
- Payment method
- Transaction reference
- Invoice details
- Tax-related information
- Delivery and tracking status
- Cancellation, return, replacement, and refund history
- Cash on Delivery verification information
- Fraud-prevention or transaction-risk indicators
3.4 Payment information
Payments may be processed through third-party payment gateways, banks, UPI services, wallet providers, or other authorised payment processors.
We may receive limited payment-related information, such as:
- Payment status
- Payment method
- Transaction reference number
- Name associated with the payment
- Bank or card network
- Limited or masked payment details
- Refund destination or status
Swasthya Veda does not intend to directly collect or store your complete card number, CVV, UPI PIN, card PIN, internet-banking password, OTP, or complete banking credentials.
You should never share such confidential credentials with our customer-support team.
3.5 Customer-support and communication information
When you contact us, we may collect:
- Your name and contact details
- Order number
- Details of your question or complaint
- Emails, messages, or chat history
- Call records or call recordings where legally permitted and appropriately notified
- Photographs and videos submitted for damaged or incorrect orders
- Unboxing videos
- Product batch or expiry information
- Supporting documents
- Feedback, reviews, and survey responses
- Information necessary to verify the customer or order
3.6 Technical and device information
When you use our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Device identifiers
- Screen resolution
- Language preference
- Time zone
- Referring website
- Pages viewed
- Links selected
- Date and time of access
- Session information
- Website-performance data
- Approximate location derived from an IP address
- Security, fraud, and error logs
We may use this information to operate, protect, analyse, and improve our website.
3.7 Marketing and preference information
This may include:
- Consent to receive promotional emails
- Consent to receive SMS or WhatsApp marketing
- Communication preferences
- Products viewed or added to a cart
- Offers selected
- Coupon use
- Responses to advertisements
- Campaign interactions
- Survey and competition entries
- Interests inferred from interactions with our store, where legally permitted
3.8 Information from social-media platforms
If you communicate with us or interact with our content through a social-media platform, we may receive information made available through that platform, such as:
- Your public profile name
- Username
- Profile photograph
- Message content
- Comments or reactions
- Information permitted by your platform settings
Your use of the social-media platform remains subject to that platform’s own privacy policy and settings.
3.9 Information from service providers and partners
We may receive information from:
- Payment processors
- Courier and logistics partners
- Ecommerce-platform providers
- Fraud-prevention services
- Marketing and analytics providers
- Customer-support services
- Advertising platforms
- Authorised marketplaces
- Publicly available or legally accessible sources
We use such information only for appropriate business, security, contractual, or legal purposes.
4. How We Collect Personal Data
We may collect personal data:
4.1 Directly from you
For example, when you:
- Create an account
- Place an order
- Enter a delivery address
- Make or attempt a payment
- Subscribe to offers
- Contact customer support
- Request a cancellation or refund
- Submit a review
- Complete a survey
- Enter a promotion
- Exercise a privacy right
- Communicate with us through WhatsApp, SMS, telephone, email, or social media
4.2 Automatically
Some information may be collected automatically when you use our website through cookies, logs, pixels, analytics tools, security technologies, or similar systems.
4.3 From third parties
We may receive data from third parties involved in providing services requested by you, including payment confirmation from payment providers and delivery updates from courier partners.
5. Purposes for Which We Use Personal Data
We may use personal data for the following purposes.
5.1 Operating our website
We may process information to:
- Display website content
- Maintain website functionality
- Remember user preferences
- Enable shopping-cart functions
- Create and manage customer accounts
- Authenticate users
- Prevent unauthorised access
- Diagnose technical problems
- Maintain website security
5.2 Processing and fulfilling orders
We may use personal data to:
- Receive and confirm orders
- Verify customer and order details
- Process payments
- Generate invoices
- Pack and dispatch products
- Arrange delivery
- Send order notifications
- Confirm COD orders
- Track shipments
- Manage delivery attempts
- Handle cancellations
- Process returns, replacements, and refunds
5.3 Customer support
We may process information to:
- Respond to questions
- Investigate complaints
- Verify reported order issues
- Resolve payment or delivery problems
- Review damaged, missing, or incorrect-product claims
- Provide account assistance
- Maintain records of customer communications
- Improve customer-service quality
5.4 Safety, security, and fraud prevention
We may use information to:
- Detect suspicious transactions
- Prevent payment fraud
- Identify false COD orders
- Protect customer accounts
- Prevent abuse of promotions
- Investigate unauthorised access
- Protect our website and business systems
- Enforce our policies
- Establish, exercise, or defend legal claims
5.5 Website analytics and improvement
We may analyse usage information to:
- Understand how customers use our website
- Identify popular pages and products
- Diagnose website errors
- Improve design and navigation
- Measure website performance
- Develop new features
- Improve product selection and store operations
Where practical, we may use aggregated or anonymised information for analytics.
