PRIVACY POLICY

Last Updated: 3 August 2026

At Rootpure Wellness, we respect your privacy and are committed to protecting the personal information you provide while using our website, creating an account, placing an order, contacting customer support, or using any of our services.

This Privacy Policy explains what information we collect, why we collect it, how we use it, when it may be shared, how we protect it, and the choices available to you.

By accessing or using our website, you acknowledge this Privacy Policy.

1. About Rootpure Wellness

Rootpure Wellness operates an online platform through which customers can browse and place orders for Rootpure-branded products.

Rootpure Wellness facilitates customer orders and related services through its website.

Certain product manufacturing, supply, fulfilment, warranty, return or related functions may be performed by Rootpure Marketing Private Limited, its applicable distribution network, logistics providers or other authorised service providers.

Where Rootpure Wellness collects personal information directly from you through our website, we take responsibility for handling that information appropriately in accordance with applicable law.

2. Information We May Collect

Depending on how you use our website, we may collect the following categories of information.

A. Personal Identification Information

This may include:

• Full name
• Username or customer account name
• Gender, where voluntarily provided and genuinely required
• Other information you voluntarily provide to us

B. Contact Information

This may include:

• Mobile number
• Email address
• WhatsApp number
• Billing address
• Shipping/delivery address
• City
• State
• PIN code

C. Account Information

If customer accounts are available on our website, we may process information such as:

• Login credentials
• Account identifier
• Saved addresses
• Account preferences
• Order history
• Profile details

Passwords should be stored using appropriate security measures and should not be accessible to our staff in plain text where technically practicable.

You are responsible for keeping your login credentials confidential.

3. Order Information

When you place an order, we may collect and process information including:

• Order number
• Products ordered
• Product quantity
• Order value
• Discounts or coupons
• Shipping details
• Billing information
• Order date and time
• Payment status
• Shipping status
• Courier information
• Tracking/AWB number
• Cancellation information
• Return, replacement or refund information

We use this information primarily to process and manage your purchase.

4. Payment Information

Payments may be processed through third-party payment gateways, banks, UPI providers or other payment service providers.

Depending upon the payment method used, we may receive information such as:

• Transaction ID
• Payment reference
• Payment status
• Amount paid
• Payment method category
• Date and time of payment
• Refund status

We generally do not need to directly store complete debit card, credit card, UPI PIN, CVV or similar sensitive authentication credentials.

Such information may be entered directly into the secure systems of the relevant payment gateway, bank or payment service provider and is subject to that provider’s privacy and security practices.

Never share your OTP, UPI PIN, CVV, card PIN or banking password with Rootpure Wellness staff or anybody claiming to represent us.

5. Delivery and Shipping Information

To deliver your order, relevant information may be provided to parties involved in fulfilment, including:

• Rootpure Marketing Private Limited, where applicable
• Product suppliers or authorised distribution channels
• Warehousing or fulfilment providers
• Courier companies
• Logistics partners
• Shipping aggregators

Only information reasonably necessary for processing and delivering your order should be shared for such purposes.

This may include your:

• Name
• Mobile number
• Delivery address
• PIN code
• Order details
• Shipping instructions

6. Customer Support Information

If you contact us through:

• Phone
• WhatsApp
• Email
• Website form
• Contact form
• Complaint form
• Return/refund request
• Social media
• Other customer-support channels

we may process the information contained in your communication.

This may include photographs, invoices, transaction information, shipping labels, videos or other evidence voluntarily submitted by you to resolve an order-related issue.

We use such information for customer support, complaint resolution, fraud prevention and record keeping.

7. Wellness-Related Information

If our website provides a product finder, wellness preference form, recommendation feature or similar service, you may voluntarily provide information concerning your wellness interests, concerns or product preferences.

We will use such information only for the purpose explained when the information is collected and as otherwise permitted by applicable law.

You should avoid providing medical records, diagnosis reports or other highly sensitive health information unless we specifically request it for a legitimate and clearly explained purpose.

Product suggestions available through the website should not be treated as a substitute for professional medical diagnosis or treatment.

8. Automatically Collected Information

When you use our website, certain technical information may automatically be collected.

