Last Updated: 06 October 2026

At MY AYURVEDICS, we respect your privacy and are committed to handling your personal data responsibly, transparently and securely.

This Privacy Policy explains how MY AYURVEDICS (“MY AYURVEDICS”, “we”, “us” or “our”) collects, uses, stores, processes, shares and protects personal data when you visit our website, create an account, place an order, contact us, submit a complaint, subscribe to communications or otherwise interact with our services.

This Policy should be read together with our Terms & Conditions and other policies available on this website.

1. Quick Privacy Overview

2. Business and Privacy Contact Details

Where applicable under Indian data-protection law, MY AYURVEDICS may act as a Data Fiduciary in relation to personal data for which we determine the purpose and means of processing.

3. Applicable Data Protection Framework

We endeavour to process personal data in accordance with applicable Indian laws and regulations, including, as and when applicable:

• Digital Personal Data Protection Act, 2023 (“DPDP Act”);
• Digital Personal Data Protection Rules, 2025 (“DPDP Rules”);
• Information Technology Act, 2000 and applicable rules;
• Consumer Protection Act, 2019;
• applicable Consumer Protection (E-Commerce) Rules; and
• other privacy, electronic-commerce and consumer-protection requirements applicable to our operations.

Where provisions are subject to phased commencement or subsequent regulatory requirements, this Privacy Policy will operate subject to the law actually in force at the relevant time.

Nothing in this Privacy Policy is intended to restrict a statutory right available to you under applicable law.

4. Personal Data We May Collect

The personal data collected depends upon how you interact with MY AYURVEDICS.

We endeavour to collect only personal data reasonably necessary for the relevant purpose.

5. Payment Information

Payments may be facilitated by independent payment gateways, banks, UPI providers, card networks and other payment service providers.

MY AYURVEDICS generally does not intend to directly store sensitive payment authentication credentials, including:

• UPI PIN;
• debit/credit card PIN;
• complete card security credentials;
• CVV;
• internet-banking password; or
• OTP used to authenticate your payment.

Payment service providers may independently process payment information according to their own terms, privacy policies, security practices and applicable law.

Never send your UPI PIN, banking password, card PIN or OTP to MY AYURVEDICS customer support.

6. Why We Process Personal Data

We may process personal data for lawful purposes including:

We endeavour not to process personal data for purposes incompatible with the purpose for which it was collected unless permitted by applicable law.

7. Consent

Where applicable law requires consent for processing, MY AYURVEDICS will endeavour to obtain consent in the manner prescribed by applicable law.

Where processing depends upon your consent, you may withdraw that consent by contacting:

support@myayurvedics.com

Withdrawal of consent does not ordinarily invalidate processing lawfully undertaken before the withdrawal.

If certain information is necessary to fulfil an order, provide a requested service, meet a legal requirement or resolve a transaction, withdrawal may affect our ability to continue providing the relevant service.

8. Other Legally Permitted Processing

Where applicable law permits processing without separate consent for specified legitimate uses, legal obligations or other permitted purposes, MY AYURVEDICS may process personal data in accordance with those provisions.

This may include processing reasonably necessary to:

• comply with applicable law;
• respond to lawful governmental or judicial requirements;
• prevent or investigate fraud;
• address emergencies where legally applicable;
• enforce or defend legal rights; or
• perform other processing expressly permitted by law.

9. Health and Medical Information

MY AYURVEDICS sells or markets Ayurvedic, herbal, wellness and related products.

We do not encourage customers to unnecessarily submit medical records or confidential health information through ordinary customer-support forms, reviews or messages.

However, you may voluntarily provide limited health-related information when reporting matters such as:

• an allergic reaction;
• an adverse event;
• suspected product contamination;
• product safety;
• an interaction concern; or
• another health-related product complaint.

Where such information is received, we may process it only to the extent reasonably necessary to investigate the matter, communicate with you, communicate with the applicable manufacturer or other responsible party, meet applicable regulatory obligations or protect health and safety.

Customer support is not a substitute for medical advice or emergency healthcare.

10. Data Minimisation and Accuracy

We endeavour to collect only information reasonably necessary for our operations and the purposes communicated to you.

You should provide accurate and current information, particularly your:

• name;
• telephone number;
• email address;
• billing address; and
• shipping address.

Incorrect information may cause payment, communication or delivery problems.

Please contact us if personal data associated with your account or transaction requires correction.

