Effective Date: 11/09/2025
Last Updated: 11/09/2025

1. INTRODUCTION

Nutrapour Lifesciences Private Limited (“Company”, “Nutrapour”, “we”, “our”, “us”) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, disclose, and store your information when you access our website www.nutrapour.com, mobile applications, or interact with us through any other channels (collectively, the “Platform”).

This Policy is published in compliance with:

• Section 43A of the Information Technology Act, 2000
  
  

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”)
  
  

• Digital Personal Data Protection Act, 2023 (“DPDP Act”)
  
  

• Consumer Protection (E-Commerce) Rules, 2020
  
  

By accessing and using our Platform, you consent to the practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

We may collect the following categories of information:

a. Personal Information

• Full name, email address, mobile number, postal address
  
  

• Gender, date of birth, age
  
  

• Account login details (username, password, security questions)
  
  

b. Sensitive Personal Data (as per SPDI Rules)

• Financial data (credit/debit card details, UPI, bank account numbers, payment confirmations) — collected via secure PCI-DSS compliant gateways
  
  

• Health or nutritional data voluntarily shared with us for product recommendations
  
  

c. Transaction & Order Information

• Order history, product preferences, returns, refunds, cart details
  
  

d. Technical & Usage Data

• IP address, browser type, device details, geolocation (if enabled)
  
  

• Cookies, pixels, and browsing behavior on our Platform
  
  

e. Communication Data

• Emails, customer service chats, call logs, and feedback forms
  
  

We do not knowingly collect data from children under 18 years of age.

3. SOURCES OF INFORMATION

We collect information from:

1. Directly from you – when you create an account, place an order, or contact us
   
   

2. Automatically – through cookies, analytics tools, and usage tracking
   
   

3. Third parties – logistics partners, marketing partners, payment providers
   
   

4. Social media integrations – when you interact with us via Facebook, Instagram, or Google
   
   

4. PURPOSE OF COLLECTION & PROCESSING

Your information may be used for:

• Processing, fulfilling, and delivering your orders
  
  

• Creating and managing your account
  
  

• Sending order updates, offers, and promotional messages (only with your consent)
  
  

• Providing customer support and grievance redressal
  
  

• Personalizing your shopping experience (recommendations, targeted ads)
  
  

• Preventing fraud, unauthorized transactions, and ensuring security
  
  

• Compliance with legal obligations, audits, and dispute resolution
  
  

5. LEGAL BASIS OF PROCESSING

We process your data on the following grounds:

• Consent – for marketing communications, cookies, and sensitive personal data
  
  

• Contractual Necessity – to deliver orders and services
  
  

• Legal Obligation – to maintain records, report to regulators
  
  

• Legitimate Interests – fraud prevention, service improvement
  
  

6. DISCLOSURE OF INFORMATION

We may share your Personal Information with:

1. Service Providers: payment gateways, shipping partners, IT service providers
   
   

2. Marketing & Analytics Partners: including Google Ads, Facebook Ads, Shopify, and affiliate partners
   
   

3. Regulatory Authorities: if required by law, subpoena, or government request
   
   

4. Corporate Transfers: in case of merger, acquisition, or restructuring
   
   

We do not sell or rent your personal data.

7. COOKIES & TRACKING TECHNOLOGIES

Our Platform uses cookies, pixels, and similar technologies to:

• Store preferences and login sessions
  
  

• Track shopping behavior and improve performance
  
  

• Provide personalized ads and marketing campaigns
  
  

You may disable cookies in your browser settings, but certain features may not function properly.

8. THIRD-PARTY ANALYTICS & GOOGLE SERVICES

We use third-party services such as Google Analytics, Google Ads, Facebook Pixel, and other marketing tools to understand user behavior and deliver relevant ads.

• Google Analytics tracks website traffic and user engagement.
  
  

• Google Ads & Remarketing deliver personalized advertisements.
  
  

• These services may use cookies or unique identifiers.
  
  

Opt-Out Options:

• Install the Google Analytics Opt-out Browser Add-on.
  
  

• Adjust your Google Ads Settings for ad personalization.
  
  

9. DATA RETENTION

We retain your data only as long as necessary:

• For customer accounts: until you request deletion
  
  

• For transactions: 7 years (as per Indian tax and accounting laws)
  
  

• For marketing data: until you withdraw consent
  
  

After expiry, data is securely deleted or anonymized.

10. SECURITY MEASURES

We adopt Reasonable Security Practices under IT Act, including:

• SSL encryption for data transmission
  
  

• PCI-DSS compliant payment systems
  
  

• Firewalls, intrusion detection, malware scanning
  
  

• Role-based access controls and employee confidentiality agreements
  
  

11. YOUR RIGHTS UNDER INDIAN LAW

Subject to applicable law, you may exercise the following rights:

• Right to Access – obtain a copy of your personal data
  
  

• Right to Correction – rectify inaccurate or incomplete data
  
  

• Right to Deletion – request deletion of personal data (except where legally required)
  
  

• Right to Withdraw Consent – opt-out of marketing and data sharing
  
  

• Right to Data Portability – request transfer of your data (once enabled under DPDP Act)
  
  

To exercise your rights, email us at care@nutrapour.com.

12. INTERNATIONAL DATA TRANSFERS

If your data is transferred outside India (e.g., to Shopify servers), we ensure compliance with applicable laws by using Standard Contractual Clauses or equivalent safeguards.

13. CHILDREN’S PRIVACY

We do not knowingly collect data from individuals under 18 years. If you believe a child has provided data, contact us for deletion.

14. GRIEVANCE OFFICER (MANDATORY UNDER IT ACT & DPDP)

In compliance with Rule 5(9) of the IT (SPDI) Rules, 2011 and Section 13 of the DPDP Act, the details of our Grievance Officer are provided below:

Grievance Officer
Email: care@nutrapour.com
Phone: 8054475151
Address: Nutrapour Lifesciences Pvt. Ltd.,
Scf 3, First Floor, Kabir Park Market,
Opposite Guru Nanak Dev University,
Amritsar, Punjab – 143001, India

15. POLICY UPDATES

We may amend this Privacy Policy from time to time to reflect legal or operational changes. Updated versions will be posted on this page with the revised date. Continued use of our Platform constitutes your acceptance of the revised Policy.