Privacy Policy

Herbalozy (“we,” “us,” or “our”) is committed to protecting the privacy of our customers. In accordance with India’s Information Technology Act, 2000 and related rules, we publish this Privacy Policy to explain how we collect, use, disclose, and safeguard personal information. Consistent with Indian privacy norms, we describe below the categories of data we collect, the purposes of processing, and the protections in place for that data.

Personal Data Collection

Herbalozy collects only the personal information necessary to fulfill orders and provide customer support. Users must create an account (with a unique ID and password) before placing an order. At checkout, we collect the following basic Personal Data:
· Name: First and last name for order processing.
· Contact information: Email address and phone number for order confirmations and customer service.
· Shipping address: Delivery address for order fulfillment.
We do not collect any sensitive personal data (such as biometric data, health records, government IDs or financial details) beyond what is listed above. We also do not access or collect any background location data, camera, or microphone information from users’ devices. All data is collected only after the user has provided consent (e.g. via account registration or order checkout), and is used only for the purposes stated below. (Because we do not collect sensitive health data or biometric identifiers, the SPDI Rules’ special categories of sensitive personal information do not apply.)

Effective Date: [May 05,2025]

Payment Security

All online payments on Herbalozy are processed through the Razorpay payment gateway. Razorpay uses industry-standard security: all payment information is encrypted during transmission using SSL/TLS protocols, so that only Razorpay (not Herbalozy) can access full card details. Herbalozy never stores raw credit/debit card numbers or PINs on our servers. Payment credentials and financial information are handled entirely by Razorpay, which maintains PCI-DSS compliance. We generate a standard tax invoice for every purchase as required by Indian tax law. (Customers with a valid GST registration number—typically business clients—may request a GST-compliant invoice, which we will issue upon request.)

Data Usage

We use customer data primarily to process and fulfill orders and to provide customer service. Specifically, Herbalozy uses your Personal Data to:
· Process and ship your orders (by coordinating with carriers and generating invoices).
· Send transactional messages (such as order confirmations, shipping updates, and password resets).
· Respond to customer inquiries, feedback, or returns requests.
· Improve our products and services (for example, by analyzing purchase patterns and feedback).
Herbalozy will not use your personal data for any purpose other than those listed above. We do not sell or rent personal information to advertisers or marketers. We may share data with third parties strictly as needed to perform our services (for example, sharing order details with our payment processor Razorpay and with logistics partners for delivery). We also use Google Analytics to collect aggregated, anonymized visitor statistics to improve the website. In all cases, data is shared only with service providers who are bound by confidentiality and data-protection obligations. Under no circumstances do we disclose your Personal Data to unrelated advertisers or external parties without your explicit consent. Herbalozy retains customer information as long as necessary to provide our services and to comply with legal obligations (for example, for tax or accounting records).

Cookies & Analytics

Herbalozy uses cookies solely for site functionality and user convenience. For example, we use session cookies to keep you logged in and to remember information you’ve entered during your visit. We do not use any third-party advertising cookies, web beacons, or browser fingerprinting technologies. We use Google Analytics (hosted on servers in the EU) to gather aggregate website traffic data. This Google Analytics data is collected and stored in an anonymous form (IP addresses are anonymized by default in GA4) and is used only to analyze site performance and usage trends. No individual user’s personal browsing habits or identity are revealed or shared with Google.

Childen's Data

Our products and website are not directed to children under 18, and Herbalozy does not knowingly collect personal information from minors. Indian law classifies anyone under 18 as a “child” whose data requires parental consent for processing. Therefore, if we learn that a child under 18 has created an account or provided data without verifiable parental consent, we will delete that data and close the account. (As a matter of health guidance, we also note that our herbal products are intended for adult consumption only, and any use by minors should only be under a doctor’s advice.)

Your Rights

As a user of Herbalozy’s services, you have certain rights regarding your personal data. Under current Indian privacy rules, you have the right to access the personal information we hold about you and to request correction of any inaccuracies. You may also withdraw your consent or request deletion of your data (to the extent this does not conflict with our legal obligations). To exercise these rights, please contact our support team at the address below. We do not use any automated decision-making or profiling mechanisms for our customers – all decisions (such as order approvals) are done manually by our staff or systems without automated profiling algorithms.

Third-Party Tools

Herbalozy’s website is hosted on Hostinger’s servers, and we rely on Razorpay for payment processing. These are the only third-party services integrated with our platform. We do not use any external advertising or tracking SDKs. Hostinger’s infrastructure adheres to strong security and privacy standards (Hostinger processes personal data in accordance with GDPR principles). In particular, all data storage is encrypted at rest, and only authorized personnel may access customer data. Our use of Razorpay and Hostinger is limited to hosting and payment transactions; we do not share your personal data with any other third-party providers.

Data Transfer

Customer data is primarily processed within India. Google Analytics data is collected and stored on Google’s EU servers (under Google Ireland’s infrastructure). We do not transfer any personal data outside India except as necessary for these services (and in compliance with applicable law). All third-party services we use are subject to EU/Indian data protection agreements, and Google Analytics data is maintained in aggregated, anonymized form.

Data Security

Herbalozy implements industry-standard technical and organizational measures to protect personal data. All site communications (including login, account, and checkout pages) occur over HTTPS with SSL/TLS encryption to prevent eavesdropping. We restrict access to customer data by password-protected login credentials (users must log in to view or change their account information). Only authorized Herbalozy personnel have access to our customer database, and those systems are protected by firewall and access controls. We review and update our security practices regularly; for example, Hostinger (our hosting provider) requires secure coding, encryption, and regular security audits. While we do not currently implement multi-factor authentication, we plan to offer stronger login protections (such as one-time passwords) as our system evolves.

Changes to This Policies & Contact Information

Herbalozy may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will indicate the effective date of the current policy at the top of this page, and we encourage you to review this policy periodically. If we make any material changes, we will notify registered users via email and post notice on our website.

For any questions or concerns about this Privacy Policy or our data practices, please contact:
• Herbolozy – Proprietorship of Ranjeet Kumar
• Address: A-47 first floor, Balbir Vihar, Kirari Suleman Nagar, New Delhi - 110086,India.
• Grievance Officer: Manish Kumar
• Email: contact@herbalozy.com
• Phone: +91-9355 656 255
• Data Protection Email: contact@herbalozy.com

We will respond to all privacy-related inquiries within a reasonable time, typically within 30 days. Your continued use of the Herbalozy website after any policy update signifies your acceptance of the terms of the revised policy.

Note: This policy is designed to comply with the provisions of India’s Information Technology Act and related rules (including the SPDI Rules) as well as evolving data protection laws. By using our services, you acknowledge that you understand and agree to the data practices described above.

References: This policy has been prepared with regard to current Indian laws and best practices to ensure transparent, fair, and secure handling of your personal information.