11. Shopify and Our E-Commerce Infrastructure

Our online store may use Shopify and related technology infrastructure to provide e-commerce functionality.

This may involve processing necessary to:

• host our online store;
• maintain your shopping cart;
• provide checkout functionality;
• process transactions;
• protect website security;
• prevent fraud;
• provide analytics; and
• operate other store functionality.

Shopify and other independent providers may process personal data in accordance with their respective legal obligations, contractual arrangements and privacy policies.

12. Who We May Share Personal Data With

We do not disclose personal data indiscriminately.

Where reasonably necessary, information may be shared with:

We endeavour to disclose only information reasonably necessary for the relevant purpose.

13. White-Label Manufacturers and Product Complaints

MY AYURVEDICS may market or sell products manufactured, formulated, processed or packed by independent third-party manufacturers under white-label, private-label, contract-manufacturing or similar arrangements.

If you report an issue involving:

• product quality;
• suspected contamination;
• ingredients;
• packaging;
• manufacturing;
• batch information;
• an adverse reaction;
• a suspected defect; or
• another product-safety matter,

we may share information reasonably relevant to the investigation with the applicable:

• manufacturer;
• supplier;
• laboratory;
• professional adviser;
• insurer where applicable; or
• competent regulatory authority.

This may include order details, product/batch information, photographs and complaint information.

We do not intend to share unrelated personal information merely because a product complaint has been submitted.

14. Courier and Logistics Partners

To deliver your order, we may provide logistics partners with information such as:

• recipient name;
• shipping address;
• postcode;
• telephone number;
• shipment/order reference; and
• other information reasonably required to complete delivery.

Courier providers may contact you directly regarding delivery.

15. Cookies and Similar Technologies

Our website may use cookies, pixels and similar technologies.

Where consent is legally required for non-essential technologies, we will endeavour to handle those technologies according to applicable consent requirements.

You may also manage cookies through your browser settings or available website controls.

Disabling essential cookies may prevent certain website functionality from working correctly.

16. Marketing Communications

Where permitted by applicable law, MY AYURVEDICS may send communications concerning:

• offers;
• promotions;
• new products;
• educational content;
• newsletters; and
• other marketing information.

Where consent is required, marketing will be handled according to applicable consent requirements.

You may unsubscribe using the option contained in the communication or contact:

support@myayurvedics.com

Stopping marketing communications does not prevent necessary transactional communications relating to your orders, account, security or legally required notices.

17. Public Reviews and User Content

Information submitted as a public review, testimonial or comment may become visible to other visitors.

Do not include confidential information in a public review, including:

• medical records;
• home addresses;
• telephone numbers;
• payment information;
• passwords;
• government identification numbers; or
• other sensitive personal information.

We may moderate user-generated content where reasonably necessary and legally permissible.

18. Disclosure Required by Law

We may disclose personal data where reasonably necessary to:

• comply with applicable law;
• comply with a lawful court order;
• respond to competent regulatory authorities;
• cooperate with lawful investigations;
• detect or prevent fraud;
• protect customer safety;
• protect our legal rights; or
• establish, exercise or defend legal claims.

Where legally possible, disclosure will be limited to information reasonably required for the applicable purpose.

19. Cross-Border Processing

Some technology, hosting, payment, analytics or other service providers may operate infrastructure outside India.

Where personal data is processed or transferred outside India, MY AYURVEDICS will endeavour to comply with applicable Indian data-protection requirements, including restrictions or requirements imposed by competent authorities from time to time.

20. Data Retention

We do not intend to retain personal data indefinitely without purpose.

Retention may be necessary for:

When personal data is no longer reasonably necessary and no legal basis requires continued retention, it may be erased, anonymised or otherwise securely handled in accordance with applicable requirements and our operational procedures.

21. Security of Personal Data

MY AYURVEDICS endeavours to implement reasonable technical and organisational safeguards appropriate to the personal data we process.

Measures may include appropriate:

• access controls;
• account protections;
• security monitoring;
• technical safeguards;
• vendor controls; and
• internal procedures.

However, no internet transmission, website, server, database or electronic storage system can be guaranteed to be completely secure.

22. Protecting Your Account

You are responsible for maintaining the confidentiality of your account credentials.

Never disclose your:

• password;
• OTP;
• UPI PIN;
• card PIN;
• CVV; or
• banking password

to someone claiming to be MY AYURVEDICS.

