PRIVACY POLICY
1. INTRODUCTION AND GENERAL
1.1. This Privacy Policy (“Policy”) is a legally binding document between persons accessing or using the website https://shopjustt.com (“Website”) as a visitor, browser, registered user or customer (hereinafter referred to as “User”, “you”, “your” or “yourself”) and Wellvanta Healthcare Private Limited (hereinafter referred to as “Wellvanta”, “Company”, “we”, “us” or “our”).
1.2. Wellvanta Healthcare Private Limited is a company incorporated under the Companies Act, 2013, having its registered office at:
Wellvanta Healthcare Private Limited
S-82, 2nd Floor, Moongipa Arcade, Shree Ashtavinayak CHS Ltd, Oshiwara, near Old D N Nagar, next to Ganesh Chowk, Andheri West, Mumbai, Maharashtra 400053.
Corporate Identity Number (CIN): [●]
GSTIN: [●]
FSSAI Licence No. (if applicable): [●]
E-mail: [●]
Contact Number: [●]
1.3. Wellvanta is engaged in the business of marketing, selling and distributing essential vitamins, minerals, nutraceuticals, dietary supplements and other health and wellness products (“Products”) through the Website and such other platforms as may be notified from time to time. In the course of its business and for providing its services and Products, Wellvanta may collect, receive, store, process, transfer and otherwise deal with information and personal data relating to Users.
1.4. We value your concerns about privacy and the protection of your personal data. The protection of your rights when processing your personal data is an important concern for us. In this Policy, we aim to be completely transparent about the personal data that we collect, why we collect it, how we use it, whom we share it with, how long we retain it and what rights you have in relation to such data.
1.5. This Policy is published in accordance with the provisions of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and any other applicable laws, rules and regulations concerning electronic records and data protection in India, as may be amended, re-enacted or replaced from time to time.
1.6. This Policy shall be read together with and forms an integral part of the Terms & Conditions of the Website, the Cookie Policy, and such other terms, conditions and policies as may be made available on the Website from time to time. This electronic record is generated by a computer system and does not require any physical or digital signatures.
1.7. By accessing or using the Website, registering an account, placing an order for Products, submitting information, or otherwise interacting with us, you expressly consent to the collection, storage, use, processing, disclosure and transfer of your personal data in accordance with this Policy. If you do not agree with the terms of this Policy, you are requested not to use the Website or provide any personal data to us.
2. DEFINITIONS
2.1. For the purposes of this Policy, the following expressions shall have the meanings assigned to them below:
(a) “Personal Data” means any data about an individual who is identifiable by or in relation to such data, whether directly or indirectly, including any personally identifiable information such as name, contact details, identification numbers, online identifiers, or any other attribute that can identify a person, whether from such data alone or in combination with other information that we have or are likely to have access to.
(b) “Sensitive Personal Data or Information” shall have the meaning assigned to it under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and may include, where applicable, health-related information, medical conditions, and such other data as may be notified from time to time.
(c) “Processing” of personal data means an operation or set of operations performed on personal data, and includes collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, use, alignment, combination, indexing, sharing, disclosure, dissemination, erasure or destruction.
(d) “Applicable Law” means any statute, law, regulation, ordinance, rule, judgement, order, decree, bye-law, approval, directive, guideline, policy, requirement or other governmental restriction, or any similar form of decision of, or determination by, or any interpretation or administration having the force of law in India, as may be amended from time to time.
The words “include”, “includes” and “including” shall be construed as being followed by the words “without limitation”.
3. SCOPE AND APPLICABILITY
3.1. This Policy applies to all Users accessing or using the Website and to all personal data collected by us or on our behalf, whether through the Website, mobile site, customer support channels, social media pages, e-mail communications, offline forms, or any other mode or medium in connection with the Products and services offered by Wellvanta.
3.2. This Policy does not apply to information collected by any third-party websites, applications or services which are not owned, managed or controlled by Wellvanta, even if such third-party websites are linked to or accessible from the Website. We encourage you to review the privacy policies of those third parties separately.
