Privacy Policy

Privacy Policy

Effective Date: May 19, 2026

Scope: Compliance with Indian & International Data Protection Frameworks

At Nutri Dehydrate, safeguarding your personal information is a fundamental priority. This brief policy outlines our data processing practices across our digital storefronts and communications, ensuring your rights are protected whether you are ordering our dehydrated fruits locally or accessing our Ayurvedic formulations internationally.

1. Legal & Regulatory Framework Compliance

We operate under a strict framework of cross-border statutory compliance to ensure your digital privacy rights remain absolute:

  • India (DPDPA, 2023 & IT Act, 2000): We operate as a Data Fiduciary. Processing is strictly executed based on explicit, unambiguous, and freely given consent, fulfilling transparent processing notices.
  • European Union (GDPR): We enforce strict Lawful Basis for Processing (including Consent and Contractual Necessity), facilitate Data Portability, honor the Right to Erasure, and utilize lawful cross-border transfer channels.
  • United States (CCPA/CPRA): We respect consumer rights to know what specific data is collected, provide opt-outs for potential information sharing, and enforce strict non-discrimination protocols when privacy choices are executed.

2. Data We Collect & Lawful Purpose

Data collection is restricted to the minimum footprint necessary to fulfill orders and enhance your experience with our products:

  • Identity & Contact: Name, delivery address, phone number, and email.
    • Purpose: Fulfillment of shipping contracts for your nutritional products, logistics tracking, and essential transactional communication.
  • Transactional Data: Payment confirmation identifiers.
    • Purpose: Processing secured invoices via certified tokenized gateways. We do not hold or store raw credit card details, UPI PINs, or banking passwords.
  • Digital Identifiers: IP addresses, browser profiles, and cookie records.
    • Purpose: System optimization, fraud protection, and customized user-experience diagnostics.

3. Data Retention & Security

We do not store personal data longer than necessary to satisfy commercial legal requirements or the explicit lifecycle of your service interaction. Our digital infrastructure incorporates Secure Sockets Layer (SSL/TLS) tracking, end-to-end payload encryption, and strict access controls to prevent unauthorized breaches.

4. Cross-Border Transfers & Third-Party Disclosures

We will never sell, trade, or rent your personal profiling data. Information sharing is strictly confined to downstream cloud infrastructures and verified logistics networks (e.g., global shipping partners and localized merchant facilities) that are bound by standard contractual clauses guaranteeing parallel levels of data protection.

5. Global Data Subject Rights

Regardless of your geographic location, you are empowered to execute the following fundamental data rights at any time:

  • Right to Access & Correct: Obtain transparent logs of your stored information and rectify any inaccuracies.
  • Right to Erasure: Request the complete removal of non-transactional profile records from our active repositories (the “Right to be Forgotten”).
  • Consent Withdrawal: Retract ongoing processing permissions for analytical or marketing updates without affecting the legality of prior processing.

Grievance Redressal & Contact In compliance with the Indian Digital Personal Data Protection Act and international guidelines, inquiries regarding policy feedback, access requests, or grievance redressal can be directed to our privacy team:

Shopping Basket