HERBOROOT

Privacy Policy

Last updated: 13 October 2026

This Privacy Policy explains how Herboroot Wellness Pvt. Ltd. ("Herboroot", "we" or "us") collects, uses, shares and protects your personal data when you use www.herboroot.in (the "Website") or buy from us, and the choices and rights you have. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them. By using the Website you agree to this policy.

Information we collect

  • When you place an order: your name, email address, mobile number, delivery address and pincode, the items you order and how you pay.
  • When you create an account: your name, email address, mobile number and a password (stored only as a one-way encrypted hash — we can never see it), plus your saved addresses, wishlist, reviews and order history.
  • When you contact us or book a consultation: your name, contact details, your message, and any health concern and preferred time you choose to share for the consultation.
  • When you subscribe to our newsletter or launch alerts: your email address.
  • Payments: handled entirely by our payment partner, Razorpay. We receive only a payment reference and its status — never your card number, UPI PIN or net-banking credentials.
  • Automatically: your IP address, browser and device information and the pages you visit, used to run, secure and improve the Website (for example, to stop fraud and abuse). Our own visit statistics are not linked to your name.

How we use your information

  • to process, ship and deliver your orders, collect payment and issue GST invoices;
  • to send order confirmations, invoices, shipping and delivery updates by email, and on WhatsApp if you opt in at checkout;
  • to run your account, answer your questions and arrange consultations you request;
  • to send newsletters and offers only if you have subscribed — every email has an unsubscribe link;
  • to prevent fraud, misuse and security incidents, and to meet our legal, tax and accounting obligations.

Cookies and similar technologies

We use essential browser storage and a secure sign-in cookie to keep your cart and keep you signed in; the Website cannot work without them. With your permission only, we use Meta (Facebook/Instagram) advertising cookies to measure our ads. You can accept or decline when the Website asks, and change your choice at any time from the "Cookie settings" link at the bottom of every page. The product names you view or buy are never sent to Meta.

Who we share it with

We share only what each partner needs to provide its service to us:

  • Razorpay — to take payments and process refunds;
  • our courier partner (Delhivery) — your name, address, phone number and parcel details, to deliver your order;
  • our email and messaging providers (such as Brevo, and Meta's WhatsApp Business service if you opt in) — to send you emails and messages;
  • Meta — advertising measurement, only if you accept marketing cookies;
  • our hosting provider — which stores the Website and its data on our behalf;
  • government or law-enforcement authorities, when the law requires us to.

We do not sell or rent your personal data to anyone.

How long we keep it

We keep order and invoice records for as long as tax and accounting laws require. Your account details are kept until you delete your account. Newsletter subscriptions are kept until you unsubscribe.

Your rights

  • Access and download: signed-in customers can download a copy of their data from My Account → Security & privacy.
  • Correction: update your profile and addresses in My Account, or ask us to correct anything else.
  • Deletion: delete your account from My Account → Security & privacy. Order records we must keep by law are retained without your account details.
  • Withdraw consent: unsubscribe from emails at any time, ask us at care@herboroot.in to stop WhatsApp updates, and change your cookie choice from "Cookie settings".
  • Grievances: contact our Grievance Officer (details below). You may also approach the Data Protection Board of India.

To exercise any of these rights, write to care@herboroot.in. We may need to verify your identity first.

How we protect it

The Website is served only over encrypted connections (HTTPS). Passwords are stored as one-way hashes, payment credentials never reach our servers, sensitive service keys are stored encrypted, and access to customer data is limited to the staff who need it.

Children

The Website is intended for adults. We do not knowingly collect personal data from anyone under 18; if you believe a child has given us their data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

Contact and grievance officer

  • Grievance Officer: Customer Care Team
  • Company: Herboroot Wellness Pvt. Ltd.
  • Address: Plot 14, Ecotech Industrial Area, Greater Noida, Uttar Pradesh 201308
  • Email: care@herboroot.in

We acknowledge complaints within 48 hours and resolve them within one month of receipt.

Terms & Conditions · Shipping Policy · Return & Refund Policy