SRUTHI HERBAL LABORATORIES – Privacy Policy

Oct 11, 2026 · @SRUTHI HERBAL LABORATORIES

Last updated: 11 October 2026

1. About this policy

This Privacy Policy explains how SRUTHI HERBAL LABORATORIES, having its office at 2/119/3, Mylampatti, Karayampalayam, Coimbatore – 641062, Tamil Nadu, India ("Sruthi Herbal Laboratories", "Company", "we", "us" or "our") collects, uses, shares and protects your personal data when you visit www.sruthiherbal.com (the "Website"), buy from us, or contact us (together, the "Services").

We act as the Data Fiduciary for your personal data, meaning we decide why and how it is processed. "You" means any customer, visitor or other person whose personal data we process.

We follow Indian law, including:

• the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025;
• the Information Technology Act, 2000 and the rules made under it; and
• the Consumer Protection (E-Commerce) Rules, 2020.

By accessing or using the Website or the Services, you confirm that you have read and understood this Privacy Policy. Where the law requires your consent, we ask for it at sign-up, at checkout or through our cookie banner. Your clear action, such as ticking a box or clicking "I agree", is your consent to the purposes listed in Section 3.

2. Personal data we collect

We collect only the data we need for the purposes listed in Section 3.

We also receive limited data from service providers who work for us, such as Shopify (our e-commerce platform), our payment gateway and our courier partners, for example delivery status updates.

If you choose not to give us data marked as required at checkout, we will not be able to process your order.

3. How we use your personal data

We use your data only for these purposes:

1. Selling our products: taking orders and payment, packing and shipping, sending order and delivery updates, and handling returns, refunds and exchanges.
2. Managing your account: creating and maintaining your account and saved details.
3. Customer support: answering your questions, requests and complaints.
4. Marketing and product promotion: sending you offers, discounts, new product launches, festive campaigns, newsletters and reminders by email, SMS, WhatsApp, phone call, postal mail and social media.
5. Advertising: showing you our ads on Facebook, Instagram, Google, YouTube and other platforms, including reaching you and people with similar interests using securely hashed contact details.
6. Analysis and business insights: analysing purchase history, browsing behaviour, location and demographic information to understand customer trends, group customers into segments, measure campaigns, and plan products, stock and pricing.
7. Personalisation: recommending products and offers based on what you have bought, viewed or searched for.
8. Feedback and reviews: inviting you to rate products, take surveys and share testimonials.
9. Legal and tax compliance: keeping invoices and records required under GST and other Indian laws, and responding to lawful requests from authorities.
10. Protecting our business: preventing fraud and misuse, enforcing our terms, and defending legal claims.
11. Business changes: a merger, acquisition, sale of assets or restructuring of our business.

Purposes 1, 2, 3, 9, 10 and 11 are needed to provide the Services, meet our legal duties and protect our business. Purposes 4 to 8 are based on the consent you give at sign-up, checkout or through the cookie banner. As Indian law requires, buying from us does not depend on this consent, and you can withdraw it at any time (Section 4).

We may also use anonymised or aggregated data, which can no longer identify you, for any business purpose, including research, reporting and sharing with partners.

4. Your consent and how to withdraw it

Where we need your consent, we ask for it with a clear action from you, such as ticking an unticked box. We never treat browsing, pre-ticked boxes or silence as consent.

• Marketing messages: you choose separately whether to receive offers by email, SMS or WhatsApp. Saying no will not affect your orders.
• Analytics and advertising cookies: you choose these through the cookie banner on the Website.

You can withdraw consent at any time, as easily as you gave it:

• click "Unsubscribe" in any marketing email;
• reply STOP to our SMS or WhatsApp messages;
• change your cookie choices using the "Cookie settings" link at the bottom of the Website; or
• write to our Grievance Officer (Section 13).

Withdrawing consent stops future processing for that purpose. It does not affect processing already done, or processing we must continue for your orders or under law. We will still send service messages about your orders and account.

Please allow up to 10 working days for a withdrawal to take full effect across our systems and those of our service providers. Messages already scheduled during that time may still reach you.

5. Health-related information

Because we sell herbal products, your order history or support messages may reveal something about your health, for example a product chosen for a particular concern. We treat this information with extra care.

• We use it to fulfil your orders and answer your questions, and, with your consent, to recommend suitable products and analyse demand for our product range.
• We do not share health-related details with advertising partners in a form that identifies you.
• Our product descriptions, blog posts and support replies are general information, not medical advice. Please consult a qualified doctor before using any product, especially if you are pregnant, nursing, taking medicines or have a medical condition. Individual results may vary.
• Please don't send us medical reports or prescriptions unless we specifically ask for them.

6. Who we share your data with

We share your data with the recipients below for the purposes in Section 3. Sharing for marketing and advertising happens only with your consent.

Service providers process your data only on our instructions and under contracts that require them to protect it. If our business is merged, sold or restructured, your data may pass to the new owner, who must follow this policy.

7. Cookies and tracking technologies

Cookies are small files stored on your device. We use three kinds:

• Essential cookies keep the Website working, for example your cart and login. These are always on.
• Analytics cookies help us understand how visitors use the Website. These are used only with your consent.
• Advertising cookies and pixels (such as the Meta Pixel) help us measure and show our ads. These are used only with your consent.

