Privacy Policy

The short version

We collect what we need to send you food and nothing more: your name, mobile number, delivery address, and email if you give us one. We never sell your data. We never make marketing calls. You can ask us to delete everything at any time.

What we collect

When you place an order: name, mobile number, delivery address, email (optional), what you ordered, and the payment status. We need every one of these to actually deliver a parcel.

When you log in: your mobile number, and a temporary one-time code which is stored only as an irreversible hash and deleted the moment it is used.

Automatically: basic technical information such as your browser type and the pages you visited, so we can tell whether the site is working. If you have consented to analytics, this includes anonymised usage statistics via Google Analytics.

What we never collect: your card number, UPI PIN, CVV or netbanking password. Those go directly to our payment gateway and never touch our servers.

Why we use it

• To mill, pack, deliver and invoice your order
• To send you order updates by email and SMS
• To let you log in and see your own orders
• To answer your questions when you contact us
• To keep the required records of sales for tax purposes
• To understand, in aggregate, which pages and products people find useful

We do not use your data for automated decision-making or profiling.

Who else sees it

Only the partners who make the order happen, and only what they need:

• Our courier partner, to deliver the parcel: your name, address and phone number.
• Our payment gateway, to take payment: your name, contact details and the amount.
• Our email and SMS providers, to send you order updates.
• Our hosting and database providers, who store the data on our behalf.
• Government authorities, where the law requires it.

That is the complete list. We do not sell, rent or trade your personal information to anybody, for any amount, ever.

How long we keep it

Order records are kept for 8 years, because Indian tax law requires it. Login codes are deleted within minutes. If you ask us to delete your account we remove your name, phone, email and addresses and keep only the anonymised financial record we are legally obliged to retain.

Your rights

You can ask us to:

• tell you what data we hold about you
• correct anything that is wrong
• delete your account and personal details
• stop sending you marketing emails (there is an unsubscribe link in every one)

Email hello@naturalhealthmix.in from the address on your account, or WhatsApp us from your registered number, and we will act within 30 days.

Cookies

We use a small number of cookies: one to keep you logged in, one to remember your basket, and — only if you consent — analytics cookies. There are no advertising or cross-site tracking cookies on this website.

Children

This site is not directed at children, and we do not knowingly collect data about anyone under 18. Some of our products are intended to be prepared by an adult for a child; the account and the order always belong to the adult.

Security

Data is transmitted over HTTPS. Login sessions use signed, httpOnly cookies. Login codes are stored hashed, never in readable form. Access to the database is restricted to the server that runs this website. No system is perfectly secure, but if there were ever a breach affecting your data we would tell you promptly and plainly.

Changes

If this policy changes materially we will say so on the site. The date at the top tells you when it last changed.

Contact

Questions about your data: hello@naturalhealthmix.in, or write to Natural Health Mix, Chennai, Tamil Nadu, India.