This Privacy Policy applies to the website nutrihaul.com (the “Website”) operated by Nutrihaul Private Limited, CIN U21000MH2025PTC458698, GSTIN 27AAKCN9215H1Z6, registered in Maharashtra, India (“NutriHaul,” “we,” “us,” or “our”). This policy is compliant with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the Information Technology Act, 2000, and the Consumer Protection (E-commerce) Rules, 2020.

By visiting our Website or placing an order, you acknowledge that you have read this Privacy Policy and consent to the practices described herein.

What Information We Collect

We collect only the information needed to process your order, improve our service, and communicate with you.

• Identity data: your name, email address, and phone number.
• Delivery data: shipping address, city, pin code, and state.
• Transaction data: order history, products purchased, and payment confirmation reference. We do not store your card number, CVV, or UPI PIN. These are handled exclusively by Razorpay, our PCI-DSS compliant payment gateway.
• Device and usage data: IP address, browser type, pages visited, and time on site, collected via cookies and analytics tools.
• Communications data: any messages you send us via email, WhatsApp, or our contact form.
  
  

Why We Collect It

We collect and use your personal data only for these specific purposes:

• To process, fulfil, and deliver your order.
• To send you order confirmation, shipping updates, and delivery notifications.
• To respond to queries, complaints, or refund requests.
• To improve our Website and product offerings through aggregated, anonymised usage analytics.
• To send you marketing communications, only if you have given explicit consent at the time of purchase or sign up. You may withdraw this consent at any time.
• To comply with applicable law, regulatory requirements, or a valid court order.
  
  

Who We Share Your Data With

We do not sell your personal data. We share it only where strictly necessary.

• Logistics partners: Shipway and its associated courier partners receive your name, phone number, and delivery address to complete your shipment.
• Payment processors: your payment information is transmitted securely to Razorpay, a PCI-DSS compliant payment processor. We receive only a transaction confirmation and order ID.
• Technology providers: our website host and email platform may have access to your data as part of operating our infrastructure. These providers are contractually bound to protect your data.
• Legal authorities: if required by a court order, government direction, or to prevent fraud or harm.

We do not share your data with advertisers or third party data brokers.

Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights.

• Right to access: you may request a summary of the personal data we hold about you, including details of all processors with whom it has been shared.
• Right to correction: you may request correction of inaccurate or incomplete data.
• Right to erasure: you may request deletion of your data, subject to legal retention obligations, for example GST invoice retention for five years.
• Right to withdraw consent: you may withdraw marketing consent at any time by emailing us or clicking unsubscribe in any email we send.
• Right to nominate: you may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Right to grievance redressal: if you believe we have mishandled your data, you may write to our Grievance Officer below. We will respond within 30 days. If your grievance is not resolved, you may escalate it to the Data Protection Board of India.
  
  

Data Retention

Order records, including name, address, and purchase history, are retained for a minimum of five years to comply with GST and accounting regulations. Marketing consent records are retained until you withdraw consent. Usage data collected via analytics is retained for up to twelve months.

Children’s Privacy

Our Website is not intended for individuals under eighteen (18) years of age. We do not knowingly collect personal information from anyone under the age of eighteen (18). If we become aware that we have received personal data from a visitor under the age of eighteen (18), we will take reasonable steps to delete that information from our records.

Cookies

Our Website uses cookies to improve your browsing experience and understand how visitors interact with the site. Non essential cookies will only be placed with your prior consent. You may disable cookies in your browser settings at any time, though this may affect some site functionality.

Grievance Officer

In accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the Consumer Protection (E-commerce) Rules, 2020, our Grievance Officer details are below.

• Name: Bharat Agrawal
• Designation: Co-Founder, Nutrihaul Private Limited
• Email: info@nutrihaul.com
• Address: Gat No. 440, OM Warehouse, Katkewadi, Haveli, Wagholi, Pune, Maharashtra, 412207
• Working hours: Monday to Friday, 9:00 AM to 6:00 PM.
  
  

We aim to respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date above and, where appropriate, notify you by email. Continued use of the Website after any change constitutes acceptance of the updated policy.