You can change your choices at any time through "Cookie settings" on the Website or your browser settings. Blocking essential cookies may stop parts of the Website from working. Details of Shopify's cookies are at https://www.shopify.com/legal/cookies.

8. Payments

Card, UPI, net banking and wallet payments are handled by our payment gateway. We do not see or store your full card number, CVV, UPI PIN or banking passwords. Card details are stored only by the gateway or card network, in line with Reserve Bank of India rules, including tokenisation.

9. Children's data

Our Services are meant for adults. Under Indian law, anyone under 18 is a child. We do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian, and we never track children or show them targeted advertising.

If you believe a child has given us personal data without a parent's consent, contact our Grievance Officer and we will delete it.

10. Security, storage and data breaches

We protect your data with reasonable security measures, including encrypted (HTTPS) connections, access limited to staff who need it, strong passwords and access logs. No system is completely secure, so please keep your account password private and tell us at once if you think your account has been misused.

Storage outside India: our service providers, including Shopify, may store and process your data on servers outside India. We transfer data abroad only as permitted under the DPDP Act and never to a country the Government of India has restricted.

If a breach happens: if your personal data is affected by a security breach, we will inform you without delay, explaining what happened, the likely impact and the steps you can take. We will also report it to the Data Protection Board of India as required by law.

11. How long we keep your data

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires.

When the retention period ends, we delete or anonymise the data and ask our service providers to do the same. Anonymised data may be kept and used indefinitely.

12. Your rights

Under the DPDP Act, you have the right to:

• Access: get a summary of the personal data we hold about you, how we use it, and who we have shared it with.
• Correct and update: fix inaccurate or incomplete data.
• Erase: ask us to delete your data when it is no longer needed, unless the law requires us to keep it.
• Withdraw consent: stop any processing based on your consent (Section 4).
• Grievance redressal: have your complaints handled by our Grievance Officer (Section 13).
• Nominate: name another person to exercise these rights for you if you die or become unable to act.

To use any of these rights, email sruthiherballab@gmail.com or write to our Grievance Officer. We may ask you to confirm your identity first, for example with a code sent to your registered phone or email. We will respond within the time allowed by law, currently up to 90 days. We may decline or limit a request where the law permits, for example where we must keep data under tax laws, or where a request is unfounded, excessive or repetitive.

When you use your rights, please give accurate information and don't file false or frivolous complaints, as the DPDP Act places these duties on you too.

13. Grievance Officer and complaints

If you have a question or complaint about your personal data or about our Services, contact our Grievance Officer:

We will acknowledge your complaint within 48 hours and aim to resolve it within one month of receiving it.

As required by Section 13(3) of the DPDP Act, you must first raise any personal data complaint with our Grievance Officer and allow us the time above to resolve it before approaching the Data Protection Board of India.

14. Reviews and links to other websites

If you post a product review, your review and the name you choose to display will be public. Please don't include personal or health details you don't want others to see. By posting a review, rating, testimonial, photo or video, you give SRUTHI HERBAL LABORATORIES a free, worldwide, perpetual licence to use, copy, edit for length and publish it, with your display name, on the Website, social media and in advertising. You may ask us to remove your personal details from it; we may continue to use the content without them.

The Website may link to other websites and social media platforms, such as Instagram or Facebook. Their own privacy policies apply, and we are not responsible for how they handle your data.

15. Limitation of liability and dispute resolution

To the maximum extent permitted by law:

• The Website and its content are provided "as is" and "as available", without warranties of any kind beyond those required by law.
• SRUTHI HERBAL LABORATORIES, its proprietors, partners, employees and agents are not liable for any indirect, incidental, special, consequential or punitive loss, or for loss of data, profit or goodwill, arising from your use of the Website or our handling of your data.
• We are not liable for loss caused by events beyond our reasonable control, including cyber-attacks despite reasonable safeguards, failures of third-party service providers, power or network outages, natural disasters, or government action, or by your failure to keep your login details safe.
• Our total liability for any claim relating to this policy or your data is limited to the amount you paid us for the order the claim relates to.

Indemnity: you agree to compensate SRUTHI HERBAL LABORATORIES for any loss, claim or expense, including reasonable legal fees, arising from false information you give us, your misuse of the Website, or your breach of this policy or of any law.

Dispute resolution: before starting any legal proceeding, you agree to write to our Grievance Officer and give us 30 days to resolve the matter amicably. Any dispute not resolved this way will be referred to arbitration by a sole arbitrator appointed by mutual agreement, or failing that under the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration will be Coimbatore, Tamil Nadu, and proceedings will be in English.

Nothing in this policy excludes or limits any right or remedy that cannot be excluded or limited under Indian law, including under the Consumer Protection Act, 2019 and the DPDP Act.

16. Changes, governing law and contact

Changes: we may update this policy at any time to reflect changes in our business or the law. The updated version takes effect when posted here with a new "Last updated" date, and your continued use of the Services means you accept it. Where the law requires fresh consent for a new purpose, we will ask for it.

Governing law: this policy is governed by the laws of India. Subject to your rights under consumer protection law, and to Section 15, courts at Coimbatore, Tamil Nadu shall have exclusive jurisdiction.

Contact us: SRUTHI HERBAL LABORATORIES, 2/119/3, Mylampatti, Karayampalayam, Coimbatore – 641062, Tamil Nadu, India. Phone: +91 89033 18888. Email: care@sruthiherbal.com. Website: www.sruthiherbal.com.