5.6 Marketing and promotional communication
Where permitted and where required consent has been obtained, we may use contact and preference information to send:
- Product announcements
- Promotional offers
- Coupon codes
- Sale notifications
- Abandoned-cart reminders
- Educational wellness content
- Customer surveys
- Loyalty or referral information
- Relevant advertising
Customers can withdraw consent for optional marketing communications at any time through the unsubscribe option or by contacting us.
Service communications relating to an existing order, payment, delivery, refund, security issue, or policy update may continue even if a customer opts out of promotional messages.
5.7 Legal and regulatory compliance
We may process and retain data to:
- Maintain invoices and transaction records
- Comply with accounting and taxation requirements
- Respond to lawful requests
- Meet consumer-protection obligations
- Cooperate with courts, regulators, and authorities
- Detect and report unlawful conduct
- Protect the rights, safety, and property of customers, our business, or others
6. Legal Grounds for Processing
Depending on the circumstances and applicable law, we may process personal data based on:
- Your consent
- Your voluntary provision of information for a specified purpose
- The need to process an order or provide a requested service
- Compliance with a legal obligation
- Prevention and investigation of fraud or security incidents
- Establishment, exercise, or defence of legal claims
- Certain legitimate uses permitted by applicable law
- Another lawful basis available under applicable legislation
When processing depends on consent, you may withdraw consent. Withdrawal will not make earlier lawful processing invalid.
Withdrawal may affect our ability to provide an optional feature. It may not prevent processing needed to complete an existing order, issue a refund, comply with law, prevent fraud, or retain legally required records.
7. Cookies and Similar Technologies
Our website may use cookies, pixels, tags, local storage, analytics tools, and similar technologies.
Cookies are small data files stored on or accessed through a user’s device. They may support website functions, remember preferences, measure performance, protect the store, or assist with advertising.
7.1 Essential cookies
Essential cookies may be necessary to:
- Operate the website
- Maintain shopping-cart contents
- Process checkout
- Authenticate users
- Prevent fraud
- Maintain security
- Remember privacy choices
Disabling essential cookies may prevent parts of the website from functioning correctly.
7.2 Functional cookies
Functional cookies may remember choices such as language, region, account preferences, and other settings.
7.3 Analytics cookies
Analytics technologies may help us understand:
- Number of website visitors
- Pages visited
- Time spent on pages
- Traffic sources
- General user journeys
- Website errors and performance
7.4 Advertising cookies
Where used and legally permitted, advertising technologies may help:
- Measure advertising performance
- Avoid displaying the same advertisement excessively
- Understand campaign interactions
- Display potentially relevant advertisements
Where required, non-essential cookies will be used only after an appropriate choice or consent is obtained.
You may manage cookies through any consent tool provided on the website or through browser settings. Disabling certain cookies may reduce website functionality.
8. Abandoned Cart Communications
If you begin checkout, provide contact details, and do not complete an order, we may use the information to:
- Preserve your cart
- Diagnose checkout problems
- Send a limited reminder
- Offer customer support
- Measure checkout performance
Promotional abandoned-cart communications will be sent only where legally permitted. You may opt out of such messages through the available unsubscribe method.
9. Email, SMS, Telephone and WhatsApp Communications
We may communicate with customers through email, telephone, SMS, or WhatsApp for:
- Order confirmation
- COD verification
- Payment updates
- Delivery and tracking
- Failed-delivery assistance
- Return or refund updates
- Customer-support responses
- Security alerts
- Policy or service updates
- Promotions where permitted
Communications through WhatsApp and other platforms may also be subject to those platforms’ privacy practices.