This can include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate device/network information
• Pages visited
• Referring page
• Time spent on pages
• Date and time of access
• Website activity
• Error logs
• Security logs
• Cookie identifiers

This information may be used to operate, secure, troubleshoot and improve our website.

9. Cookies and Similar Technologies

Our website may use cookies or similar technologies.

Cookies are small files stored on your browser or device that help websites remember certain information.

Cookies may be used for purposes such as:

• Keeping users logged in
• Remembering shopping-cart contents
• Remembering website preferences
• Maintaining secure sessions
• Processing checkout
• Detecting fraud or abuse
• Understanding website performance
• Improving user experience

Some cookies may be necessary for the website to function properly.

Where required by applicable law, appropriate choices or consent mechanisms may be provided for non-essential cookies.

You may also control cookies through your browser settings, although disabling essential cookies may affect some website functions.

10. How We Use Your Information

We may use personal information for legitimate purposes including:

• Creating and managing customer accounts
• Processing orders
• Processing and verifying payments
• Confirming purchases
• Arranging shipping and delivery
• Providing shipment tracking
• Sending invoices
• Managing cancellations
• Processing returns, replacements and refunds
• Providing customer support
• Resolving complaints
• Preventing fraud
• Maintaining transaction records
• Improving website functionality
• Securing our website
• Detecting technical problems
• Communicating important information about your order
• Complying with legal obligations
• Responding to lawful government or regulatory requests
• Protecting our customers, business and legal rights

We aim to collect only information reasonably necessary for the relevant purpose.

11. Order Communications

When you place an order, we may contact you through one or more of the following:

• Email
• SMS
• WhatsApp
• Telephone
• Website notifications

These communications may include:

• Order confirmation
• Payment confirmation
• Payment failure notification
• Invoice
• Shipping confirmation
• Courier details
• Tracking number
• Delivery updates
• Cancellation updates
• Refund information
• Customer-support communication

These transactional communications are necessary for managing your purchase and are different from optional promotional marketing communications.

12. Marketing Communications

Where permitted by applicable law and where appropriate consent has been obtained, we may send customers information about:

• New products
• Offers
• Discounts
• Promotions
• Product availability
• Website updates

Customers should be given a reasonable method to opt out of promotional communications.

Opting out of promotional communications will not ordinarily prevent us from sending necessary transactional communications relating to an active order or account.

13. WhatsApp Communications

If you provide your mobile number and use or consent to WhatsApp communication, Rootpure Wellness may communicate with you through WhatsApp for matters including:

• Order confirmation
• Payment information
• Shipping updates
• Customer support
• Refund/replacement communication
• Other requested services

Where legally permitted and appropriately consented to, promotional communications may also be sent.

Your use of WhatsApp is also subject to WhatsApp/Meta’s own applicable terms and privacy practices.

14. When We May Share Personal Information

We do not sell customers’ personal information as a business practice.

However, information may be shared where reasonably necessary with service providers or other parties involved in providing our services.

These may include:

Rootpure Marketing Private Limited

Relevant information may be shared where necessary for:

• Product fulfilment
• Product-related complaints
• Returns
• Replacement
• Manufacturer-related issues
• Product verification
• Other legitimate order-related requirements

Courier and Logistics Providers

Information may be provided for:

• Shipment creation
• Delivery
• Tracking
• Delivery confirmation
• Return pickup

Payment Providers

Payment gateways, banks, UPI providers and other payment processors may process information necessary to complete or refund payments.

Website and Technology Providers

Certain information may be processed by providers supporting:

• Website hosting
• Servers
• Email
• SMS
• Cloud infrastructure
• Cybersecurity
• Analytics
• Backups
• Customer support
• Website functionality

Such providers should only receive information reasonably required to perform their services.

15. Legal Disclosure

We may disclose personal information where reasonably necessary to:

• Comply with applicable law
• Respond to a lawful court order
• Respond to a lawful government request
• Cooperate with law-enforcement authorities where legally required
• Investigate suspected fraud
• Prevent cybercrime
• Protect customers
• Protect our legal rights
• Enforce our website terms
• Respond to a legal claim

We will not intentionally disclose personal information to governmental or other parties without a legitimate legal basis.

