Privacy Policy

Last updated: June 2026

1. Introduction

Mrittika Wellness Pvt. Ltd. ("we", "us", "our") is committed to protecting your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP 2023). This policy explains what data we collect, how we use it, and your rights as a data principal.

2. Data We Collect

We collect the following personal data when you use our website or place an order:

Identity Data: Full name
Contact Data: Email address, phone number
Address Data: Shipping and billing address
Payment Data: Payment method details (processed securely by Razorpay — we do not store card/bank details)
Usage Data: Browsing patterns, device info, and cookies

3. How We Use Your Data

We use your personal data solely for the following lawful purposes:

Processing and fulfilling your orders
Communicating order updates, shipping notifications, and delivery tracking
Providing customer support
Sending promotional offers and updates (only with your consent)
Improving our website, products, and services

4. Legal Basis for Processing

We process your data under the following lawful bases as defined by the DPDP 2023:

Consent: For marketing communications and non-essential cookies
Contractual Necessity: To process and deliver your orders
Legal Obligation: To comply with applicable Indian laws

5. Third-Party Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only with:

Logistics partners (Delhivery, Shiprocket) — name, phone, and delivery address for order fulfillment
Payment processor (Razorpay) — transaction data for secure payment processing
Legal authorities — when required by law or to protect our rights

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Order-related data is retained for a minimum of 3 years for tax and legal compliance.

7. Data Security

We implement industry-standard security measures including SSL encryption, secure servers, and access controls to protect your data from unauthorized access, disclosure, or destruction.

8. Your Rights (DPDP 2023)

As a data principal under the DPDP 2023, you have the right to:

Access and receive a copy of your personal data
Correct inaccurate or incomplete data
Request erasure of your data (subject to legal obligations)
Withdraw consent for data processing at any time
Nominate another person to exercise your rights on your behalf
Lodge a complaint with the Data Protection Board of India

9. Cookies

We use essential cookies to operate the website and optional analytics cookies to understand usage patterns. You can manage your cookie preferences through your browser settings.

10. Children's Data

Our products and website are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this privacy policy periodically. Significant changes will be communicated via email or website notice. Continued use of our services constitutes acceptance of the updated policy.

12. Contact

For data-related queries or to exercise your rights, contact our Data Protection Officer at privacy@mrittika.in or message us on WhatsApp at 6000386664.