1. Who We Are

VAYUGA is an Indian Ayurvedic herbal wellness brand offering herbal products and educational wellness content. For the purpose of this Privacy Policy, “VAYUGA”, “we”, “us” and “our” refer to the business operating the website vayuga.in. “You”, “your”, “customer”, “visitor” or “user” means the individual who visits or uses our website, purchases a product, communicates with us or provides personal data to us.

Our business correspondence address is Jiutpura, Bhitoura, Belthra Road, Ballia, Uttar Pradesh – 221715, India. Our GSTIN is 09GGDPK0824H1ZG. This policy applies to information collected through our website and through communications that relate to our website orders or services, including email, phone and WhatsApp.

This policy is designed with reference to applicable Indian law, including the Information Technology Act, 2000 and rules made under it, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, in each case to the extent applicable and in force. It should be read together with our Terms & Conditions, Shipping Policy, Return & Refund Policy and relevant product information.

2. Scope of This Privacy Policy

This policy covers personal data processed in connection with:

• visiting and browsing vayuga.in;
• creating or using a customer account;
• adding products to a cart, placing an order or making a payment;
• shipping, delivery, returns, replacements and refunds;
• customer-care requests, complaints and grievance redressal;
• email, SMS, phone or WhatsApp communications;
• reviews, ratings, surveys, promotions or voluntary submissions;
• website security, fraud prevention, analytics and improvement; and
• any doctor-consultation or wellness-support feature expressly offered through our website, where applicable.

This policy does not control the independent privacy practices of third-party websites, marketplaces, payment gateways, courier partners, social-media platforms or service providers. When you leave our website or use a third-party service, that party’s privacy policy may apply.

3. Personal Data We May Collect

3.1 Information You Provide Directly

Depending on how you interact with us, you may provide your name, mobile number, email address, billing address, delivery address, PIN code, account credentials, order details, product preferences and communication preferences. You may also provide information in a customer-support message, complaint, return request, review, survey response or other communication.

When you request a return, replacement or refund, we may ask for order information and reasonable evidence such as photographs of the parcel, shipping label, damaged product or incorrect item. Where necessary to verify a genuine packaging or delivery issue, we may request an unboxing video. Please avoid including unrelated people, documents, financial details or private surroundings in such evidence.

3.2 Order and Transaction Information

We collect information necessary to process and support an order, such as the items ordered, quantity, price, discounts, taxes, chosen payment method, payment status, order number, invoice details, shipping status, delivery confirmation, cancellation, return and refund status. We may keep records of communications connected with an order for support, accounting, fraud prevention and legal compliance.

3.3 Payment Information

Online payments may be processed by an independent payment gateway or banking partner. VAYUGA does not intend to store your complete card number, CVV, UPI PIN, OTP, net-banking password or similar authentication secret. We may receive limited transaction information from the payment provider, such as payment status, transaction reference, payment mode, masked account or card details, amount and time of payment.

For Cash on Delivery orders, we and our courier partners may process information required to verify, deliver and collect payment for the order. Never share your UPI PIN, card PIN, CVV, banking password or OTP with anyone claiming to be from VAYUGA.

3.4 Device, Log and Usage Information

When you access our website, our hosting, security, analytics or technical service providers may automatically receive technical information such as your IP address, browser type, device type, operating system, language, referring URL, pages visited, approximate location derived from IP address, date and time of access, session identifiers, error logs and interactions with website features.

This information helps the website function, helps us understand general usage patterns and assists with security, error detection, performance improvement and prevention of automated abuse. Wherever reasonably possible, analytics are used in an aggregated or limited form.

3.5 Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies. Essential cookies support functions such as cart operation, checkout, security, account login and preference storage. Analytics cookies help us understand website performance and usage. Marketing cookies, if enabled, may help measure campaigns or show more relevant promotions.

You can manage non-essential cookies through any cookie preference tool made available on the website and through your browser settings. Blocking essential cookies may prevent the cart, account, checkout or other website features from working correctly. Your browser’s help section explains how to delete or block cookies.