4. CONSENT
4.1. BY ACCESSING OR USING THE WEBSITE, BY CREATING AN ACCOUNT, BY PLACING AN ORDER, BY SUBMITTING ANY PERSONAL DATA OR BY OTHERWISE INTERACTING WITH WELLVANTA, YOU HEREBY PROVIDE YOUR FREE, SPECIFIC, INFORMED, UNAMBIGUOUS AND EXPLICIT CONSENT TO THE COLLECTION, STORAGE, USE, PROCESSING, DISCLOSURE AND TRANSFER OF YOUR PERSONAL DATA (INCLUDING HEALTH-RELATED INFORMATION, IF ANY) IN ACCORDANCE WITH THIS POLICY AND APPLICABLE LAW.
4.2. If you are providing personal data on behalf of another person (for instance, placing an order for a family member or dependant), you represent and warrant that you have obtained the consent of such person to provide their personal data to us and that such person has authorised you to consent to this Policy on their behalf.
4.3. You may withdraw your consent at any time, subject to legal and contractual restrictions, by sending a written request to our Grievance Officer at the contact details specified in Clause 16 below. Upon withdrawal of consent, we may be unable to provide you with some or all of our services, and we shall not be responsible or liable for any consequences arising from such withdrawal.
5. CATEGORIES OF PERSONAL DATA WE COLLECT
5.1. We may collect the following categories of personal data about you, depending on your use of the Website and your interactions with us:
(a) Identity Data: Name, title, date of birth, gender, age group, and such other identifiers as you may provide.
(b) Contact Data: E-mail address, mobile number, residential address, shipping address, billing address, alternate contact details and such other contact information.
(c) Account Data: Username, password or other login credentials, security questions and answers, profile details, preferences, order history, wishlists, saved addresses and any other information associated with your user account on the Website.
(d) Transaction and Payment Data: Details of Products purchased, quantity, price, order details, payment method, payment status, transaction ID, partial card numbers (if received in masked form), UPI ID, wallet reference and such other transactional information. Please note that we do not store your full credit card, debit card or bank account details; such details are processed by secure third-party payment gateways compliant with industry standards.
(e) Health and Wellness-Related Information (if voluntarily provided): Information relating to your general wellness, such as dietary preferences (e.g. vegetarian, vegan), allergies or intolerances (e.g. lactose intolerance, nut allergy), specific nutritional deficiencies (e.g. vitamin D or B12 deficiency), general health goals (e.g. immunity support, bone health, energy levels), and such other information that you may choose to share when seeking recommendations or guidance regarding Products. Wellvanta does not provide medical diagnosis or treatment and does not collect any medical reports unless you voluntarily choose to share such information.
(f) Technical and Usage Data: IP address, device identifiers, browser type and version, operating system, access times, referring website addresses, pages viewed, time spent on pages, clickstream data, search queries, and other information generated from cookies, web beacons, pixels, log files and similar technologies when you interact with the Website, as more particularly described in our Cookie Policy.
(g) Communications Data: Records of your communications with us, including e-mails, messages, chats, calls, feedback, reviews, queries, complaints, survey responses and any other information you may provide during interactions with our customer support or through other channels.
(h) Marketing and Preference Data: Your preferences in receiving marketing or promotional communications from us, your Product interests, responses to campaigns and offers, and information about how you engage with our newsletters and other communications.
5.2We do not knowingly collect personal data from children below the age of 18 years without the consent of a parent or legal guardian. If you are a parent or guardian and believe that we have collected personal data from your child without consent, please contact us so that we can take appropriate steps.
6. HOW WE COLLECT PERSONAL DATA
6.1. We may collect personal data about you in a variety of ways, including:
(a) Directly from You: When you register or create an account on the Website, place an order for Products, subscribe to our newsletters, fill in forms, participate in contests or surveys, contact our customer support, submit feedback or reviews, or otherwise communicate with us.
(b) Automatically When You Use the Website: When you access or use the Website, certain technical and usage information is automatically collected by means of cookies, web beacons, tags, scripts, log files and similar technologies. For more details, please refer to the Cookie Policy.
(c) From Third Parties: We may receive certain personal data about you from third parties, such as payment gateways (with respect to transaction confirmations), logistics partners (with respect to delivery status), marketing or analytics partners, social media platforms (if you choose to sign in or interact through such platforms), and from any other sources as permitted by applicable law.
