Effective Date: July 31, 2025

Welcome to www.keralaayurvedicstore.com, operated by Refine Herbs, a company incorporated in India, with its registered office at: VP 5/491B, Ground Floor, VC Building, Kattayad, 8/4 Vellamunda, Mananthavady, Wayanad DT 670731, Kerala, India

(“Company”, “we”, “our”, or “us”)

We take our responsibilities under Indian privacy laws seriously and are committed to protecting your privacy and the information you share with us. By accessing our website, registering an account, or using our services, you agree to the terms of this Privacy Policy.

We respect and prioritize your privacy and are fully committed to complying with all applicable data protection laws in India. This Privacy Policy is intended to help you understand how we collect, use, disclose, and process your Personal Data—both the data you provide to us and the data we collect during your use of our services—now and in the future. We are dedicated to safeguarding your personal information in accordance with relevant Indian privacy laws and regulations.

“Personal Data” refers to any information that relates to an individual and can, either on its own or in combination with other available information, identify that person.

This Privacy Policy applies to all personal information collected by Refine Herbs from:

·        (a) visitors to our website, and

·        (b) users who register an account or use our services

(collectively referred to as “Users”, “you”, or “your”).

By accessing, browsing, or using our website and/or registering with us, you confirm that you have read, understood, and agreed to this Privacy Policy. You also consent to our collection, use, and processing of your Personal Data as outlined herein, in line with applicable Indian laws.

IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY OR DO NOT CONSENT TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED HEREIN, PLEASE DO NOT USE OUR WEBSITE OR ANY OF THE SERVICES.

We reserve the right to update, modify, revise, or replace this Privacy Policy at our sole discretion, without prior notice. It is your responsibility to review the Privacy Policy periodically. Your continued use of the Website or Services after any changes are posted will constitute your acceptance of those changes.

Unless otherwise stated or required by context, references in this Privacy Policy to “Terms & Conditions” refer to the terms governing the use of our Website, which may be accessed via the designated link on the site, and which may be amended or updated from time to time.

1.      Purpose

 

1.1  In the course of providing our Services, we may collect and process your Personal Data. This Privacy Policy outlines how we collect, use, store, and protect that data. For clarity, this Policy does not apply to anonymous or aggregated information that cannot be used to identify an individual.

 

1.2 This Privacy Policy is intended to complement—not override—any prior consent you may have given to us regarding the use of your Personal Data. The consents outlined herein are in addition to any rights we may have under applicable Indian data protection laws to collect, use, or disclose such information.

 

2. Data Collected

2.1 Voluntary Submission of Personal Data

We collect personal data that you voluntarily provide—such as your name, email, phone number, or address—when registering an account, making a purchase, or contacting us. This collection is done in accordance with applicable Indian data protection laws. This may include additional information you voluntarily provide related to your skincare preferences or needs, such as skin type, sensitivity, allergies, or specific dermatological conditions

2.2 Social Media Login Data

If you register or log in via a social media account (e.g., Google, Facebook), you authorize us to access and use the basic profile information shared by that platform (e.g., name, email). Such access is considered valid consent under applicable laws. We will manage this data as described in this Privacy Policy.

2.3 Third-Party Data Disclosure by You

If you share the personal data of another individual (such as a family member or friend), you confirm that you have obtained their consent to share that information with us for processing as per this Privacy Policy. We are not liable if such consent is later found invalid or in violation of our Eligibility to Use clause outlined in the Terms and Conditions.

2.4 Accuracy of Information

You are responsible for ensuring that all data submitted is accurate, complete, and up to date. If any changes occur, you must notify us promptly. Providing false or misleading information may result in legal action under applicable Indian law.

2.5 Verification and Legal Compliance

We may request supporting documentation to verify your identity or the accuracy of information provided. This is done to fulfil our legal obligations under data protection regulations.

2.6 Device and Usage Data

When you browse our website or use our services, certain data may be collected automatically, including:

·        Device type, operating system, browser version

·        IP address and device identifiers (e.g., UDID, MEID)

·        Pages visited, time spent, referring websites

·        Session data, click activity, and system logs

We may also collect precise location data via GPS, Wi-Fi, or mobile signals—only with your permission. You can disable location tracking in your device settings at any time.

2.7 Interaction & Viewing Data

When you view content, ads, or software on our website, your device may send us details such as:

·        IP address

·        Operating system

·        Timestamp and interaction history

This helps us improve service quality and monitor usage.

2.8 Cookies and Tracking Technologies

We and our authorized partners use cookies and related technologies to:

·        Store preferences and track cart items

·        Analyze user behavior and improve site performance

·        Deliver personalized content and remarketing ads

Cookies are small identifiers stored on your device and may be linked to your personal data.

2.9 Cookie Preferences

You have the option to accept or decline cookies when you visit the site. Please note that declining cookies may affect the functionality and performance of our website and certain features may not work as intended.

