Legal Policy
Privacy
Policy
Overview Who we are & what this policy covers
This Privacy Policy describes how Herbal Unify, operating the brand HerbalUnify ("we", "us", or "our"), collects, uses, and protects the personal information you provide when you visit our website or make a purchase.
This policy applies to all information collected through our Shopify-powered website, email communications, WhatsApp interactions, and any related services. By using our website, you consent to the practices described in this Privacy Policy.
This policy is governed by the Information Technology Act, 2000, the IT (Amendment) Act, 2008, and applicable provisions of the Personal Data Protection Bill (PDPB) of India.
Information We Collect What data we gather and why
| Data Type | What We Collect | When Collected |
|---|---|---|
| Identity Data | Full name, billing/shipping name | At checkout or account creation |
| Contact Data | Email address, phone number, WhatsApp number | At checkout, contact form, newsletter signup |
| Address Data | Delivery address, city, state, PIN code | At checkout for shipping |
| Transaction Data | Order details, payment method type (not card numbers), transaction ID | On every purchase — processed by Razorpay |
| Technical Data | IP address, browser type, device type, pages visited, session duration | Automatically via Shopify & analytics tools |
| Marketing Data | Email/SMS preferences, newsletter subscriptions | When you subscribe or opt-in |
| Communications | Messages sent via contact form, WhatsApp, or email | When you contact our support team |
How We Use Your Data Purpose of processing
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process & fulfil your orders | Identity, Contact, Address, Transaction | Contract performance |
| Send order confirmations & updates | Email, Phone | Contract performance |
| Shipment tracking via Delhivery | Name, Address, Phone | Contract performance |
| Handle returns, refunds & complaints | Identity, Contact, Transaction | Legal obligation |
| Send marketing emails / SMS (with consent) | Email, Phone, Marketing preferences | Consent |
| Improve website & user experience | Technical Data | Legitimate interest |
| Fraud prevention & security | Technical, Transaction | Legitimate interest |
| Legal compliance & record-keeping | All categories | Legal obligation |
You may opt out of marketing communications at any time by clicking "Unsubscribe" in any email, replying STOP to SMS messages, or contacting us directly at ask.herbalunify@gmail.com.
Sharing & Disclosure Who else sees your data
We do not sell, rent, or trade your personal information to any third party. We share data only with trusted service providers who help us operate our business, under strict confidentiality agreements:
- Delhivery — receives your name, address, and phone number for delivery purposes only
- Razorpay — processes payments securely; we do not have access to your full card details
- Shopify Inc. — hosts our store and processes order data on our behalf under their Data Processing Agreement
- Email/SMS providers — to send transactional and marketing communications (with your consent)
We may also disclose your information if required by law, court order, or governmental authority in India, or to protect the rights, property, or safety of our business or customers.
Cookies & Tracking How we track site usage
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Shopping cart, login sessions, checkout process | Session / 30 days |
| Analytics | Understanding how visitors use our site (Shopify Analytics) | Up to 2 years |
| Marketing | Retargeting ads, conversion tracking (with consent) | Up to 1 year |
| Preference | Remembering your language, currency, and display preferences | Up to 1 year |
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website, particularly the shopping cart and checkout process.
Data Security How we protect your information
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.
- SSL Encryption: All data transmitted between your browser and our website is encrypted using TLS/SSL (HTTPS)
- Shopify Security: Our store is hosted on Shopify's Level 1 PCI DSS compliant infrastructure
- Razorpay PCI-DSS: All payment processing is handled by Razorpay under the highest security standards
- Access Controls: Only authorised personnel have access to customer data, with role-based permissions
- Data Minimisation: We collect only what is necessary and retain it only as long as required
In the event of a data breach that affects your personal information, we will notify you as required under applicable Indian law within a reasonable timeframe.
Your Rights Control over your personal data
Under Indian data protection laws and global best practices, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct any inaccurate or incomplete personal data
Right to Erasure
Request deletion of your data (subject to legal obligations)
Right to Opt-Out
Unsubscribe from marketing communications at any time
Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests
To exercise any of these rights, email us at ask.herbalunify@gmail.com with "Data Rights Request" in the subject line. We will respond within 30 days.
Third-Party Services External platforms we use
These services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of these third-party providers.
Children's Privacy Under 18 policy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you are under 18, please use our website only under the supervision of a parent or legal guardian.
If we discover that we have inadvertently collected personal data from a child under 18 without parental consent, we will take immediate steps to delete such information. If you believe we have collected data from a minor, please contact us immediately at ask.herbalunify@gmail.com.
Policy Updates How we notify you of changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Send a notification email to registered customers for material changes
- Display a notice on our website homepage for a reasonable period
We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy. The current version was last updated in March 2026.
Grievance Officer As required by IT Act 2000
As required under the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer to address complaints and concerns regarding the processing of your personal data.
| Business Name | Herbal Unify |
| Grievance Officer | Customer Support Team |
| ask.herbalunify@gmail.com | |
| Phone / WhatsApp | +91 7981727252 |
| Address | Bapatla, Andhra Pradesh — 522101, India |
| Response Time | Within 30 days of receiving your complaint |
Questions about your privacy?
We take your data rights seriously. Reach out and we'll respond within 30 days. Mon–Sat, 9 AM–6 PM IST.