7. PURPOSES OF PROCESSING YOUR PERSONAL DATA
7.1. We may process your personal data for one or more of the following purposes:
(a) Provision of Products and Services: To enable you to browse the Website, to register and manage your user account, to allow you to place orders, to process and fulfil your orders, to arrange shipping and delivery of Products, and to provide any other services requested by you.
(b) Customer Support and Communication: To respond to your queries, requests and complaints, to provide technical support, and to communicate with you regarding your orders, deliveries, cancellations, returns, refunds, and any other transactional updates.
(c) Personalisation and Recommendations: To understand your preferences and usage patterns, to personalise your experience on the Website, to suggest or recommend Products that may be of interest to you, and to tailor the content and offers displayed to you.
(d) Health and Wellness Context: To the limited extent that you voluntarily provide dietary, allergy or wellness-related information, to help you identify Products that may be suitable or to highlight cautionary advisories where a Product may not be appropriate; provided always that such information shall not be used as a substitute for professional medical advice.
(e) Marketing and Promotions: To send you information about Products, offers, promotions, newsletters, surveys, events or other marketing communications that we believe may be of interest to you, subject to your preferences and consent, where required.
(f) Improvement of Website and Services: To analyse usage trends, monitor and improve the performance, functionality, security and user experience of the Website, carry out research and development, and develop new features, services or offerings.
(g) Legal Compliance and Protection of Interests: To comply with legal obligations, regulatory requirements, tax or accounting obligations, and to respond to lawful requests from governmental or judicial authorities. We may also process personal data to detect, prevent and investigate fraud, abuse, security threats, violations of our Terms & Conditions, and to protect the rights, property or safety of Wellvanta, its Users and the public.
(h) Any Other Purpose: For any other purpose for which you provide your specific consent or which is incidental to the purposes stated above.
8. COOKIES AND SIMILAR TECHNOLOGIES
8.1. The Website uses cookies and similar technologies to help us recognise you, understand how you interact with the Website, improve your user experience, and provide relevant content and advertisements. Cookies are small data files stored on your device when you visit the Website.
8.2. Some cookies are essential for the functioning of the Website (for example, to keep you logged in while you navigate the site or to remember items in your shopping cart), while others help us analyse traffic or remember your preferences.
8.3. By using the Website, you consent to the placement of cookies and similar technologies on your device as described in this Policy and in the detailed Cookie Policy available on the Website. You may configure your browser to block or disable cookies; however, please note that certain features of the Website may not function properly if cookies are disabled.
9. SHARING AND DISCLOSURE OF PERSONAL DATA
9.1. We respect your privacy and do not sell your personal data to third parties. However, we may share your personal data with the following categories of recipients for the purposes set out in this Policy:
(a) Group Entities and Affiliates: We may share personal data with our group companies, affiliates or subsidiaries, if any, for purposes consistent with this Policy.
(b) Service Providers and Partners: We may engage third-party service providers who perform functions on our behalf, such as payment gateways, banks, logistics and courier partners, warehousing and fulfilment centres, cloud hosting providers, IT and infrastructure providers, analytics providers, marketing agencies, customer support providers and professional advisers. These service providers are given access to personal data only to the extent necessary to perform their functions and are bound by contractual obligations to maintain confidentiality and implement appropriate security measures.
(c) Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, governmental authorities, regulatory bodies or courts, if required to do so by law or if we believe in good faith that such disclosure is reasonably necessary to:
(i) comply with a legal obligation,
(ii) respond to lawful requests, investigations or proceedings,
(iii) protect and defend our rights or property,
(iv) prevent or investigate possible wrongdoing, fraud or security incidents, or
(v) protect the safety of Users or the public.
(d) Business Transfers: In the event of any proposed or actual merger, acquisition, restructuring, reorganisation, sale of assets, financing or similar corporate transaction involving Wellvanta, your personal data may be transferred to the relevant third party as part of the transaction, subject to appropriate confidentiality obligations and in compliance with applicable law.
(e) With Your Consent: We may share your personal data with any other person or entity where you have specifically consented to such disclosure.
9.2Wherever we share personal data with third parties, we shall take reasonable steps to ensure that such third parties are bound by obligations of confidentiality and data protection consistent with this Policy and applicable law.
