Privacy Policy

This policy explains what personal data Thathasthu Herbals collects when you use thathasthu.in, why we collect it, who else sees it, and what you can ask us to do about it.

Data fiduciary: Thathasthu Herbals, AP-18/99 H, Manjappara, Ambalavayal, Wayanad, Kerala 673593, India. Contact: info@thathasthu.in

What we collect

Data	Why
Name, delivery address, phone, email	To process and deliver your order and contact you about it
Order history	To handle returns, refunds and reorders
Payment confirmation and last four digits of a card	To match payments to orders. We never see or store your full card number, CVV or UPI PIN — those go directly to the payment gateway
Device, browser and IP data, pages viewed	Site analytics and fraud prevention
What you tell us in a consultation enquiry	To answer your question about which product suits you
Email address, if you subscribe	To send you updates you asked for

Health information — please read

If you contact us for a consultation you may choose to tell us about a health concern. We treat that as sensitive.

Tell us only what is needed to answer your question
We use it to respond, and for nothing else
We do not use it for advertising or targeting, and we do not sell it
We keep consultation correspondence for up to 2 years, then delete it
You can ask us to delete it sooner at any time

Please do not send us medical reports, prescriptions or test results unless we have specifically asked for them.

Who we share data with

Only the parties needed to run the shop:

Shopify — our ecommerce platform, which hosts this store
Payment gateways — to process payment. They handle card and UPI details directly; we do not
Courier partners — your name, address and phone, so they can deliver
Analytics providers — aggregated usage data
Government authorities — where we are legally required to disclose

We do not sell your personal data to anyone, and we do not share it with data brokers.

Cookies

This site uses cookies to keep your cart working, remember your session, and measure traffic. You can block or delete cookies in your browser settings; the cart and checkout will not work properly without them.

How long we keep things

Data	Kept for
Order and invoice records	8 years, as tax law requires
Account details	Until you ask us to delete them
Consultation correspondence	Up to 2 years
Marketing email list	Until you unsubscribe
Analytics data	Up to 26 months, aggregated

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

tell you what data about you we hold
correct anything inaccurate or incomplete
delete your data, except records we must keep for tax or legal reasons
withdraw consent for marketing, at any time
nominate someone to exercise these rights if you are unable to

Email info@thathasthu.in. We will respond within 30 days. We may ask you to confirm your identity first — that is to stop someone else requesting your data.

Marketing

We only send marketing email to people who asked for it. Every email has an unsubscribe link, and unsubscribing takes effect immediately. Order confirmations and dispatch notices are not marketing and will still be sent.

Children

This store is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe we have, email us and we will delete it.

Security

The site runs over HTTPS and payment data is handled by PCI-compliant gateways rather than by us. No system is perfectly secure, so if we ever discover a breach affecting your data we will inform you and the Data Protection Board as required.

Grievance contact

For any complaint about how your data has been handled, email info@thathasthu.in with "Data grievance" in the subject line. We acknowledge within 48 hours and aim to resolve within 30 days.

If you are not satisfied with our response you may escalate to the Data Protection Board of India.