This Privacy Policy explains how Jaadu Diet collects, uses, and protects your personal information when you visit our website or purchase from us. We are committed to safeguarding your privacy in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

1. About Jaadu Diet

Jaadu Diet operates this website and online store to offer you a curated range of ayurvedic supplement products. Our website is built and hosted on Shopify, which enables us to provide you with a seamless shopping experience.

Registered Address: SR. No. 83 & 84, Regency Cosmos, Flat No. A-1-904, Baner Gaon, Haveli, Pune, Maharashtra 411045, India

Email: wecare@jaadudiet.com  |  Phone: +91 9076219087

2. Scope of This Policy

This Privacy Policy applies to all visitors, users, and customers who access or use our website, purchase products, or communicate with us through any channel. By using our website or purchasing our products, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

If there is any conflict between this Privacy Policy and our Terms & Conditions, this Privacy Policy shall govern with respect to the collection, processing, and disclosure of your personal information.

3. Legal Framework

We process your personal data in compliance with the following laws and regulations:

• Digital Personal Data Protection Act, 2023 (DPDP Act), India

• Information Technology Act, 2000 and the IT (Amendment) Act, 2008

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

• Consumer Protection Act, 2019

• Food Safety and Standards Authority of India (FSSAI) regulations applicable to ayurvedic products

As a Data Fiduciary under the DPDP Act, 2023, Jaadu Diet is responsible for processing your personal data lawfully, fairly, and transparently. You, as a customer, are a Data Principal under this Act and have specific rights described in Section 9 of this Policy.

4. Personal Information We Collect

We collect only the information necessary to provide you with our services. The categories of personal information we may collect include:

4.1 Information You Provide Directly

• Contact details: your name, email address, phone number, billing address, and shipping address

• Account information: username, password, and account preferences

• Transaction information: products you order, return, exchange, or cancel

• Payment information: payment method details processed securely via PayU Payment Gateway (we do not store your full card details on our servers)

• Communications: any messages or queries you send us via email, phone, or contact forms

4.2 Information Collected Automatically

• Device and browser information: IP address, browser type, operating system, and device identifiers

• Usage data: pages visited, time spent on pages, links clicked, and navigation patterns

• Cookie and tracking data: collected via cookies, pixels, and similar technologies (see Section 6 for details)

4.3 Information from Third Parties

• From Shopify: as our e-commerce platform provider, Shopify may share usage and transaction data with us

• From payment processors: PayU may share transaction confirmation and fraud-check data

• From analytics providers: aggregated and anonymised usage data from Google Analytics

We do not collect sensitive personal data such as health records, medical history, or biometric data. While we sell ayurvedic supplements, we do not ask for or store any health-related personal information as part of your purchase.

5. How We Use Your Personal Information

We use your personal information only for the purposes for which it was collected and as permitted under applicable law. Specifically:

5.1 To Fulfil Your Orders

• Process and confirm your purchases

• Arrange delivery and shipping of your products

• Send order confirmations, shipping updates, and delivery notifications via email or SMS

• Process returns, exchanges, or refunds

5.2 To Manage Your Account

• Create and maintain your customer account

• Remember your preferences and shopping history

• Respond to your queries and provide customer support

5.3 For Marketing and Promotions

• Send you promotional emails, offers, and newsletters — only if you have opted in or are an existing customer

• Show you targeted advertisements on third-party platforms including Google and Meta (Facebook/Instagram) based on your browsing and purchase activity

• You may opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us

5.4 For Security and Fraud Prevention

• Authenticate your account and verify your identity

• Detect, investigate, and prevent fraudulent, illegal, or unauthorised transactions

• Protect the security of our website and your data

5.5 For Legal Compliance

• Comply with applicable laws, including tax and GST obligations

• Respond to legal requests from courts, regulatory bodies, or law enforcement authorities

• Enforce our Terms & Conditions and other policies

5.6 To Improve Our Services

• Analyse usage patterns and customer feedback to improve our website, product range, and services

• Conduct internal research and business analytics

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies on our website to enhance your experience and gather analytics. Here is what we use and why:

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on how Google uses data from sites that use its services, visit: policies.google.com/technologies/partner-sites.

