Privacy Policy – Pure and Better

This Privacy Policy describes how Vitascend Health Private Limited (operating the brand “Pure and Better,” “we,” “us,” or “our”), owner of the website pureandbetter.health (the “Website”), collects, uses, processes, and protects your personal data. We are committed to safeguarding your privacy and ensuring compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules, 2011).

By accessing or using our Website, you signify that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Website.

1. Information We Collect

We collect various types of personal data to provide and improve our services. The information we collect falls into the following categories:

1.1. Information You Provide Directly to Us:

* Account Signup Information: When you create an account, we collect details such as your name, surname, email address, phone number, username, passwords, and physical address.

* Communication Data: When you communicate with us via email, chat, messages, or other means, we collect information about your communication and any details you choose to provide or disclose. This may include accessing information from your purchase history to address your requests.

* User-Generated Content: We may collect images or other content you upload for purposes such as product reviews, support chat interactions, or image-based product search.

* Payment Information: To facilitate order processing, we collect financial information, including credit or debit card numbers, card type, expiration date, billing address, and your name.

* Demographic Information: We may occasionally ask for optional demographic information such as your age, gender, or postal code.

1.2. Information Collected Automatically (Through Website Usage):

* Usage Data: When you use our Website, we automatically collect information about your interactions, the services you use, and how you use them. This includes your online browsing history and search queries.

* Log Data: Our web servers automatically collect limited information about your computer’s connection to the internet, including your Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks.6 This information does not identify you personally.

* Cookies and Tracking Technologies: We use “cookies” and similar tracking technologies to collect information about your preferences and the pages you access or visit. While these technologies may not directly collect personally identifiable information, if you have previously provided such information, cookies may be tied to it.3 We may share aggregate cookie and tracking information with third parties.

2. How We Use Your Information (Purposes of Processing)

We use the personal information we collect for various explicit and legitimate purposes, in accordance with the DPDP Act, 2023 :

To Provide and Operate Services: To provide, operate, and maintain our Website and services, including processing your orders and managing your account.
To Improve User Experience: To improve, personalize, and expand our Website, understand and analyze how you use it, and develop new products, services, features, and functionality.
For Payment Processing: To process payments for purchases and other services.
For Security and Fraud Prevention: To detect and protect against errors, fraud, and other criminal activity, and to promote safe services.
For Communication and Marketing: To communicate with you, respond to your inquiries, inform you about offers, products, services, and updates, and customize your experience.3We may use your information for marketing our products and services.
For Legal and Compliance Purposes: To enforce our terms and conditions, resolve disputes, and comply with our legal obligations.

3. Legal Basis for Processing Your Personal Data

We process your personal data based on the following legal grounds :

Consent: We will normally collect personal information from you where we have your explicit consent to do so. Your consent must be free, specific, informed, unconditional, and unambiguous, provided through a clear affirmative action.
Contractual Necessity: Where we need the personal information to perform a contract with you or to take steps at your request before entering into a contract (e.g., processing your orders).
Legitimate Interests: Where the processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms (e.g., for marketing our products and services, improving our Website).
Legal Obligation: Where the processing is necessary to comply with a legal obligation (e.g., responding to court orders or government authorities).
Other Legitimate Uses: As permitted by the DPDP Act, 2023, such as when you voluntarily share personal information without objection to processing, or for responding to medical emergencies.

4. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you, as a Data Principal, have significant rights regarding your personal data :

Right to Access: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information about its processing.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Right to be Forgotten): You have the right to request the erasure of your personal data under certain conditions, for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
Right to Withdraw Consent: You have the right to withdraw your consent at any time with the same ease with which it was given. This will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Nominate: You have the right to nominate an individual to exercise your rights on your behalf in case of your death or incapacitation.

To exercise any of these rights, please contact us using the details provided in the “Grievance Redressal” section below. We will respond to your request within the statutory timeframe.

