Privacy policy

2.1 Information We Collect

We do not knowingly collect personal data from minors without verified parental or guardian consent.

2.2 Purpose & Legal Basis of Processing

We process your personal data on the basis of your consent and, where applicable, our legitimate business interest, to:

• Process, confirm, pack, and deliver your orders
• Provide customer support and manage returns, replacements, or refunds
• Send transactional updates (order confirmation, shipping, delivery status)
• Send promotional or marketing communication, where you have opted in
• Detect, investigate, and prevent fraud or misuse of the Website
• Analyse and improve Website performance, product offerings, and customer experience
• Comply with applicable legal, tax, and regulatory obligations

2.3 Consent & Withdrawal

By using the Website and providing your information, you consent to the collection and processing described in this Policy. You may withdraw consent for marketing communication at any time via the unsubscribe link in our emails, by replying "STOP" to WhatsApp/SMS communication, or by contacting us directly.

Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal, or our ability to send essential transactional communication related to an active order.

2.4 Payment Information

All payments are processed through secure, PCI-DSS-compliant third-party payment gateways. Nature's Medley does not store your complete card number, CVV, UPI PIN, or net-banking credentials on its own servers.

2.5 Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Keep the Website functioning correctly (e.g., cart persistence, login sessions)
• Remember your preferences and browsing history on our site
• Analyse traffic patterns and Website usage
• Measure the performance of our marketing campaigns (e.g., Meta/Google Ads)

You can manage or disable cookies through your browser settings; disabling certain cookies may affect Website functionality such as cart retention or personalised recommendations.

2.6 Data Sharing & Disclosure

We may share your personal data with:

• Payment gateway providers, to process transactions
• Courier and logistics partners, to fulfil delivery
• Analytics, advertising, and marketing platforms (e.g., Meta, Google), for campaign measurement
• Customer support and IT service providers, to operate the Website
• Legal, regulatory, or governmental authorities, where required by applicable law or a valid legal process

2.7 Data Storage & Security

We implement reasonable technical and organisational safeguards — including encryption, access controls, and secure hosting — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

2.8 Data Retention

We retain your personal data only for as long as reasonably necessary to fulfil the purposes described in this Policy, including order processing, warranty/return claims, accounting, tax, legal compliance, and dispute resolution, after which it is securely deleted or anonymised.

2.9 Your Rights under the DPDP Act, 2023

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate or incomplete data
• Request erasure of your data, subject to legal retention requirements
• Withdraw consent for optional processing (e.g., marketing)
• Nominate another individual to exercise your rights in the event of your death or incapacity
• Raise a grievance with our Grievance/Data Protection Officer, and subsequently escalate to the Data Protection Board of India if unresolved

We will respond to verified requests within 4 to 5 business days wherever reasonably possible, and in any case within the timelines prescribed by law.

2.10 Grievance / Data Protection Officer

2.11 Cross-Border Data Transfer

Where any personal data is processed or stored outside India (e.g., via cloud service providers), we ensure such transfer is carried out in compliance with applicable data protection laws and with adequate safeguards in place.

2.12 Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. Material changes will be notified through the Website or via email/SMS where appropriate.

2.13 Contact Us