3. Processing and Disclosure of Personal Data

3.1 We process your Personal Data only for specific, legitimate purposes, and only to the extent necessary for those purposes. Processing and disclosure of Personal Data is carried out in compliance with applicable Indian laws and data protection regulations. Your data may be processed or disclosed, within or outside India, for the following purposes:

3.1.1 To onboard you as a User, verify your details, and process your account registration;

3.1.2 To manage your user account and provide you with access to our services, including processing orders, payments, and customer support;

3.1.3 To fulfill our obligations under the Terms & Conditions, including the detection and investigation of potential violations, fraud, or misuse of the platform;

3.1.4 To respond to your queries, feedback, complaints, or requests, and resolve any disputes;

3.1.5 To conduct verification, due diligence, and “know your customer” (KYC) procedures;

3.1.6 To perform internal assessments, analytics, and improvements of our Website, services, and customer experience;

3.1.7 For marketing and promotional communication regarding our products, services, loyalty offers, or third-party collaborations. You may opt-out at any time by clicking “unsubscribe” in our emails or writing to care@keralaayurvedicstore.com;

3.1.8 To comply with legal, tax, regulatory, and contractual obligations, including disclosures under anti-money laundering (AML), anti-fraud, or other applicable laws;

3.1.9 To manage internal business operations, including risk management, audits, compliance, outsourcing, financial decision-making, and insurance claims;

3.1.10 To recover dues or enforce your contractual obligations, if applicable;

3.1.11 To ensure the security and integrity of our IT systems and data;

3.1.12 To handle claims or disputes, including intellectual property or third-party rights violations;

3.1.13 To securely store, host, or back up your Personal Data (including offshore, if required); and

3.1.14 For any other purpose communicated to you at the time of data collection or subsequently consented by you.

3.2 If you submit Personal Data of another individual (such as referrals or shared contact details), you warrant that you have obtained their lawful consent. Sharing unsolicited or unauthorized third-party information is prohibited and may be subject to legal consequences under Indian law.

3.3 We may disclose or transfer your Personal Data to third-party service providers, agents, affiliates, or business partners—either in India or abroad—for one or more of the purposes stated above. Such third parties will only process your data on our behalf and in compliance with applicable confidentiality and security obligations. These may include, but are not limited to:

3.3.1 Our group companies, subsidiaries, or legally related entities;

3.3.2 Service providers supporting operations such as shipping, payment processing, IT support, marketing, billing, data analytics, etc.;

3.3.3 Third-party business partners or platforms with whom we collaborate for promotional campaigns or bundled services;

3.3.4 Successor entities or parties involved in a business merger, acquisition, restructuring, or transfer of assets where user data forms part of the transaction; and

3.3.5 Government, regulatory, or judicial authorities, or any authorized party acting under applicable law or in defense of our legal rights.

4. Rights in Relation to Personal Data

4.1 Right of Access, Correction, and Deletion

4.1.1 You have the right to access and review your Personal Data held by us at any time. You may correct, amend, or delete any Personal Data that is inaccurate, incomplete, outdated, or misleading by logging into your account on the Website. For data not editable through your account, you may request changes by contacting us at the official support email provided in Section 9.

4.1.2 We may take reasonable steps to verify the identity of anyone requesting access to Personal Data to ensure they are authorized to make such requests. We reserve the right to decline requests in accordance with applicable laws and regulations where, for example, the request is manifestly unfounded, excessive, or violates the rights of others.

 

 

4.2 Right to Restrict, Object, or Withdraw Consent

4.2.1 You have the right to object to, restrict, or withdraw your consent to the processing of your Personal Data at any time by submitting a request to the contact email provided in Section 9.

4.2.2 Such objection, restriction, or withdrawal will not affect the lawfulness of any processing carried out prior to the withdrawal of consent. Nor does it affect our right to process your data where such processing is permitted or required under applicable Indian laws, even without your consent.

4.2.3 Please note that depending on the nature and scope of your request, such a restriction or withdrawal of consent may limit or prevent us from providing you with certain Services or Website features. We will inform you of the consequences before acting on your request. In such cases, we also reserve the right to terminate any agreements or arrangements entered into with you, without liability.

4.3 Right to Erasure

4.3.1 You have the right to request the deletion of your Personal Data, subject to the limitations imposed by applicable laws.

4.3.2 Upon receiving and approving such a request, we will, to the extent the data is stored electronically, take appropriate steps to securely delete, erase, or destroy the Personal Data. Please note that processing such requests may require a reasonable amount of time.

4.3.3 Deletion of your Personal Data may affect your ability to access or use certain Services or functionalities on the Website and may result in the termination of any agreements between you and the Company. We will notify you of any such implications before processing your request. The Company reserves its legal rights and remedies in such cases.