If you believe your account or transaction has been compromised, contact us promptly at:

support@myayurvedics.com

23. Personal Data Breaches

Where a personal-data breach occurs, MY AYURVEDICS will endeavour to take appropriate steps in accordance with applicable law, including as appropriate:

1. identifying and investigating the incident;
2. taking reasonable containment measures;
3. mitigating foreseeable harm;
4. maintaining required records;
5. implementing corrective measures; and
6. providing notifications required under applicable law.

Where legally required, affected Data Principals and/or the competent data-protection authority will be notified in the manner and timeframe prescribed by applicable law.

24. Your Privacy Rights

Subject to applicable law, commencement provisions, exceptions and prescribed procedures, you may have rights including:

These rights are subject to applicable legal requirements and exceptions.

For example, we may be required to retain certain transaction information despite an erasure request where retention is required by tax, accounting, regulatory or other applicable law.

25. Exercising Your Rights

Privacy-related requests can be submitted to:

support@myayurvedics.com

Please provide sufficient information to identify the relevant account or transaction, such as:

• your name;
• registered email address;
• registered telephone number;
• order number where relevant; and
• description of the request.

For security reasons, we may reasonably verify your identity and authority before acting upon a request.

We will not intentionally disclose another person's personal data merely because someone submits a request using their name.

26. Responsibilities When Making Privacy Requests

When exercising privacy rights, users should provide accurate information and use grievance mechanisms lawfully.

You should not:

• impersonate another individual;
• submit knowingly fraudulent requests;
• knowingly provide false information;
• suppress material information where legally relevant; or
• misuse the grievance process.

27. Children's Personal Data

MY AYURVEDICS does not intend its online store to encourage children to independently purchase products requiring adult supervision.

Where applicable law requires verifiable consent from a parent or lawful guardian before processing a child's personal data, we will endeavour to comply with the applicable requirement.

Parents or lawful guardians who believe that a child's personal data has been provided improperly may contact:

support@myayurvedics.com

We may take reasonable steps to investigate and address the matter.

28. Third-Party Websites

Our website may contain links to independent third-party websites or services.

MY AYURVEDICS does not control those independent services and is not responsible for their privacy practices, security or content.

Before providing personal data to an independent third party, you should review its privacy policy.

29. Business Transfers

If MY AYURVEDICS undergoes a lawful:

• merger;
• acquisition;
• restructuring;
• financing;
• reorganisation;
• sale of business; or
• transfer of relevant assets,

personal data associated with the business may be transferred where legally permissible.

Any processing following such a transaction remains subject to applicable data-protection requirements.

30. No Sale of Personal Data

MY AYURVEDICS does not intend to sell customers' personal data merely as a commodity.

This does not prevent lawful sharing with service providers and other parties where necessary for purposes described in this Privacy Policy, such as payments, shipping, technology infrastructure, fraud prevention, product-safety investigations or legal compliance.

31. Grievance Redressal

If you have a privacy concern, complaint or question about how your personal data has been handled, contact our Grievance Officer:

We will endeavour to acknowledge, investigate and resolve grievances within timelines applicable under relevant law.

Where applicable law provides further statutory remedies after use of the applicable grievance process, those rights remain unaffected.

32. Consumer Rights

Nothing in this Privacy Policy is intended to waive, restrict or exclude mandatory rights available under applicable Indian consumer or data-protection law.

If a provision of this Privacy Policy conflicts with a mandatory provision of applicable law, the mandatory provision will prevail to the extent of the conflict.

33. Changes to This Privacy Policy

MY AYURVEDICS may update this Privacy Policy from time to time because of:

• changes in applicable law;
• regulatory requirements;
• security requirements;
• changes to our technology;
• changes to service providers;
• changes to our products or services; or
• changes to our business operations.

The latest version will be published on our website with an updated effective date.

Where legally required, material changes may also be communicated using other appropriate methods.

34. Governing Law and Jurisdiction

This Privacy Policy is governed by applicable laws of India.

Subject to mandatory rights concerning jurisdiction under consumer-protection, data-protection or other applicable laws, courts of competent jurisdiction at Jaipur, Rajasthan, India shall have jurisdiction over disputes concerning this Privacy Policy.

Nothing in this provision prevents a person from approaching the Data Protection Board of India, an appropriate Consumer Commission, court or other competent authority where legally entitled to do so.

35. Contact Us

For privacy questions, requests or complaints:

MY AYURVEDICS is committed to handling personal data responsibly, transparently and in accordance with applicable Indian law.