Customers should verify that communications originate from our official contact details. We will never request an OTP, UPI PIN, card PIN, CVV, or banking password.
10. Disclosure and Sharing of Personal Data
We may share personal data only when reasonably necessary for the purposes described in this Privacy Policy.
10.1 Payment providers
We may share transaction information with payment gateways, banks, UPI providers, card networks, wallet providers, and fraud-prevention services.
10.2 Courier and logistics partners
We may share the recipient’s name, mobile number, address, PIN code, order reference, COD amount, and delivery instructions with courier partners.
10.3 Technology providers
We may use ecommerce, website-hosting, cloud-storage, analytics, security, database, messaging, and customer-support providers.
10.4 Marketing and advertising partners
Where permitted, limited information may be shared with advertising and marketing services to measure campaigns or display advertisements.
Customers can manage marketing preferences and applicable cookie choices.
10.5 Professional advisers
Information may be shared with accountants, auditors, lawyers, insurers, consultants, and other professional advisers where reasonably necessary.
10.6 Government and legal authorities
We may disclose information:
- To comply with applicable law
- In response to a lawful court or government request
- To investigate suspected fraud or unlawful activity
- To protect rights, safety, or property
- To establish or defend legal claims
10.7 Corporate transactions
If our business is reorganised, merged, acquired, financed, transferred, or sold, relevant information may be disclosed to professional advisers and prospective or actual transaction parties, subject to appropriate confidentiality and legal safeguards.
We do not sell personal data merely for unrelated third-party commercial use.
11. Third-Party Websites and Services
Our website may contain links to third-party websites, payment services, social-media platforms, or other external services.
We do not control the privacy practices, security, content, or availability of independently operated third-party services. Accessing an external link is at the user’s discretion and subject to the external service’s own terms and privacy policy.
The inclusion of a third-party link does not necessarily mean that we endorse every practice of that party.
12. Data Storage and International Processing
Personal data may be stored or processed using servers, cloud providers, technology providers, or service partners located in India or another permitted jurisdiction.
When personal data is processed outside the individual’s location, we will take reasonable steps to ensure that the processing is conducted in accordance with applicable legal requirements and appropriate contractual or security safeguards.
We may restrict a service provider’s access to the information reasonably necessary for the authorised service.
13. Data Security
We take reasonable technical, organisational, and administrative measures intended to protect personal data from:
- Unauthorised access
- Unauthorised disclosure
- Alteration
- Misuse
- Accidental loss
- Destruction
- Fraud
- Security incidents
Depending on the nature of the information and system, measures may include:
- Access controls
- Role-based permissions
- Password protection
- Encryption or secure transmission
- Tokenisation or masking
- Security monitoring
- Logging
- Backups
- Restricted administrative access
- Service-provider contractual obligations
- Employee or contractor confidentiality requirements
- Incident-response procedures
However, no website, network, database, electronic transmission, or storage method can be guaranteed to be entirely secure.
Customers are responsible for maintaining the confidentiality of their passwords, devices, and account credentials. Please notify us immediately if you suspect unauthorised access to your account.
14. Personal Data Breaches
If we become aware of a personal-data breach, we will investigate and take appropriate measures to contain, assess, and remediate the incident.
Where required by applicable law, we will provide information about the breach to affected individuals and the appropriate authority in the required form and manner.
Customers should immediately report suspected fraudulent communications, unauthorised account access, or misuse of their information to [SECURITY OR PRIVACY EMAIL].
15. Data Accuracy
We rely on customers to provide accurate and current information.
Customers should ensure that their:
- Name is correct
- Mobile number is active
- Email address is accurate
- Shipping address is complete
- PIN code is correct
- Delivery instructions are current
Incorrect information may result in payment failure, order delay, unsuccessful delivery, return-to-origin, or inability to process a refund.
Where personal data is inaccurate, incomplete, or outdated, customers may request correction through the contact details provided below.
16. Data Retention
We retain personal data only for as long as reasonably necessary for:
- The purpose for which it was collected
- Completion of orders
- Customer support
- Returns and refunds
- Accounting and taxation
- Fraud prevention
- Security monitoring
- Contractual obligations
- Dispute resolution
- Legal and regulatory compliance
- Establishment or defence of legal claims
Different categories of data may have different retention periods.