3.6 Communications and Marketing Preferences

If you contact us by email, phone, WhatsApp or another available channel, we may process your contact details, message content, attachments and relevant order information. If you voluntarily join a VAYUGA WhatsApp group or community, your WhatsApp profile name, phone number and other information visible under WhatsApp’s settings may be visible to WhatsApp and, depending on the type of group, to other participants. Joining such a group is optional and is also subject to WhatsApp’s own terms and privacy practices.

We may send transactional communications necessary for an order, account, delivery, return, refund, safety notice or support request. Promotional messages will be sent where permitted and based on your consent or preferences. You may opt out of marketing messages using the unsubscribe option provided, changing your preferences or contacting us. Opting out of marketing does not stop essential order or service communications.

3.7 Health and Consultation Information

VAYUGA’s ordinary shopping and article services do not require you to submit detailed medical records. Please do not send prescriptions, diagnostic reports, identity documents or sensitive health information through a general contact form, public comment, review or WhatsApp group.

If we offer a doctor-consultation facility and you deliberately request that service, limited information may be collected or shared to arrange the consultation. The participating doctor or consultation provider may act independently in relation to medical records and professional services. Any separate notice, consent form or provider privacy policy shown during the consultation process will also apply. A consultation feature is not an emergency medical service.

4. How We Collect Personal Data

We may collect personal data directly from you, automatically from your device or website session, and from service providers involved in your transaction. For example, a payment gateway may confirm that a payment succeeded, a courier partner may provide delivery status, and an advertising or analytics service may provide campaign or aggregated usage information.

If another person places an order for you or gives your details as the recipient, we may receive your name, address and phone number from that person. The person submitting the information should have authority to provide it and should inform you that it will be used for order fulfilment.

5. Why We Use Your Personal Data

We process personal data only for lawful and relevant purposes. These purposes may include:

• creating and maintaining your account;
• displaying products, operating the cart and processing checkout;
• confirming, invoicing, packing, shipping and delivering orders;
• processing payments, COD verification, cancellations, returns, replacements and refunds;
• responding to questions, complaints and grievance requests;
• sending order, account, delivery or security communications;
• preventing fraud, misuse, duplicate claims, unauthorised access and security threats;
• maintaining business, tax, accounting and customer-service records;
• improving website navigation, product information, packaging instructions and customer support;
• measuring website performance and the effectiveness of promotions;
• sending marketing communications where you have chosen to receive them or where otherwise permitted;
• establishing, exercising or defending legal claims; and
• complying with lawful requests, court orders and applicable regulatory obligations.

Where processing is based on your consent, you may withdraw that consent by contacting us or using an available preference control. Withdrawal will apply prospectively and will not affect processing already lawfully completed. Certain information may still be processed when necessary to complete an existing order, provide a requested service, comply with law, prevent fraud or resolve a dispute.

6. When We Share Personal Data

We do not sell or rent your personal data for money. We may share limited information with carefully selected recipients when reasonably necessary for the purposes described in this policy.

• Payment providers: to authorise, verify and reconcile payments or refunds.
• Courier and logistics partners: to generate labels, contact the recipient, deliver parcels, collect COD and manage delivery exceptions or returns.
• Website and technology providers: including hosting, security, backups, ecommerce, email, analytics and customer-support providers.
• Professional advisers: such as accountants, auditors, legal advisers or insurers where reasonably necessary.
• Doctors or consultation providers: only when you request a relevant consultation service and the sharing is necessary to arrange or provide it.
• Government and legal authorities: when disclosure is required by applicable law, a valid legal process, tax obligation, court order or lawful regulatory request.
• Business restructuring recipients: if our business or relevant assets are reorganised, transferred or acquired, subject to appropriate confidentiality and legal safeguards.

Service providers are expected to use personal data only for the relevant service, protect it appropriately and comply with applicable obligations. However, independent third parties such as payment gateways, couriers, social-media services and consultation providers may also process information under their own terms.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business or legal requirements. Retention periods may differ depending on whether the information relates to an active account, completed order, tax invoice, payment, complaint, refund, legal dispute, security event, marketing preference or website log.

Order, invoice, tax and payment records may be retained for periods required by tax, accounting, consumer-protection and other applicable laws. Customer-support records may be retained long enough to resolve the matter, prevent repeated abuse and maintain an accurate service history. Security logs may be retained for a limited period appropriate to detecting and investigating threats.

