Privacy Policy

1. Introduction

GrasaMillets is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and safeguard your personal data in accordance with the Digital Personal Data Protection Act (DPDP) 2023, Information Technology Act 2000, GDPR, and CCPA.

2. User Consent

By registering on or using GrasaMillets, you explicitly consent to the collection, processing, and sharing of your data as outlined in this policy. You may withdraw your consent at any time by contacting us at info@grasafoods.com or via the app settings.

3. Refund Policy

Users are eligible for a refund on applicable services or products if the request is raised within 14 days of the purchase or service commencement, subject to the terms and conditions outlined in our separate Terms of Service document. Please refer to the Terms of Service for full details on eligibility and processing.

4. Shipping/Delivery Policy

For physical products or services that require delivery, the estimated delivery timeframe is generally within 7 days from the confirmation of the order. This is subject to availability and logistics. Specific delivery timelines will be provided at the time of purchase.

5. Information We Collect

We collect the following types of information:

• Personal Information: Name, contact details, delivery address, email, and payment information.
• Usage Data: IP address, browser type, device information, and website interaction details.
• Optional Health Information: When provided voluntarily (for example, during health consultations or SuperLife assessments).

6. Purpose of Data Collection

The information we collect is used to:

• Process orders and payments securely.
• Deliver products and services efficiently.
• Send medication reminders and care tips.
• Personalize your user experience and improve our offerings.
• Send transactional updates, promotional offers, or feedback requests.
• Ensure compliance with legal, taxation, and regulatory obligations.

7. Data Sharing

GRASA does not sell or rent your data. We may share limited information with:

• Payment gateways (e.g., Razorpay) for secure transaction processing.
• Logistics partners for order delivery.
• Technology service providers for website maintenance and analytics.
• All partners are bound by confidentiality and data protection obligations.

8. International Compliance

If you're a resident of the EU or California, you have rights under GDPR/CCPA, including:

• Access, correction, or deletion of your data.
• Data portability.
• Right to object to data processing.

To exercise these rights, email support@grasafoods.com

9. Data Security

We follow industry-standard practices to safeguard your data from unauthorized access, misuse, or disclosure. However, no electronic storage or internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

Your data is retained only as long as necessary to provide services or comply with applicable law. On request, data can be anonymized or deleted.

11. Account Deletion (iOS App)

• Users can delete their account directly from within the iOS Grasa app after logging in.
• The Delete Account option is available in the Profile section of the app.
• When a user selects the Delete Account option, their account and associated personal data will be permanently deleted from our systems.
• Account deletion is irreversible and cannot be undone once confirmed by the user.
• Certain data may be retained temporarily if required by law, security, or regulatory obligations.

12. Children's Privacy

• Our website and products are not intended for children under the age of 13.
• We do not knowingly collect or store personal information from children.
• If we learn that a child’s information has been collected without parental consent, we will delete it promptly.

13. Changes to this Policy

We may update this Privacy Policy. Users will be notified through the app or via email in the event of significant changes.