Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how Aabhaveda Wellness Pvt. Ltd. (“Aabhaveda”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you visit aabhaveda.com, create an account, place an order or contact us.

We are the Data Fiduciary for the personal data described here, and we handle it in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 together with the rules made under it.

Who we are

• Legal entity: Aabhaveda Wellness Pvt. Ltd.
• Address: A-2920, Marathon Futurex, Mafatlal Mills Compound, Lower Parel East, Mumbai, Maharashtra – 400 013, India
• Email: support@aabhaveda.com
• Phone: +91 75064 39430

What personal data we collect

Data you give us directly

• Account details — your name, email address, phone number and password.
• Order details — billing and shipping address, the items you buy, and your order history.
• Communications — anything you send us through the contact form, email, phone or WhatsApp, including product questions and complaints.
• Newsletter — your email address, if you choose to subscribe.
• Reviews and testimonials — any name, rating or comment you choose to publish on the site.

Data we collect automatically

• Device and usage data — IP address, browser type, device type, pages viewed, referring page and time of visit.
• Cookies and similar technologies — described in our Cookie Policy.

Data we receive from others

• Payment confirmation from our payment gateway, telling us whether a payment succeeded and giving us a transaction reference.
• Delivery status from our logistics partner, including tracking numbers and delivery events.
• Social login — if you sign in using Facebook or Google, we receive your name and email address from that service. We never receive your password.

What we do not collect

We do not store your card number, CVV, UPI PIN or net-banking credentials. Payments are captured directly by our payment gateway on their own secure systems; those details never reach our servers.

Why we use your data, and on what basis

Purpose	Data used	Basis
Processing and delivering your order	Name, address, phone, email, order details	Performance of our contract with you
Taking payment and issuing refunds	Order value, transaction reference	Performance of our contract with you
Order updates by email, SMS and WhatsApp	Name, phone, email, tracking number	Performance of our contract with you
Customer support and complaint handling	Contact details, order history, your messages	Performance of our contract; legal obligation
Newsletter and promotional messages	Name, email, phone	Your consent, which you may withdraw at any time
Analytics and improving the site	Device and usage data, cookie identifiers	Your consent through the cookie banner
Advertising and measuring ad performance	Cookie identifiers, pages and products viewed	Your consent through the cookie banner
Accounting, tax and statutory records	Invoice and transaction data	Legal obligation
Preventing fraud and misuse	IP address, order patterns	Our legitimate interest in protecting the business

Who we share your data with

We do not sell or rent your personal data. We share it only with the following categories of recipient, and only so far as they need it:

• Payment gateway (Razorpay) — to process payments and refunds securely.
• Logistics and courier partners (including Shipclues and the courier assigned to your order) — your name, delivery address and phone number, so your parcel can be delivered and, for Cash on Delivery orders, so payment can be collected.
• Communication providers — our email and WhatsApp messaging providers, to send order confirmations and tracking updates.
• Analytics and advertising providers — Google Analytics and Meta (Facebook) Pixel, where you have accepted the relevant cookies.
• Professional advisers and authorities — our accountants and auditors, and any court, regulator or law-enforcement body where we are legally required to disclose.

Some of these providers process data on servers outside India. Where that happens, we rely on the provider’s contractual data-protection commitments and transfer only what is necessary.

How long we keep it

• Order, invoice and tax records — eight years from the end of the financial year, as required by Indian tax and company law.
• Account data — for as long as your account is open, and up to 12 months after you close it.
• Support correspondence — three years from the date the matter is closed.
• Newsletter subscription — until you unsubscribe.
• Analytics data — in line with the retention period set in the analytics tool, normally no more than 14 months.

Your rights

Under the DPDP Act you may:

• Access a summary of the personal data we hold about you and how we process it.
• Correct or complete data that is inaccurate or out of date — you can do much of this yourself from your account page.
• Erase your data where we no longer need it for the purpose it was collected, subject to records we must keep by law.
• Withdraw consent at any time, where we relied on your consent. Withdrawing consent does not affect anything we did before you withdrew it.
• Nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
• Complain to our Grievance Officer, and after that to the Data Protection Board of India.

To exercise any of these rights, write to support@aabhaveda.com from the email address on your account. We may ask you to confirm your identity before we act. We will respond within 30 days.

Marketing messages

We send promotional email, SMS or WhatsApp messages only if you have opted in. Every marketing email carries an unsubscribe link, and you can reply STOP to marketing WhatsApp messages or write to us at any time. Transactional messages about an order you have placed — confirmations, dispatch and tracking updates — are not marketing and will continue while your order is active.

Children

Our products and this website are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

How we protect your data

The site is served over HTTPS, access to the admin panel is restricted to named accounts with role-based permissions, and payment data is handled entirely by our PCI-DSS compliant payment gateway. No system can be guaranteed completely secure, but we review our safeguards regularly and will notify you and the Data Protection Board of India of a personal data breach where the law requires it.

Cookies

We use cookies and similar technologies as set out in our Cookie Policy, which explains each category and how to control it.

Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer are:

• Name: Manisha Darji
• Designation: Grievance Officer
• Email: manisha@aabhaveda.com
• Phone: +91 75064 39430
• Address: A-2920, Marathon Futurex, Mafatlal Mills Compound, Lower Parel East, Mumbai, Maharashtra – 400 013, India
• Hours: Monday to Tuesday, 10:00am to 6:00pm; Wednesday to Saturday, 11:00am to 5:00pm; closed Sunday and public holidays

We acknowledge every complaint within 48 hours of receiving it and aim to resolve it within one month.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If a change materially affects how we use your data, we will tell you by email or through a notice on the site.

Contact us

• By email: support@aabhaveda.com
• By phone: +91 75064 39430
• Through our contact page