16. Information Security

Rootpure Wellness takes reasonable steps intended to protect personal information from:

• Unauthorised access
• Misuse
• Loss
• Unauthorised alteration
• Accidental disclosure
• Destruction
• Fraud
• Cybersecurity threats

Security measures may include, where appropriate:

• HTTPS/SSL encryption
• Secure hosting
• Access controls
• Password protection
• Restricted administrative access
• System updates
• Backups
• Malware protection
• Security monitoring
• Secure payment gateways

However, no website, internet connection, database or electronic storage system can be guaranteed to be completely secure.

Customers should therefore also take reasonable precautions when using online services.

17. Password and Account Security

Customers are responsible for maintaining the confidentiality of their login information.

You should:

• Use a strong password
• Avoid sharing your password
• Avoid sharing OTPs
• Log out from shared devices
• Immediately inform us if you suspect unauthorised account access

Rootpure Wellness will never legitimately require you to disclose your OTP, UPI PIN, card PIN or CVV for customer-support purposes.

18. Data Retention

We retain personal information only for as long as reasonably necessary for purposes including:

• Completing orders
• Maintaining invoices
• Customer support
• Returns and refunds
• Accounting
• Tax requirements
• Fraud prevention
• Dispute resolution
• Legal compliance
• Establishing or defending legal claims

Different types of information may have different retention periods.

Information that is no longer reasonably required will be deleted, anonymised, archived or otherwise handled in accordance with applicable legal and operational requirements.

19. Your Privacy Choices and Rights

Subject to applicable law and technical/legal limitations, you may contact us to request assistance regarding personal information associated with you.

Depending upon applicable law, these requests may concern:

• Accessing information
• Correcting inaccurate information
• Updating incomplete information
• Deleting information that is no longer required
• Withdrawing consent where processing depends upon consent
• Stopping optional promotional communications
• Raising a grievance regarding the handling of personal information

Some information may need to be retained even after a deletion request where retention is required for taxation, accounting, fraud prevention, legal proceedings or another lawful purpose.

We may take reasonable steps to verify your identity before processing privacy-related requests.

20. Withdrawal of Consent

Where we process information based specifically on your consent, you may withdraw that consent by contacting us or by using an available opt-out mechanism.

Withdrawal of consent will apply prospectively.

It may not affect processing already lawfully carried out before withdrawal.

Certain services may become unavailable where the information is necessary to provide the requested service.

For example, we cannot normally deliver an online purchase if you withdraw permission to use the delivery address before the order has been fulfilled.

21. Correction of Information

Customers should ensure that the personal information provided to us is accurate and current.

Where account-editing facilities are available, you may update certain information directly through your account.

You may also contact us to request correction of inaccurate information.

22. Deletion of Account or Personal Information

Where permitted under applicable law, customers may request deletion of their account or personal information.

Deletion may not necessarily result in immediate deletion of every record.

Certain information may continue to be retained where reasonably necessary for:

• Tax records
• Invoices
• Completed transaction records
• Legal obligations
• Fraud prevention
• Payment disputes
• Chargebacks
• Returns/refunds
• Establishing, exercising or defending legal claims

Information retained for these purposes will not be used for unrelated purposes merely because the customer requested account deletion.

23. Children

Our online purchasing services are primarily intended for persons capable of entering into legally valid transactions.

We do not knowingly seek to collect personal information directly from children for independent commercial profiling or targeted advertising.

Where a person below the age legally requiring parental or guardian involvement seeks to use a service that requires personal-data processing, appropriate involvement or consent of a parent or lawful guardian may be required in accordance with applicable law.

24. Third-Party Websites

Our website may contain links to external websites or services.

For example, a customer may be redirected to:

• A payment gateway
• Courier tracking website
• Social-media platform
• WhatsApp
• Rootpure-related website
• Other third-party service

Once you leave our website, the external party’s own privacy policy and terms may apply.

Rootpure Wellness is not responsible for the independent privacy practices of third-party websites that we do not control.

Customers should review the privacy policies of those services where appropriate.

25. Payment Gateway Privacy

If payment is processed by an external payment gateway, personal and transaction information required for payment processing may be directly processed by that provider.