For example:
- Order and invoice information may be retained for legally required accounting or tax periods.
- Customer-support records may be retained while a complaint or dispute remains relevant.
- Security and fraud records may be retained to prevent repeated abuse.
- Marketing information may be retained until consent is withdrawn or the purpose ends.
- Inactive-account information may be deleted or anonymised when no longer required, subject to applicable law.
When retention is no longer necessary, we may securely delete, destroy, de-identify, or anonymise the information.
A request for deletion may not require us to erase data that must be retained for legal compliance, fraud prevention, pending disputes, or another lawful reason.
17. Customer Privacy Rights
Subject to applicable law, identity verification, and legal limitations, you may have the right to:
17.1 Access information
You may request information about personal data being processed and certain information regarding its use or sharing.
17.2 Correction and completion
You may request correction of inaccurate or misleading information and completion of incomplete information.
17.3 Updating information
You may request that outdated personal data be updated.
17.4 Erasure
You may request deletion of eligible personal data when it is no longer necessary for the specified purpose, subject to legal-retention requirements and other permitted exceptions.
17.5 Withdrawal of consent
Where processing depends on consent, you may withdraw consent through an available preference tool or by contacting us.
The process of withdrawing consent should be reasonably accessible. Withdrawal will not invalidate processing lawfully completed before withdrawal.
17.6 Grievance redressal
You may raise a complaint relating to our processing of your personal data or handling of a privacy request.
17.7 Nomination
Where provided under applicable law and procedures, you may be able to nominate another individual to exercise eligible rights in the event of death or incapacity.
17.8 Right to complain
You may use our grievance process. Where legally applicable, you may also approach the relevant data-protection authority after exhausting the available grievance-redressal process.
18. How to Exercise Privacy Rights
To submit a privacy request, contact:
Privacy Email: [PRIVACY EMAIL]
Postal Address: [COMPLETE POSTAL ADDRESS]
Subject Line: Privacy Request – [TYPE OF REQUEST]
Please provide sufficient information to help us:
- Identify you
- Locate the relevant data
- Understand your request
- Protect your information from unauthorised disclosure
We may request reasonable verification before acting on a request. We will not disclose personal data or delete an account solely on the basis of an unverified request.
We may seek clarification if a request is incomplete, unclear, excessively broad, or relates to information we cannot reasonably identify.
We will respond within the period required by applicable law. Certain requests may take longer where legally permitted because of complexity, volume, verification, fraud concerns, or consultation with service providers.
If we cannot fulfil all or part of a request, we may provide an explanation where required.
19. Marketing Choices
You may stop promotional communications by:
- Selecting an unsubscribe link in an email
- Using an opt-out instruction in an eligible SMS
- Requesting removal through WhatsApp
- Updating available account preferences
- Contacting customer support
It may take a reasonable period to process an opt-out request.
Even after opting out of marketing, you may continue receiving non-promotional communications concerning:
- Existing orders
- Payments
- Deliveries
- Returns
- Refunds
- Account security
- Legal or policy updates
- Responses to customer-support requests
20. Children’s Personal Data
Our website and products are not directed to children for independent purchasing.
Individuals below the age applicable under Indian law should not create an account, place an order, or provide personal data without the involvement and appropriate consent of a parent or lawful guardian.
Where required, we will seek verifiable parental or guardian consent before processing a child’s personal data.
We do not knowingly engage in tracking, behavioural monitoring, or targeted advertising directed at children where prohibited.
If a parent or guardian believes that a child has provided personal data without appropriate authorisation, they should contact us at [PRIVACY EMAIL]. We will review the request and take appropriate action.
21. Product Reviews, Testimonials and User Content
If you submit a review, testimonial, photograph, video, comment, or other content, we may process the information to:
- Verify the purchase
- Review the submission
- Prevent fraudulent reviews
- Respond to feedback
- Publish approved content
- Improve our products or services
Before publicly using a customer’s identifiable image, video, or detailed testimonial in advertising, we may request additional permission where required.
Customers should not include sensitive personal information, medical records, payment credentials, or another person’s private information in a public review.
We may moderate, reject, or remove content that is unlawful, misleading, abusive, fraudulent, irrelevant, infringes another person’s rights, or violates our website policies.
