Privacy Policy

This Privacy Policy is an electronic record in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). No physical or digital signatures are required.

This Privacy Policy applies to all users ("Users") accessing or using the services of Earthara through our website (www.earthara.com), mobile applications, wellness consultations, customer support channels, or any related services. By accessing or using our services, you consent to the practices described in this Privacy Policy.

A. Personal Data

• Name
• Phone number
• Email address
• Billing and shipping address
• Date of birth (where applicable)
• IP address, browser type, and device information

B. Sensitive Personal Data (SPD)

• Payment information (card details, UPI ID, etc.)
• Authentication credentials (such as passwords)
• Health and wellness information voluntarily shared by users for consultations, recommendations, assessments, or personalized services

Sensitive Personal Data is collected only with your prior, clear, and explicit consent through appropriate opt-in mechanisms.

We collect and process your information to:

• Provide healthcare, wellness, and related services
• Process orders and deliver products
• Schedule consultations and customer support interactions
• Personalize health and wellness recommendations
• Improve website functionality and user experience
• Send promotional and educational communications (with your consent)
• Comply with legal, taxation, and regulatory obligations

We process your personal data on the basis of your consent and/or for legitimate uses permitted under the DPDP Act, including fulfilling orders, providing requested services, and complying with legal obligations. Where processing is based on consent, you may withdraw it at any time

By using our services, you consent to the collection, storage, and processing of your data as described in this Policy. You may withdraw your consent at any time by writing to support@earthara.com. Withdrawal of consent will not affect prior lawful processing and may limit our ability to provide certain services.

We do not disclose your Sensitive Personal Data to third parties without your consent,except:

• To trusted service providers, including payment gateways, logistics partners, and technology vendors
• To licensed healthcare professionals engaged in providing requested services
• To comply with legal, regulatory, or governmental requests
• To protect the rights, property, or safety of Earthara, its users, or the public

We implement reasonable security practices and procedures including encryption, access controls, and secure servers to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is fully secure, and we cannot guarantee
absolute security.

We use cookies and similar technologies to:

• Remember user preferences
• Facilitate secure transactions
• Personalise content and recommendations
• Analyse website performance and usage patterns

Users may disable cookies through browser settings; however, doing so may impact certain
website functionalities.

We may use trusted third-party services (such as payment gateways, logistics partners, analytics, and marketing tools) that process certain data on our behalf. These parties are contractually obligated to handle your data securely and only for the specified purposes.

Personal data is retained only for as long as necessary to fulfil the purposes outlined in this Policy or as required by applicable law. Aggregated and anonymised information may be retained for research, analytics, and business improvement purposes

In accordance with the DPDP Act, you have the right to:

• Access information about the personal data we hold about you
• Request correction, completion, or updating of inaccurate data
• Request erasure of your personal data, subject to legal retention requirements
• Withdraw consent at any time
• Nominate an individual to exercise your rights in the event of death or incapacity
• Raise a grievance with our Grievance Officer

To exercise any of these rights, please contact us at support@earthara.com.

Our services are not directed at individuals under the age of 18. We do not knowinglycollect personal data from minors without verifiable parental or guardian consent. If we become aware that such data has been collected, we will take steps to delete it.

To exercise any of these rights, please contact us at support@earthara.com.

We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised effective date. Continued use of our services constitutes acceptance of the updated Policy.

In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023:

• Grievance Officer: [Name]
• Email: support@earthara.com
• Address: [Registered Office Address]

We will acknowledge grievances within the timelines prescribed under applicable law