Privacy Policy

1. Introduction

GrasaMillets is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and safeguard your personal data in accordance with the Digital Personal Data Protection Act (DPDP) 2023, Information Technology Act 2000, GDPR, and CCPA.

2. User Consent

By registering on or using GrasaMillets, you explicitly consent to the collection, processing, and sharing of your data as outlined in this policy. You may withdraw your consent at any time by contacting us at grasanutrition@gmail.com or via the app settings.

3. Orders, Shipping and Refunds

This policy covers how we handle your personal data. The terms of your order are set out separately:

• Shipping costs, delivery areas, and estimated delivery times: see our Shipping Policy.
• Cancellations, replacements for damaged or off-quality products, subscriptions, and refunds: see our Refund, Cancellation & Delivery Policy and Terms & Conditions.

To help us resolve an order issue, we may ask you for your order number and photos of the product and packaging. We use these only to review your request.

4. Information We Collect

We collect the following types of information:

• Personal Information: Name, contact details, delivery address, email, and payment information.
• Usage Data: IP address, browser type, device information, and website interaction details.
• Optional Health Information: When provided voluntarily (for example, during health consultations or SuperLife assessments).

5. Purpose of Data Collection

The information we collect is used to:

• Process orders and payments securely.
• Deliver products and services efficiently.
• Send order and delivery updates, and product usage tips.
• Personalize your user experience and improve our offerings.
• Send transactional updates, promotional offers, or feedback requests.
• Ensure compliance with legal, taxation, and regulatory obligations.

6. Data Sharing

GRASA does not sell or rent your data. We may share limited information with:

• Payment gateways (e.g., Razorpay) for secure transaction processing.
• Delivery partners (e.g., Porter) for order delivery. We share only the details needed to deliver, such as your name, phone number, and delivery address.
• Technology service providers for website maintenance and analytics.
• All partners are bound by confidentiality and data protection obligations.

7. International Compliance

If you’re a resident of the EU or California, you have rights under GDPR/CCPA, including:

• Access, correction, or deletion of your data.
• Data portability.
• Right to object to data processing.

To exercise these rights, email grasanutrition@gmail.com

8. Data Security

We follow industry-standard practices to safeguard your data from unauthorized access, misuse, or disclosure. However, no electronic storage or internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

Your data is retained only as long as necessary to provide services or comply with applicable law. On request, data can be anonymized or deleted.

10. Account Deletion (iOS App)

• Users can delete their account directly from within the iOS Grasa app after logging in.
• The Delete Account option is available in the Profile section of the app.
• When a user selects the Delete Account option, their account and associated personal data will be permanently deleted from our systems.
• Account deletion is irreversible and cannot be undone once confirmed by the user.
• Certain data may be retained temporarily if required by law, security, or regulatory obligations.

11. Children’s Privacy

• Our website and products are not intended for children under the age of 13.
• We do not knowingly collect or store personal information from children.
• If we learn that a child’s information has been collected without parental consent, we will delete it promptly.

12. Changes to this Policy

We may update this Privacy Policy. Users will be notified through the app or via email in the event of significant changes.