10. DATA STORAGE, SECURITY AND RETENTION
10.1. Your personal data may be stored and processed on secure servers located within India and/or such other jurisdictions as may be permitted under applicable law. We implement reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including encryption, access controls, firewalls and periodic security reviews.
10.2. While we strive to use commercially acceptable means to protect your personal data, you understand and acknowledge that no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your personal data, and you provide your personal data at your own risk.
10.3. We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as may be required by applicable law, contractual obligations, legitimate business purposes, or for the establishment, exercise or defence of legal claims. Thereafter, personal data may be anonymised or securely deleted.
10.4. The criteria used to determine our retention periods include, but are not limited to: the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, the existence of legal or contractual retention obligations, and our legitimate business needs.
11. INTERNATIONAL TRANSFERS
11.1. At present, it is envisaged that personal data will primarily be processed and stored within India. However, certain third-party service providers, such as cloud hosting services, analytics tools or payment partners, may be located in, or may process data from, jurisdictions outside India.
11.2. In the event that your personal data is transferred outside India, we shall ensure that such transfer is carried out in compliance with Applicable Law, including the DPDP Act, and that reasonable safeguards (such as contractual protections or equivalent mechanisms) are implemented to protect your personal data.
12. CHILDREN’S PRIVACY
12.1. The Website is not intended for use by children under the age of 18 years without the supervision of a parent or legal guardian. We do not knowingly collect personal data directly from children under 18 years of age.
12.2. If you are a parent or guardian and believe that your child has provided personal data to us without your consent, please contact us using the contact details specified in Clause 16, and we will take reasonable steps to delete such personal data from our systems, subject to Applicable Law.
13. YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
13.1. Subject to Applicable Law, you may have the following rights in relation to your personal data that we hold:
(a) Right to Access: You may have the right to request confirmation as to whether we process your personal data and, where applicable, to request a copy of such data.
(b) Right to Correction: You may have the right to request correction, completion or rectification of any inaccurate or incomplete personal data that we hold about you.
(c) Right to Withdraw Consent: Where processing is based on your consent, you may have the right to withdraw such consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
(d) Right to Deletion / Erasure: You may have the right to request deletion or erasure of your personal data, subject to legal and contractual restrictions and our legitimate interests.
(e) Right to Restriction or Objection: You may have the right to request restriction of processing of your personal data or to object to certain forms of processing, particularly in relation to direct marketing.
(f) Right to Data Portability (if applicable under law): You may have the right to request that we provide your personal data to you or to another data fiduciary in a structured, commonly used and machine-readable format, where technically feasible.
13.2. To exercise any of the above rights, you may write to our Grievance Officer at the contact details provided in Clause 16, clearly stating your request, along with proof of your identity and any other details required to process your request. We may, in good faith, verify your identity before acting upon such requests.
13.3. We will endeavour to respond to your requests within a reasonable time and in accordance with Applicable Law. Please note that certain rights may be subject to limitations and exceptions under Applicable Law, and we may not be able to comply with a request where there are overriding legitimate grounds or legal obligations.
14. ACCURACY AND UPDATING OF YOUR INFORMATION
14.1. You are responsible for ensuring that the personal data you provide to us is accurate, complete and up-to-date. If there are any changes to your personal data, you are encouraged to update the same through your account on the Website or by contacting us.
14.2. We shall not be liable for any loss, damage or inconvenience arising from your failure to maintain accurate and updated personal data.
15. CHANGES TO THIS PRIVACY POLICY
15.1. We reserve the right to update, modify or amend this Policy at any time, to reflect changes in our data processing practices, legal requirements or other operational needs. Any changes to this Policy will be posted on the Website with an updated effective date.
15.2. You are advised to review this Policy periodically to ensure that you are aware of the current version. Your continued use of the Website after any changes to this Policy have been posted shall constitute your acceptance of such changes.
16. CONTACT US
16.1. If you have any questions, concerns, complaints or grievances regarding this Policy, the processing of your personal data, or our privacy practices, you may contact at the details provided below:
E-mail: contact@shopjustt.com
17. ACKNOWLEDGEMENT
By using the Website, creating an account, or purchasing Products from Wellvanta Healthcare Private Limited, you acknowledge that you have read, understood and agreed to this Privacy Policy and that you consent to the collection, use, storage, processing and disclosure of your personal data as described herein.