index

Privacy policy

Last updated: May 1, 2026

Applies Worldwide | GDPR & Indian IT Act Compliant

🔒
Data Sold?Never
📧
Marketing
Opt-in Only
🌍
Scope
Worldwide
 
Your Rights
Full Control


Who We Are

Ayuvra ("we", "our", "us") is a food and wellness brand that sells Ayurvedic consumable products worldwide through our online store at ayuvra.in. We are the data controller responsible for the personal information you share with us.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at connect@ayuvra.in.

Information We Collect

We collect only the information necessary to process your order and provide you with a great experience. Here is what we collect and why:

Type of Data Examples Why We Collect It
Identity Name, email address To process and confirm your order
Contact Shipping address, phone number To deliver your products
Payment Card type, last 4 digits (not full card number) To process payment securely via payment gateway
Order Items purchased, order history, preferences To manage orders and handle returns/support
Technical IP address, browser type, device info, cookies To improve website performance and security
Communications Messages you send us, survey responses To respond to your enquiries and improve our service

We do not store your full payment card details. All payment processing is handled by our secure payment partners (e.g., Razorpay, Stripe) who are PCI-DSS compliant.

How We Use Your Information

Your personal data is used only for legitimate business purposes related to your relationship with Ayuvra:

  • To process, fulfil, and deliver your orders — including sending order confirmations and tracking information.
  • To handle returns, refunds, or customer support requests.
  • To send transactional communications (order updates, delivery notifications).
  • To send marketing emails, promotions, or newsletters — only if you have opted in.
  • To improve our website, product range, and customer experience through analytics.
  • To comply with legal obligations (tax records, fraud prevention, regulatory requirements).
  • To personalise your browsing experience and show relevant products.

Cookies & Tracking

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how you use our site.

  • Essential cookies: Required for the website and checkout to function. Cannot be disabled.
  • Analytics cookies: Help us understand visitor behaviour (e.g., Google Analytics). You may opt out.
  • Marketing cookies: Used to show relevant ads on third-party platforms (e.g., Meta, Google Ads). Requires your consent.
  • Preference cookies: Remember your language, currency, and cart contents.

You can manage or withdraw cookie consent at any time via our cookie banner or your browser settings. Disabling non-essential cookies will not affect your ability to shop with us.

Sharing Your Information

We do not sell, rent, or trade your personal data. We share it only where necessary with trusted third parties who help us operate our business:

  • Shopify Inc. — our e-commerce platform (data hosted on Shopify's servers).
  • Payment processors (e.g., Razorpay, Stripe, PayPal) — to securely process transactions.
  • Shipping partners & couriers — to deliver your orders worldwide.
  • Email service providers (e.g., Klaviyo, Mailchimp) — to send transactional and marketing emails.
  • Analytics providers (e.g., Google Analytics) — to understand website usage.
  • Legal or regulatory authorities — when required by law or to protect our rights.

All third-party partners are contractually required to protect your data and use it only for the specific purposes we authorise.

International Data Transfers

As Ayuvra ships worldwide, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may have different data protection laws.

Where data is transferred outside of the European Economic Area (EEA) or India, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or transfers to countries with an adequacy decision.

By placing an order with Ayuvra, you acknowledge that your data may be transferred internationally as described above.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:

  • Order and transaction records: retained for 7 years for tax and accounting purposes.
  • Customer account data: retained while your account is active, or up to 3 years after your last interaction.
  • Marketing preferences: retained until you unsubscribe or request deletion.
  • Support communications: retained for 2 years after resolution.

After these periods, your data is securely deleted or anonymised.

Your Rights & Choices

Depending on where you live, you have the following rights over your personal data:

👁️ Right to Access

Request a copy of the personal data we hold about you.

✏️ Right to Rectify

Ask us to correct any inaccurate or incomplete information.

🗑️ Right to Erasure

Request that we delete your personal data ("right to be forgotten").

⏸️ Right to Restrict

Ask us to limit how we use your data in certain circumstances.

📦 Right to Portability

Receive your data in a machine-readable format to transfer to another service.

🚫 Right to Object

Object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, email us at connect@ayuvra.in. We will respond within 30 days. We may need to verify your identity before processing your request.

To unsubscribe from marketing emails, simply click the "Unsubscribe" link at the bottom of any email, or email us directly. You will continue to receive transactional order-related emails.

Data Security

We take the security of your personal data seriously. Ayuvra implements appropriate technical and organisational measures to protect your information against unauthorised access, loss, or misuse:

  • Our website uses SSL/TLS encryption (HTTPS) for all data transmissions.
  • Payment data is processed via PCI-DSS compliant third-party providers — we never store raw card details.
  • Access to customer data is restricted to authorised personnel only.
  • We conduct regular reviews of our data handling practices.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

Children's Privacy

Ayuvra's website and products are not directed at children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal data from minors. If you believe a child has provided us with their data, please contact us and we will promptly delete it.

Third-Party Links

Our website may contain links to third-party websites (such as social media platforms or partner brands). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page will always indicate when the latest revision was made.

We encourage you to review this policy periodically. For significant changes, we will notify you by email or by displaying a notice on our website.

Privacy questions or data requests?

Our team will respond within 30 days.

connect@ayuvra.in