India Privacy Policy and DPDP Notice

Scope and data fiduciary

This policy applies to India customers, visitors, account holders, leads, and support contacts. The data fiduciary for India orders is Aora India Private Limited, Aora India Private Limited, Kumara Vijayam, A-1, 187 Royapettah High Road, Mylapore, Chennai 600004, Tamil Nadu, India.

We collect and use personal data only for lawful purposes connected to operating a wellness ecommerce business, fulfilling orders, keeping products traceable, providing support, improving the site, preventing fraud, and sending marketing where permitted.

Personal data we collect

We may collect your name, email, phone number, billing and shipping address, payment status, order history, GST invoice details where relevant, support messages, account credentials, review content, rewards activity, device data, IP address, cookie identifiers, and marketing preferences.

If you voluntarily use a goal quiz, routine builder, consultation form, or product recommendation tool, you may share wellness goals, diet preferences, allergies, life stage, supplement use, or medication context. We use this information cautiously and only to provide education, product discovery, safety prompts, or support.

How we use personal data

We use personal data to process payments, deliver orders, generate invoices, send tracking updates, handle cancellations and refunds, answer support requests, manage subscriptions, prevent abuse, maintain product and batch records, improve customer experience, comply with law, and send opt-in marketing.

We do not use optional wellness information to diagnose, treat, or make clinical decisions. We do not sell personal data.

Processors and sharing

We share data with service providers only where needed: payment gateways, banks, shipping partners, warehouse providers, customer support tools, email/SMS/WhatsApp providers, analytics tools, hosting providers, fraud prevention vendors, accountants, lawyers, auditors, and regulators where legally required.

Each processor receives only the data needed for its role. We do not permit service providers to use India customer data for their own marketing.

Your India privacy rights

Subject to applicable law, you may ask to access, correct, update, erase, or withdraw consent for your personal data. You may also raise a grievance and nominate another person to exercise rights where the law allows.

To exercise rights, email care@aoravitalis.com. We may verify your identity before acting. Some records, such as tax, invoice, fraud prevention, legal, and product traceability records, may need to be retained even after an erasure request.

Children and age limits

Aora products and accounts are intended for adults. We do not knowingly collect personal data from children for targeted advertising or behavioural monitoring. If you believe a child has provided data to us, contact care@aoravitalis.com and we will review it promptly.

Retention, security, and breach response

We keep personal data only as long as needed for the purpose collected, including order fulfilment, tax, audit, product traceability, dispute handling, fraud prevention, and legal compliance.

We use access controls, encryption in transit, password hashing, restricted admin permissions, logging, and secure hosting. If a reportable data breach occurs, we will follow applicable notification requirements and take steps to reduce harm.

Privacy contact

Privacy questions and rights requests: care@aoravitalis.com

India grievance contact: care@aoravitalis.com

Registered office: Aora India Private Limited, Kumara Vijayam, A-1, 187 Royapettah High Road, Mylapore, Chennai 600004, Tamil Nadu, India