7. How We Share Your Personal Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

7.1 With Service Providers

We share your information with trusted third-party service providers who help us operate our business, including:

• Shopify — e-commerce platform and website hosting

• PayU — payment processing

• Google LLC — analytics (Google Analytics)

• Meta Platforms Inc. — advertising (Meta Pixel)

• Courier and logistics partners — for order fulfilment and delivery

• Customer support tools — to manage your queries and complaints

All service providers are contractually obligated to process your data only for the purposes we specify and to maintain appropriate security measures.

7.2 With Business and Marketing Partners

We may use your data to personalise advertisements shown to you on third-party platforms (Google, Meta). These platforms operate under their own privacy policies. You can opt out of personalised advertising through the links below:

• Google: myaccount.google.com/data-and-privacy

• Meta: facebook.com/settings?tab=ads

7.3 For Legal Reasons

We may disclose your information where required by law, court order, or government/regulatory authority, or to protect the rights and safety of Jaadu Diet, our customers, or others.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any such change and your rights in relation to it.

7.5 With Your Consent

We may share your data with other third parties where you have given us your explicit consent to do so.

8. Relationship with Shopify

Our website is powered by Shopify. Shopify acts as both a service provider and, in certain instances, an independent data controller for data it collects through our store. Shopify collects and processes your personal information to provide and improve its platform services.

Information you submit on our website is transmitted to and stored by Shopify. Shopify may store this data on servers located outside India. To learn more about how Shopify handles your data and to exercise your rights over Shopify-processed data, please visit the Shopify Consumer Privacy Policy at: shopify.com/legal/privacy.

9. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian laws, you have the following rights with respect to your personal data:

• Right to Access: You may request a summary of your personal data that we hold and the purposes for which it is being processed.

• Right to Correction: You may request that we correct any inaccurate or incomplete personal data we hold about you.

• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.

• Right to Grievance Redressal: You have the right to have your grievances addressed by our Grievance Officer within the timelines specified by applicable law.

• Right to Nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

• Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

• Right to Opt Out of Marketing: You may unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us directly.

To exercise any of these rights, please contact our Grievance Officer using the details in Section 12. We will verify your identity before processing any request and respond within 30 days, or as required by applicable law.

10. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law. Our general retention schedule is as follows:

• Order and transaction records: 7 years (as required under GST and tax laws)

• Account data: retained until you delete your account or request erasure

• Marketing preferences and opt-in records: until you withdraw consent

• Customer support communications: 2 years from the date of last interaction

• Website usage data (analytics): as per the retention settings of Google Analytics (default: 26 months)

When data is no longer required, we securely delete or anonymise it in accordance with applicable law.

11. Data Security

We implement industry-standard security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website

• Secure payment processing through PayU, which is PCI-DSS compliant — we do not store your full card details

• Access controls limiting employee access to personal data on a need-to-know basis

• Regular security reviews of our systems and third-party integrations

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. We recommend that you do not share your account password with anyone and that you use secure internet connections when accessing your account.

In the event of a data breach that is likely to affect your rights and interests, we will notify you and the appropriate authorities as required under applicable law.

12. Grievance Officer

In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address concerns relating to the processing of your personal data.

If you are not satisfied with our resolution, you may lodge a complaint with the Data Protection Board of India, once established under the DPDP Act, 2023, or approach any other competent authority under applicable law.

13. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact our Grievance Officer immediately at wecare@jaadudiet.com and we will take steps to delete such information promptly.

As of the effective date of this Policy, we do not knowingly collect, share, or sell personal information of individuals under the age of 18.

14. International Data Transfers

Your personal information may be transferred to and stored on servers located outside India, including by our service providers such as Shopify (Canada/USA), Google (USA), and Meta (USA). These countries may have data protection laws that differ from those in India.

We ensure that any such transfer is carried out with appropriate safeguards in place, including standard contractual clauses or equivalent mechanisms, to protect your personal data in accordance with this Policy and applicable Indian law.

15. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or other online services. These third-party sites have their own privacy policies and we are not responsible for their content or practices. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the 'Last Updated' date at the top of this Policy

• Post the revised Policy on our website

• Where required by law, notify you by email or prominent notice on our website

Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please reach out to us through any of the following channels:

© 2026 Jaadu Diet. All rights reserved. This Privacy Policy was last updated on 30 May 2026.