When personal data is no longer required, we will take reasonable steps to delete it, anonymise it or securely isolate it, subject to technical backup cycles and lawful retention requirements. Anonymised or aggregated data that no longer identifies an individual may be retained for analytics and business improvement.

8. Data Security

We use reasonable administrative, technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure. These measures may include access restrictions, secure hosting controls, software updates, malware protection, backups, authentication, encryption in transit where supported, monitoring and limiting access to persons who need the information for their work.

No website, database, internet transmission or electronic storage method is completely secure. Therefore, while we work to protect information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for using a secure device and connection. Notify us promptly if you believe your account, order information or communication with VAYUGA has been compromised.

9. Your Choices and Rights

Subject to applicable law and reasonable identity verification, you may contact us to:

• request information about the personal data we process about you;
• request correction of inaccurate or incomplete personal data;
• request updating of your account or contact details;
• request deletion or erasure where the data is no longer required and no legal exception applies;
• withdraw consent for processing based on consent;
• opt out of promotional email or WhatsApp communications;
• raise a grievance about our handling of personal data; or
• nominate another individual to exercise applicable rights in circumstances recognised by law.

To protect customers, we may ask you to verify your identity and provide sufficient details to locate the relevant account, order or communication. We will not ask for your account password, OTP or payment PIN for this purpose. We may refuse or limit a request where permitted or required by law—for example, where retention is necessary for tax records, fraud prevention, an unresolved transaction, legal proceedings or the rights of another person.

10. Children’s Privacy

Our ecommerce services are intended for adults capable of entering into a valid contract. We do not knowingly seek to collect personal data directly from children for behavioural tracking or targeted advertising. A parent or lawful guardian should place an order for a minor and supervise the minor’s use of the website.

If you believe a child has provided personal data to us without appropriate parental or guardian involvement, contact us with sufficient details. We will review the request and take appropriate action in accordance with applicable law.

11. External Links and Social Media

Our website may contain links to Instagram, Facebook, YouTube, WhatsApp, marketplaces, payment providers, courier tracking pages, articles or other third-party websites. Clicking those links may allow the third party to receive information such as your IP address, device information or the page from which you arrived. Their privacy policies, cookies and security practices are outside our control.

Public comments, product reviews or social-media posts may be visible to other users. Do not publish phone numbers, addresses, order invoices, health records or other personal information in a public area.

12. Data Processing Outside Your Location

Some technology, cloud, analytics, communication or payment service providers may process or store data in locations outside your state or outside India, subject to their infrastructure and applicable legal restrictions. Where cross-border processing occurs, we will take reasonable steps appropriate to our role and the nature of the service, and we will comply with restrictions or requirements notified under applicable Indian law.

13. Data Breach and Incident Response

If we become aware of a personal-data breach affecting information under our control, we will assess the nature and likely impact of the incident, take reasonable steps to contain and remedy it, preserve necessary records and provide notifications to affected individuals or authorities where required by applicable law. Any notification may include recommended protective steps, depending on the nature of the incident.

14. Changes to This Policy

We may update this Privacy Policy when our website, services, service providers, business processes or legal obligations change. The revised policy will be posted on this page with an updated “Last updated” date. Material changes may also be communicated through the website, account, email or another reasonable channel where appropriate.

Your continued use of the website after an update means that the revised policy will apply to future interactions. Where fresh consent is legally required for a new purpose, we will seek that consent rather than relying only on your continued use.

15. Grievance Redressal

If you have a privacy question, wish to exercise a data right or believe your information has been handled incorrectly, contact the VAYUGA Grievance Officer using the details below. Please write “Privacy Request” in the email subject and include your name, registered phone or email, relevant order number where applicable, a clear description of the request and the response you are seeking.

We will acknowledge and review genuine requests within a reasonable period and within any period required by applicable law. Complex requests, identity-verification issues or matters involving third parties may require additional time. If your complaint relates to a payment gateway, courier, social platform or independent consultation provider, we may guide you to that provider while continuing to address the part under VAYUGA’s control.