Privacy Policy

1. Introduction

This Privacy Policy explains how Aswath Naturale Pvt Ltd / Herbhari (“Company”, “we”, “us”, “our”) collects, uses, discloses, and protects your personal data when you visit www.herbhari.com or purchase our products. The Policy is designed to align with the principles of the Digital Personal Data Protection Act 2023 and relevant rules, as applicable.

2. Personal Data We Collect

We may collect personal data that you provide directly, such as name, contact number, email address, billing and shipping address, and payment‑related information when you create an account or place an order. We may also collect technical data such as IP address, device information, browser type, and usage data through cookies and similar technologies for analytics and security purposes.

3. Purpose and Legal Basis of Processing

We process your personal data to fulfil your orders, provide customer support, manage payments and refunds, and deliver products and services you request. We also process data to improve our website, personalize user experience, send transactional and (where permitted) marketing communications, comply with legal obligations, and prevent fraud and security incidents.

4. Consent and Your Choices

Where required, we obtain your consent before processing your personal data for specific purposes, such as sending promotional emails or using certain cookies. You may withdraw your consent at any time by following the unsubscribe instructions in communications or by contacting us, but this will not affect processing based on consent before withdrawal.

5. Cookies and Similar Technologies

Our website may use cookies, pixels, and similar technologies to remember your preferences, understand how you use the Website, and improve services. You can manage cookie settings through your browser, but disabling certain cookies may affect Website functionality.

6. Sharing of Personal Data

We may share your personal data with trusted third parties such as payment processors, courier and logistics partners, IT service providers, marketing service providers, and marketplace platforms, strictly for the purposes described in this Policy. Such third parties are expected to implement appropriate security measures and process data only in accordance with applicable law and our instructions.

7. Cross‑Border Data Transfers

If your data is transferred outside India (for example, where servers or service providers are located abroad), we will take reasonable steps to ensure that the recipient implements comparable data protection standards, subject to applicable law and government notifications.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, including satisfying legal, accounting, or reporting requirements. After the retention period, data will be deleted or anonymized in a secure manner, except where law requires longer retention.

9. Data Security

We implement reasonable technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.

10. Your Rights

Subject to applicable law, you may have rights to access, correct, update, or delete your personal data, as well as to request information about how your data is processed. You may also have the right to withdraw consent, restrict processing, or file a grievance with the designated Data Protection Officer or relevant authority, as provided under the DPDPA.

11. Children’s Privacy

Our website is not intentionally directed to children under the age specified by applicable law, and we do not knowingly collect personal data from such children without appropriate consent. If you believe that a child’s data has been provided to us without proper consent, please contact us so that we can take appropriate action.

12. Links to Third‑Party Sites

The Website may contain links to third‑party websites or apps, including e‑commerce platforms like Amazon, Flipkart and others, which are not operated by us. This Policy does not apply to such third‑party properties, and you should review their privacy policies separately.

13. Updates to this Policy

We may modify this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our practices, and the updated version will be posted on the Website with a “Last Updated” date. Continued use of the Website after such changes will be deemed acceptance of the updated Policy.

14. Contact and Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us using the details provided on the Website. Where required by law, we will designate a grievance officer or data protection officer and publish their contact details on the Website www.herbhari.com.