 

4.4 Right to Data Portability

4.4.1 You may request a copy of your Personal Data in a structured, commonly used, and machine-readable format. Where technically feasible, you may also request that we transfer this data directly to another entity. Once transferred, the Company is not responsible for the security or processing of the data by the receiving third party. The Company may continue to process such Personal Data as permitted under this Privacy Policy.

 

4.5 Right to Lodge a Complaint

4.5.1 If you believe your rights regarding your Personal Data have been violated, we encourage you to first contact us via the email provided in Section 9. We are committed to addressing concerns promptly and fairly.

4.5.2 Subject to Sections 6.2 and 6.3 (if applicable), you may also lodge a formal complaint with the relevant governmental authority responsible for data protection and privacy.

 

4.6 Closure of Account

4.6.1 Upon termination or suspension of your account, and unless required by law to retain your Personal Data, we will delete or anonymize your Personal Data. However, we may retain certain data where legally permissible or necessary for compliance with legal obligations, dispute resolution, or enforcement of agreements.

 

5. Complaints Under the European General Data Protection Regulation (GDPR)

5.1 As the Company serves customers globally, we may collect Personal Data from individuals and entities within the European Economic Area (EEA). We are committed to processing such data in accordance with the General Data Protection Regulation (GDPR), wherever applicable.

5.2 If the GDPR applies to you, by accessing our Website or using our Services, or by submitting any Personal Data, you agree not to lodge a complaint with a government agency without first following the resolution process outlined below in Section 5.3.

5.3 If you have a concern or complaint related to your Personal Data, you agree to the following dispute resolution process:

5.3.1 You must notify the Company in writing via the contact email provided in Section 9. Your communication must clearly detail the issue or complaint regarding your Personal Data.

5.3.2 The Company will make reasonable efforts to respond to and resolve the issue within ninety (90) days of receiving your complaint. You are expected to cooperate in good faith by providing all relevant information or documents during this process.

5.3.3 If the issue is not resolved within the specified period, you may pursue dispute resolution as outlined in our Terms & Conditions, including seeking resolution through applicable legal means.

6. INTERNATIONAL TRANSFERS OF PERSONAL DATA

6.1 Your Personal Data may be transferred to, stored in, or processed in jurisdictions outside of India, for one or more of the purposes stated in this Privacy Policy. Any such international transfer will be carried out in compliance with applicable Indian data protection laws. The Company ensures that appropriate safeguards are in place to protect your Personal Data when transferred overseas.

 

7. SECURITY

7.1 The Company has implemented appropriate technical and organizational measures to safeguard the confidentiality, integrity, and security of your Personal Data. These measures are designed to protect your data from unauthorized access, disclosure, alteration, misuse, or destruction, considering the nature, scope, and purposes of processing.

While we take reasonable steps to ensure the protection of your data, we cannot be held responsible for any unauthorized disclosure, loss, or tampering that may occur due to factors beyond our control.

7.2 In the event of any security breach involving your Personal Data, either within our systems or those of any third-party service providers engaged by us, we will notify you in accordance with applicable laws and this Privacy Policy.

7.3 You also play a critical role in maintaining the security of your Personal Data. You must ensure that your account credentials (including your password) are kept confidential and secure. We recommend choosing a strong, unique password and avoiding sharing it with anyone.

Please avoid transmitting sensitive information to us via unsecured methods (e.g., email, SMS, or phone). Instead, use the secure forms available on our Website. If you suspect that your account has been compromised or your Personal Data is at risk, please contact us immediately using the details provided in Section 9.

7.4 We are not responsible for any fraudulent activities or impersonation attempts conducted by third parties pretending to represent the Company. If you encounter any phishing attempts, scams, or suspicious behavior claiming to be associated with the Company, please report it to us immediately via the contact email in Section 9.

 

8. MARKETING

8.1 We may send you promotional communications from time to time, including updates about our products, services, special offers, events, or other initiatives related to the Company. These communications may be delivered through email, SMS, telephone calls, or other modes of communication, even if your number is registered under the National Do Not Call Registry (DNCR).

If you prefer not to receive such communications, you may opt out at any time by following the unsubscribe instructions provided in the communication or by contacting us.

 

9. CONTACTING THE COMPANY

9.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your Personal Data, or if you would like to exercise any of your data rights, you may contact us via the “Contact Us” page on our Website or email us at:

 

📧 care@keralaayurvedicstore.com

📞 +91 7012123234

 

10. CONSENT AND ACKNOWLEDGEMENT

10.1 By using our Website, accessing our Services, and providing your Personal Data, you confirm that you have read, understood, and consent to the terms of this Privacy Policy.

You further represent and warrant that you have the legal authority or have obtained appropriate authorization to share Personal Data with us. You also acknowledge that it is an offence under applicable laws to access or attempt to access another person’s Personal Data without proper authorization.