22. Health and Wellness Information
Swasthya Veda sells wellness products and supplements. We do not generally require detailed medical information to process an ordinary retail order.
If a customer voluntarily provides health-related information while asking a question or making a complaint, we will use it only as reasonably necessary to respond, investigate a safety concern, meet legal obligations, or protect the customer.
Customers should avoid sending unnecessary medical records or highly sensitive health information through unsecured communication channels.
Information provided through customer support is not a substitute for professional medical advice. Customers should consult a qualified healthcare professional regarding individual health conditions, medicines, allergies, pregnancy, breastfeeding, or product suitability.
23. Fraudulent Communications and Security Warnings
Customers should communicate only through official Swasthya Veda contact details displayed on our website.
Swasthya Veda will never ask customers to provide:
- OTP
- UPI PIN
- ATM PIN
- Credit-card or debit-card PIN
- CVV
- Internet-banking password
- Complete card credentials
- Remote access to a device
Customers should not make payments through unknown links, personal accounts, unauthorised QR codes, or unverified telephone numbers claiming to represent Swasthya Veda.
If you receive a suspicious communication, contact us using the official information published on our website.
24. Automated Tools and Personalisation
We may use automated tools to support:
- Product recommendations
- Fraud detection
- Website personalisation
- Customer-support routing
- Marketing measurement
- Inventory planning
- Security monitoring
We do not intend to make decisions producing significant legal effects solely through automated processing unless appropriate safeguards and a lawful basis are available.
Recommendations shown on our website are general shopping suggestions and should not be treated as personalised medical advice.
25. Changes to Business Ownership
If Swasthya Veda or its operating business undergoes a merger, restructuring, financing, acquisition, sale, insolvency process, or transfer of assets, relevant personal data may be disclosed or transferred as part of that transaction.
Any new operator receiving the data will be expected to handle it according to applicable law and the privacy commitments governing the transfer.
Where legally required, affected individuals will be notified of material changes.
26. Updates to This Privacy Policy
We may update this Privacy Policy because of:
- Changes to our website
- New services or features
- Changes in business operations
- New service providers
- Changes in technology
- Security improvements
- Regulatory or legal requirements
- Changes to data-processing practices
The updated policy will be posted with a revised “Last Updated” date.
Where a change materially affects the way we process personal data or where applicable law requires additional notice or consent, we will take appropriate steps to inform affected individuals and obtain consent where necessary.
Customers are encouraged to review this Privacy Policy periodically.
27. Grievance Officer and Privacy Contact
Questions, privacy requests, complaints, or concerns may be addressed to:
Grievance Officer: [FULL NAME]
Designation: [DESIGNATION]
Business Name: [LEGAL BUSINESS NAME]
Brand: Swasthya Veda
Email: [GRIEVANCE OR PRIVACY EMAIL]
Telephone: [PHONE NUMBER]
Postal Address: [COMPLETE ADDRESS]
Support Hours: [DAYS AND TIMES]
Please include:
- Your full name
- Registered email or mobile number
- Relevant order number, if applicable
- Nature of the privacy concern
- Description of the requested resolution
Do not include passwords, OTPs, CVVs, UPI PINs, or banking passwords.
We will review grievances and respond within the period required under applicable law. Customers may be asked to complete reasonable identity verification before account-specific information is disclosed or changed.
28. Governing Law
This Privacy Policy is governed by the applicable laws of India.
Nothing in this Privacy Policy is intended to remove or restrict any privacy or consumer right that cannot legally be waived.
If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will continue to apply to the extent permitted by law.
29. Consent and Acknowledgement
By voluntarily providing personal data for a stated purpose, such as placing an order, requesting delivery, contacting customer support, or subscribing to an offer, you acknowledge that the information may be processed for that purpose and related lawful activities described in this Privacy Policy.
Where consent is the basis of processing, consent must be free, specific, informed, unconditional, unambiguous, and indicated through an appropriate affirmative action.
You may withdraw eligible consent by contacting us or using an available preference-management method.
Withdrawal of consent will not:
- Invalidate lawful processing performed before withdrawal
- Prevent us from completing an order already placed where processing remains necessary
- Override a legal obligation to retain records
- Require deletion of information needed for fraud prevention, disputes, or legal claims