Privacy Policy

[Registered company name], trading as OriginLife, registered at [Registered address, city, state, PIN], is the data fiduciary responsible for the personal data described here.

• Account details — name, email address, phone number, and a securely hashed password. We never store your password in readable form.
• Order details — delivery address, items ordered, order value, and order history.
• Payment details — handled entirely by our payment gateway. We receive a transaction reference and a success or failure result. Card numbers, UPI PINs and net-banking credentials never reach our servers.
• Reviews you submit — your rating, review text and the display name on your account.
• Technical data — pages visited and basic device information, used to keep the site working and to understand which products people look for.

To take payment for and deliver your order, to give you access to your order history, to answer support requests, to publish reviews you choose to submit, to send transactional messages about orders, and to meet our tax and record-keeping obligations.

We send marketing email only if you have opted in, and every marketing message includes a one-click unsubscribe. Unsubscribing does not stop order-related messages.

Only with the parties needed to fulfil your order and run the business: our payment gateway, our courier partners, our email provider, and our accountants and auditors. Each receives the minimum needed to do its job. We do not sell personal data, and we do not share it for anyone else's advertising.

Order and invoice records are retained for as long as tax law requires. Account data is retained while your account is open. When you close your account we delete or anonymise what we are not legally required to keep — published reviews stay up under a generic display name unless you ask us to remove them.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent for marketing at any time. Write to [grievance officer email] and we will respond within 30 days.

The site is served over HTTPS. Passwords are hashed. Session cookies are signed, HTTP-only and expire. Administrative access is restricted to named accounts. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority.

We use cookies that are necessary for the site to function — keeping you signed in and remembering your cart. Blocking these in your browser will break sign-in and checkout. Any analytics cookies are set only with your consent.

The site is not intended for anyone under 18, and we do not knowingly collect data from children. Supplements should not be given to children except on the advice of a registered medical practitioner.

[Grievance officer name]
[grievance officer email]
[Registered address, city, state, PIN]