5. Consent Mechanism

We are committed to obtaining your consent in a transparent and compliant manner:

Clear Notice: Along with or before every request for consent, we will provide you with a clear notice informing you about the specific personal data being collected, the proposed purpose of processing, and how you can exercise your rights, including withdrawing consent and utilizing the grievance redressal mechanism.
Affirmative Action: Consent will be obtained through a clear affirmative action from you, ensuring it is free, specific, informed, unconditional, and unambiguous.
Language Options: You will have the option to view the notice and consent form in English or any other language specified in the Eighth Schedule of the Constitution of India.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to provide services to you, to comply with our legal obligations, resolve disputes, and enforce our agreements.2 We will delete personal data if consent is withdrawn or the specified purpose for processing is no longer served, unless retention is legally necessary.

7. Data Security Measures

We are committed to protecting the personal information you share with us. We have implemented and maintain “reasonable security practices and procedures” designed to protect your information from unauthorized access, damage, use, modification, disclosure, or impairment. These measures include:

Physical, Electronic, and Procedural Safeguards: We employ a combination of physical, electronic, and procedural safeguards to protect your data.
Regular Monitoring: We regularly monitor our systems for possible vulnerabilities and attacks.
Access Control: Access to personal information is limited only to those who have a legitimate business need.
Encryption: All data transmitted and stored by us is handled in an encrypted manner in accordance with applicable laws to ensure secrecy and confidentiality.

8. Data Sharing and Disclosure

We will not voluntarily disclose your personal information to any third party except in the following circumstances:

Third-Party Service Providers: We may share your information with trusted third-party service providers who perform services on our behalf, such as payment processing, shipping, data analysis, and customer support. These providers are obligated to protect your information and use it only for the purposes for which it was shared.
Affiliated Entities: We may share personal information within Vitascend Health Private Limited and its affiliated entities for business purposes.
Legal Requirements: We may disclose your personal information if required by a court order, by Government Authorities, by law enforcement authorities, or by other legal processes, or where it becomes necessary to do so to protect our rights or property.
Business Transfers: In the event of a merger, acquisition, transfer, or any restructuring involving Vitascend Health Private Limited, your personal information may be disclosed as part of such transaction.
Public Display of User Content: If you submit user-generated content, such as product reviews, your name and the content of your review (but not your email address or IP address) may be publicly displayed on our Website based on our legitimate interest in marketing our products and services.

9. Cross-Border Data Transfer

Your personal data may be transferred to and processed in countries outside India. Such transfers are permissible unless the Central Government specifically restricts transfers to notified countries (a “blacklisting” approach). However, if other laws or sectoral regulations provide higher protection or impose greater restrictions on cross-border transfers, those provisions will apply. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your data.

10. Children’s Privacy

Our Website is intended for a general audience. We do not knowingly collect any Personal Identifiable Information from children under the age of 18 without verifiable parental or guardian consent.

If you are under 18, please use our Website only with the assistance and presence of your parents or guardians.
We explicitly prohibit tracking, behavioral monitoring, and targeted advertising directed at children.
We also prohibit any processing of children’s data that is likely to cause a detrimental effect on their well-being.
If you believe that your child has provided us with personal information without your consent, please contact us immediately at reachus@pureandbetter.health, and we will take reasonable steps to promptly remove such information from our records.6

11. Cookies and Other Tracking Technologies

As mentioned in Section 1.2, we use cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and personalize content. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

12. Third-Party Links

Our Website may contain links to third-party websites for your convenience and information. If you access those links, you will leave our Website. We do not control those sites or their privacy practices, which may differ from ours. We do not endorse or make any representations about third-party websites. This Privacy Policy does not cover the personal data you choose to share with unrelated third parties.12 We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to this Privacy Policy

We reserve the right to update, change, or modify this Privacy Policy at any time without prior notification. Any changes will be effective immediately upon posting the updated Privacy Policy on our Website. Your continued use of the Website after such modifications signifies your acceptance of the amended Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Grievance Redressal

For any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our designated Grievance Officer:

Grievance Email: reachus@pureandbetter.health

We are committed to resolving your concerns promptly and efficiently. As per the DPDP Act, 2023, you must first exhaust this internal grievance redressal mechanism before escalating your complaint to the Data Protection Board of India.7

Vitascend Health Private Limited
Website: pureandbetter.health
Email: reachus@pureandbetter.health