Truwell Nutrition ("Truwell Nutrition", "we", "us", or "our") operates the website www.truwellnutrition.com and sells whey protein and related nutrition products through our website, marketplaces, and offline channels (together, the "Services"). We are committed to protecting the privacy of everyone who visits our Services or purchases our products. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you. By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

This Policy is published in accordance with the Information Technology Act, 2000 and the rules made thereunder, and is aligned with the requirements of the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India. If you do not agree with the terms of this Policy, please do not use our Services.

1. Information We Collect

We may collect the following categories of information about you:

1.1 Information You Provide to Us

•       Name, gender, and date of birth

•       Contact details such as email address, phone number, and billing/shipping address

•       Account login credentials, if you register on our website

•       Order details, including products purchased, order value, and payment method selected

•       Communications you send us, including customer support queries, product reviews, and feedback

•       Health, fitness, or dietary preferences you voluntarily share with us (for example, while seeking product recommendations)

1.2 Information Collected Automatically

•       Device information, such as IP address, browser type, operating system, and device identifiers

•       Usage information, such as pages viewed, time spent on the site, links clicked, and referring website

•       Location information derived from your IP address or, where permitted, your device's GPS

•       Cookies and similar tracking technologies (see Section 5 below)

1.3 Information from Third Parties

•       Payment confirmation and fraud-check information from our payment gateway partners

•       Delivery status information from our logistics and courier partners

•       Information from marketing and analytics partners, such as advertising identifiers

2. How We Use Your Information

We use the information we collect for purposes that include:

•       Processing and fulfilling your orders, including payment, packaging, and delivery

•       Creating and managing your account

•       Responding to customer support requests and resolving complaints

•       Sending order confirmations, shipping updates, and other transactional communications

•       Sending promotional emails, SMS, or WhatsApp messages about new products, offers, and content, where you have consented to receive them

•       Improving our website, products, and customer experience

•       Detecting, investigating, and preventing fraudulent transactions and other illegal activities

•       Complying with applicable laws, regulations, and lawful requests from government or regulatory authorities

3. Legal Basis and Consent

We collect and process your personal data on the basis of your consent, for the performance of a contract (such as fulfilling your order), or where necessary to comply with a legal obligation. Where processing is based on consent, you have the right to withdraw that consent at any time by writing to us at the contact details provided in Section 11, without affecting the lawfulness of processing carried out before such withdrawal.

4. Sharing and Disclosure of Information

We do not sell your personal data. We may share your information with:

•       Payment gateways and banks, to process your payments securely

•       Courier, logistics, and warehousing partners, to fulfil and deliver your orders

•       Information technology, hosting, customer support, and marketing service providers who assist us in operating our Services

•       Government authorities or law enforcement agencies, where required by law, court order, or to protect our rights, property, or safety, or that of our customers

•       A successor entity, in connection with a merger, acquisition, restructuring, or sale of business assets

All third parties with whom we share your information are required to use it only for the purposes for which it was shared and to maintain reasonable security practices to protect it.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to remember your preferences, keep you signed in, understand how you use our Services, and personalise content and advertisements. You can control or disable cookies through your browser settings; however, some features of our Services may not function properly if cookies are disabled.

6. Data Storage, Security, and Retention

We implement reasonable security practices and procedures, including administrative, technical, and physical safeguards, to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required to comply with our legal, accounting, or reporting obligations, after which it is securely deleted or anonymised.

7. Your Rights

Subject to applicable law, you have the right to:

•       Access the personal data we hold about you

•       Request correction of inaccurate or incomplete personal data

•       Request erasure of your personal data, subject to our legal and legitimate business requirements

•       Withdraw consent to processing that is based on consent

•       Opt out of promotional communications at any time by using the unsubscribe link in our emails or by contacting us directly

•       Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, as provided under the DPDP Act

•       Register a complaint with us, and if unsatisfied, escalate it to the Data Protection Board of India

To exercise any of these rights, please write to us using the contact details in Section 11. We will respond to your request within a reasonable time and in accordance with applicable law.

8. Children's Privacy

Our Services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps to delete such information.

9. Third-Party Links

Our website may contain links to third-party websites, including social media platforms and marketing partners. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with a revised "Effective Date". We encourage you to review this Policy periodically. Your continued use of our Services after any changes indicates your acceptance of the updated Policy.

11. Grievance Officer and Contact Us

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, the details of the Grievance Officer / Data Protection contact for Truwell Nutrition are as follows:

Grievance Officer: [Name of Grievance Officer]

Company: Truwell Nutrition

Registered Address: Plot No - 12 , Industrial estate Mulgaon, Near - Apex Techno Pvt Ltd, Khopoli, Tal - Khalapur, Dist - Raigad, Maharashtra -410203, India

Email: help@truwellnutrition.com

Phone: 9209953371

Working Hours: Monday to Saturday, 10:00 AM – 6:00 PM

We aim to acknowledge and address all privacy-related queries and complaints as promptly as possible, and in any event within the timelines prescribed under applicable Indian law.