Privacy policy

Green Aura ("we", "us", "our") sells herbal supplements online at mygreenaura.com. This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it.

We are the Data Fiduciary for the personal data described here, under India's Digital Personal Data Protection Act, 2023.

The data we collect

When you place an order. Your name, delivery address, phone number and email address. We need these to take payment, pack your order and deliver it.

When you pay. Payments are handled by our payment gateway. We never see or store your full card number, UPI PIN, CVV or netbanking credentials. We receive only confirmation that a payment succeeded or failed, the amount, and the last four digits or a reference number.

When you contact us. Whatever you tell us by email, phone or WhatsApp, and our replies.

When you browse the site. Your IP address, approximate location, device type, browser, the pages you visited, how you reached us, and similar technical information. This comes from cookies and similar technologies.

When you sign up for messages. Your email address and phone number, and whether you opened or clicked what we sent.

We do not ask for and do not want your health records, prescriptions, diagnoses or medical history. Please do not send them to us. If you tell us about a health condition in a message, we use it only to answer that message.

Why we use it

• To take, pack, deliver and, where needed, refund your order
• To verify Cash on Delivery orders by one-time password, which protects both of us against fraudulent orders
• To answer your questions and handle complaints
• To send you order updates by email, SMS and WhatsApp
• To send you marketing messages, only where you have agreed to receive them
• To keep the site working, measure which pages and advertisements bring people to us, and improve both
• To meet our obligations under tax, accounting, food safety and consumer protection law

The basis on which we use it

Where you have given consent, for example for marketing messages, we rely on that consent. You can withdraw it at any time, and doing so is as easy as giving it. Use the unsubscribe link in any email, reply STOP to a message, or write to us using the details at the end of this policy. Withdrawing consent does not affect anything we did before you withdrew it.

Where we need your data to perform the contract between us, for example to deliver an order you placed, we rely on that. Where the law requires us to keep records, we rely on that.

Who we share it with

We do not sell your personal data. We share it only with the companies that help us run the store, and only as much as each one needs:

• Shopify, which hosts the store and processes orders
• Razorpay, our payment gateway
• Our logistics partners, who carry your parcel and need your name, address and phone number
• SMS, email and WhatsApp providers, including MSG91 and Interakt, who deliver our messages
• Order verification services, including Cartsaver and Releasit, used for Cash on Delivery one-time passwords and order confirmation
• Analytics and advertising services, including Google Analytics, Google Ads and Meta, which tell us how the site is used and which advertisements work
• Our accountants and professional advisers, where required
• Government authorities, where the law requires us to disclose data

Some of these companies store data on servers outside India. Where that happens, we take reasonable steps to ensure the data is protected to the standard this policy describes.

Cookies and tracking

The site uses cookies and similar technologies. Some are necessary, for example to keep items in your cart and to keep you logged in. Others measure traffic and advertising performance.

You can block or delete cookies in your browser settings. If you block the necessary ones, parts of the site, including the cart and checkout, will stop working.

How long we keep it

Order and invoice records are kept for eight years, as tax and company law require.

Marketing contact details are kept until you unsubscribe, and then only long enough to make sure we do not contact you again.

Messages you send us are kept for three years, so we can refer back to a previous conversation.

Analytics data is kept for the period set in each analytics service, currently up to fourteen months.

How we protect it

The site runs over an encrypted connection. Access to order data is limited to people who need it to do their job. Payment details never reach our systems. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

If a data breach occurs, we will notify you and the Data Protection Board of India as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Know what personal data of yours we hold and who we have shared it with
• Correct data that is wrong, and complete data that is incomplete
• Erase data we no longer need for the purpose it was collected for, or where you withdraw the consent it rested on
• Withdraw consent at any time, as easily as you gave it
• Nominate another person to exercise these rights on your behalf if you die or become unable to act
• Complain to us, and if you are not satisfied, to the Data Protection Board of India

To exercise any of these, write to the Grievance Officer below. We will acknowledge within 48 hours and resolve within 30 days.

We may ask you to confirm your identity before we act, so that we do not give your data to someone else.

Children

Our products are intended for adults. We do not knowingly collect personal data from anyone under the age of 18, and we do not direct advertising at children. If you believe a child has given us personal data, tell us and we will delete it.

Grievance Officer

In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023, the contact for all privacy questions, complaints and requests is:

Aditya Patel, Grievance Officer Green Aura 3 Sukun-1, Near Madhi Ashram, T.B. Road, Vijapur, Mehsana, Gujarat 382870, India Email: info@mygreenaura.com Phone: +91 97232 35975

Complaints are acknowledged within 48 hours and resolved within 30 days.

Changes to this policy

If we change this policy we will update the date at the top. Where the change is significant we will tell you by email or by a notice on the site.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

Email: info@mygreenaura.com Phone: +91 97232 35975 Post: Green Aura, 3 Sukun-1, Near Madhi Ashram, T.B. Road, Vijapur, Mehsana, Gujarat 382870, India