01 What We Collect

• When you order or register: name, phone number, email, billing and shipping address, PIN code, order history.
• When you pay: payment is processed by our checkout partner GoKwik. We receive only a transaction reference and status — we never see or store your card number, CVV, UPI PIN or net-banking password.
• When you contact us: the content of your emails, WhatsApp messages, calls and contact-form submissions, including any photos or videos you send for a return claim.
• Automatically: IP address, device and browser type, pages viewed, referring site, and cookie data (see Section 6).
• With your consent: your email/phone for offers and updates if you subscribe.

02 Why We Use It

• To process, pack, ship and track your order and send you order updates by email, SMS or WhatsApp.
• To respond to enquiries, complaints and return requests.
• To issue GST invoices and keep records required by law.
• To prevent fraud, verify Cash on Delivery orders, and secure the Website.
• To improve our products and Website using analytics.
• To send offers, launches and wellness tips — only if you opt in. You can unsubscribe at any time.

03 Who We Share It With

We share only what is necessary, and only with:

• Courier partners through Shiprocket — name, phone, address, to deliver your order.
• Checkout and payment partner GoKwik — to process payment and prevent fraud.
• Website hosting, email/SMS/WhatsApp and analytics providers (WordPress/WooCommerce host, Google Analytics, Meta Pixel) — under their own privacy terms.
• Government or law-enforcement authorities when legally required.
• A successor business if Biotic Herbals is merged or acquired, under the same protections.

04 How Long We Keep It

Order and invoice records are kept for the period required under GST and Income-tax law (currently up to 8 years). Marketing data is kept until you unsubscribe. Account data is kept until you ask us to delete it, unless we must retain it by law.

05 Security

All Website traffic is SSL-encrypted (look for the padlock in your browser). Payments are handled by a PCI-DSS-compliant partner. Access to customer data is restricted to staff who need it. No system is 100% secure, but we take reasonable and industry-standard steps and will notify you and the authorities as required if a breach affects your data.

06 Cookies

We use cookies to keep you logged in, remember your cart, understand how the site is used, and measure our advertising. Essential cookies are needed for checkout; analytics and marketing cookies can be declined through the cookie banner or your browser settings.

07 Your Rights

Under the Digital Personal Data Protection Act, 2023 you may, at any time:

• Ask what personal data we hold about you and receive a copy.
• Ask us to correct or update it.
• Ask us to delete it (subject to legal record-keeping).
• Withdraw consent for marketing.
• Nominate a person to exercise these rights on your behalf.
• Raise a grievance.

Write to care@bioticherbals.com with "Privacy request" in the subject line. We respond within 30 days.

08 Children

The Website is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has provided data to us, contact us and we will delete it.

09 Third-Party Links

Links to social media, courier tracking or the checkout partner lead to sites we do not control; their privacy policies apply there.

10 Changes

We may update this Policy. The effective date at the top will change and, for significant changes, we will notify registered users by email.

11 Grievance Officer / Data Contact