Rootpure Wellness may receive confirmation regarding the transaction without receiving sensitive authentication information such as:

• UPI PIN
• Card PIN
• Full authentication credentials
• Banking password

Customers should only make payments through the official checkout/payment methods displayed by Rootpure Wellness.

26. Rootpure Marketing Private Limited

Rootpure Wellness and Rootpure Marketing Private Limited may have separate roles and responsibilities concerning personal information depending upon the transaction and service involved.

Information submitted directly to Rootpure Marketing Private Limited or processed independently through Rootpure’s own systems may be governed by Rootpure’s own privacy practices and policies.

Rootpure Wellness is responsible for privacy and data-processing activities under its control.

Rootpure Marketing Private Limited is responsible for data-processing activities independently undertaken under its control, subject to applicable law.

27. Business Transfers

If Rootpure Wellness undergoes a legitimate business restructuring, merger, acquisition, transfer or similar transaction, relevant customer information may form part of the transferred business assets where legally permitted.

Where required, appropriate notice and safeguards will be provided.

Personal information will not become free for unrestricted use merely because ownership or business structure changes.

28. Data Breaches and Security Incidents

If we become aware of a personal-data security incident, we will take reasonable steps appropriate to the nature and severity of the incident.

This may include:

• Containing the incident
• Investigating its cause
• Securing affected systems
• Changing compromised credentials
• Coordinating with service providers
• Maintaining required records
• Informing affected individuals where legally required
• Notifying relevant authorities where legally required

29. Accuracy of Information

Customers are requested to provide accurate and current information.

Rootpure Wellness will not be responsible for problems caused solely because a customer knowingly or accidentally provides materially incorrect information, such as an incorrect:

• Mobile number
• Email address
• Shipping address
• PIN code

However, if an error is caused by our website or our personnel after correct information was submitted by the customer, we will take reasonable responsibility for rectifying the issue.

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time because of:

• Changes in law
• Changes in our website
• New services
• Changes in technology
• Changes in payment or delivery partners
• Changes in Rootpure-related fulfilment arrangements
• Security requirements
• Regulatory requirements

The updated version will be published on our website with a revised Last Updated date.

Where a material change legally requires additional notice or consent, we will take appropriate steps.

31. Applicable Law

This Privacy Policy is intended to operate in accordance with applicable laws of India concerning privacy, electronic commerce, information technology and personal-data protection, as applicable from time to time.

This includes applicable provisions of India’s information-technology and data-protection framework.

As India’s data-protection framework continues to transition toward implementation of the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025, this Privacy Policy may be updated to reflect requirements becoming applicable to Rootpure Wellness.

Nothing in this Privacy Policy is intended to restrict any non-waivable legal right available to an individual under applicable law.

32. Privacy Complaints and Grievances

If you have a concern regarding:

• Personal-data collection
• Data use
• Unauthorised disclosure
• Account privacy
• Correction of information
• Deletion request
• Withdrawal of consent
• Marketing communications
• Suspected misuse of your information

please contact us.

We will make reasonable efforts to investigate and respond to legitimate privacy complaints.

33. Contact Us

For questions, requests or complaints regarding this Privacy Policy or your personal information, contact:

Rootpure Wellness

Website: rootpurewellnessindia.com

Customer Support Email: support@rootpurewellnessindia.com

Phone/WhatsApp: 8252308431

Business/Correspondence Address: Vastu Vihar, Harpur Alloth, Samastipur , Near HP Petrol Pump

Privacy/Grievance Contact: PREM KUMAR

Grievance Email: GRIEVANCE@ROOTPUREWELLNESSINDIA.COM

When submitting a privacy request, please provide sufficient information for us to identify your account or transaction, but never send your password, OTP, UPI PIN, CVV or banking password.

CUSTOMER PRIVACY COMMITMENT

Rootpure Wellness does not consider customer information a product for sale.

We collect and use customer information to provide our services, process orders, support customers, secure our platform and meet legitimate legal and operational requirements.

Where information must be provided to Rootpure, a payment processor, courier or another service provider to complete your transaction, we aim to share only information reasonably necessary for that purpose.

If an information-security or privacy problem occurs because of an act, omission or system under the direct control of Rootpure Wellness, we will take reasonable responsibility for investigating and addressing the matter in accordance with applicable law.