Last Updated: 08 October 2026

At Joziya Ayurveda & Beauty, we respect your privacy and are committed to protecting the personal information you share with us when you visit our website, create an account, place an order, contact us or otherwise interact with our services.

This Privacy Policy explains what information we collect, why we collect it, how we use it, when we may share it, how we protect it, and the choices available to you.

This policy is intended for an e-commerce business operating in India and should be read together with our Terms & Conditions, Shipping Policy, and Return, Refund & Cancellation Policy.

India’s Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data and provides rights and obligations relating to personal data. The Act and its rules have a phased commencement, so our practices will be updated as applicable provisions become operative.

1. About Us

This website is operated by:

Joziya Ayurveda & Beauty

Email: [Your Email Address]
Phone/WhatsApp: [Your Phone Number]
Address: [Complete Business Address]

For the purposes of applicable Indian data-protection law, the entity responsible for determining the purposes and means of processing your personal data is referred to in this policy as “Joziya,” “we,” “us,” or “our.”

2. Information We Collect

Depending on how you use our website, we may collect the following categories of information.

A. Information You Provide Directly

When you create an account, place an order, contact us, subscribe to communications, or submit a form, we may collect:

  • Full name
  • Mobile/telephone number
  • Email address
  • Billing address
  • Shipping/delivery address
  • PIN code
  • Order details
  • Product preferences
  • Customer-support communications
  • Information you voluntarily provide through forms or messages

We collect only information reasonably necessary for the relevant purpose.

3. Payment Information

When you make a payment, payment information may be processed through our third-party payment gateway or financial service provider.

Depending on the payment method, this may include information necessary to process the transaction.

We do not intend to store complete debit-card or credit-card numbers, CVV numbers, UPI PINs, passwords, or other sensitive payment authentication information on our own website.

Payment providers may process your information according to their own privacy policies and security practices.

4. Information Collected Automatically

When you browse our website, certain technical information may be collected automatically, such as:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Website pages visited
  • Approximate usage information
  • Date and time of visits
  • Referring website
  • Website interaction information
  • Cookies and similar technologies

This information helps us operate, secure, analyse, and improve our website.

5. Cookies

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information stored on your device that help websites remember information about your visit.

We may use cookies for purposes such as:

Essential Cookies

These help the website function properly, including:

  • Shopping cart functionality
  • Login/session management
  • Checkout
  • Security
  • Basic website functionality

Analytics Cookies

These help us understand:

  • How visitors use our website
  • Which pages are popular
  • Website performance
  • General visitor behaviour

Marketing Cookies

Where used, these may help us measure advertising campaigns, understand conversions, and show more relevant advertisements.

You may be able to control or disable cookies through your browser settings. However, disabling essential cookies may affect certain website functions.

6. Why We Use Your Personal Data

We may process your personal data for legitimate and necessary purposes, including:

To Process Orders

We use your information to:

  • Confirm your order
  • Process payments
  • Pack your products
  • Arrange delivery
  • Provide order tracking
  • Handle cancellations
  • Process returns and refunds

To Provide Customer Support

We may use your information to respond to:

  • Product enquiries
  • Order-related questions
  • Complaints
  • Return/refund requests
  • Delivery issues
  • Other customer-service requests

To Improve Our Website

We may analyse website usage and customer interactions to improve:

  • Website performance
  • Product presentation
  • User experience
  • Checkout experience
  • Services and offerings

To Prevent Fraud & Protect Security

Information may be processed to detect or investigate:

  • Fraudulent transactions
  • Suspicious activity
  • Abuse of our website
  • Security incidents
  • Attempts to interfere with our systems

To Comply With Law

We may process and retain information where necessary to comply with applicable:

  • Indian laws
  • Tax requirements
  • Accounting requirements
  • Regulatory requirements
  • Court orders
  • Government or lawful authority requests

7. Marketing Communications

Where permitted and where required, we may use your contact information to send:

  • New product announcements
  • Offers
  • Discounts
  • Festival promotions
  • Important website updates
  • Other marketing communications

You can choose to stop receiving promotional communications by using the unsubscribe option provided in the communication or by contacting us.

Withdrawal of consent for marketing communications will not affect processing that is necessary for an order or other lawful purpose.

Under India’s DPDP framework, where consent is the basis for processing, consent can be withdrawn, subject to the applicable law and consequences of withdrawal.

8. WhatsApp, SMS & Phone Communications

If you provide your mobile number while placing an order or contacting us, we may use it to communicate with you regarding:

  • Order confirmation
  • Delivery
  • Tracking
  • Customer support
  • Return/refund requests
  • Important service-related information

Marketing communications will be handled subject to applicable consent and communication requirements.

9. Sharing Your Information

We do not sell your personal information as a product.

However, we may share necessary information with trusted service providers where required to provide our services.

These may include:

Delivery & Logistics Partners

We may provide your:

  • Name
  • Mobile number
  • Delivery address
  • Order details

to courier and logistics providers so that your order can be delivered.

Payment Service Providers

Necessary information may be shared with payment gateways and financial service providers to process transactions.

Technology & Hosting Providers

We may use third-party providers for:

  • Website hosting
  • Cloud services
  • Website security
  • Backup
  • Analytics
  • Technical maintenance

Marketing & Analytics Providers

Where applicable, information may be shared with service providers that help us measure advertising and website performance, subject to applicable law and your choices.

Professional & Legal Service Providers

We may disclose information where reasonably necessary to:

  • Lawyers
  • Accountants
  • Auditors
  • Insurance providers
  • Professional advisers

Government & Law-Enforcement Authorities

We may disclose information where required or authorised by applicable law, regulation, court order, or lawful government request.

The Consumer Protection (E-Commerce) Rules also require e-commerce entities to provide certain information and maintain appropriate consumer-facing processes.

10. Third-Party Services

Our website may use third-party services such as:

  • Payment gateways
  • Courier platforms
  • Analytics services
  • Advertising platforms
  • Social-media integrations
  • Website hosting services
  • Customer-support tools

These providers may process information according to their own privacy policies.

We encourage you to review the privacy policies of third-party services that you use through our website.

11. Advertising & Analytics

We may use services such as analytics and advertising platforms to understand website performance and measure marketing campaigns.

These services may use cookies, pixels, tags, or similar technologies.

For example, where implemented, advertising platforms may help us understand whether someone who interacted with an advertisement subsequently visited our website or purchased a product.

We will implement these technologies subject to applicable law and consent/choice requirements where applicable.

12. Data Security

We take reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

Security measures may include:

  • SSL/TLS encryption
  • Access controls
  • Secure hosting
  • Authentication controls
  • Software updates
  • Monitoring and security measures
  • Restricted access to customer information

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or for longer where required or permitted by applicable law.

For example, certain information relating to:

  • Orders
  • Invoices
  • Payments
  • Tax
  • Refunds
  • Customer complaints
  • Legal disputes

may need to be retained for accounting, tax, legal, regulatory, fraud-prevention, or dispute-resolution purposes.

When information is no longer required, we may securely delete, anonymise, or otherwise dispose of it in accordance with applicable requirements.

The DPDP framework requires organisations to address retention and erasure appropriately, subject to legal requirements and applicable exceptions.

14. Your Privacy Rights

Subject to applicable Indian law and the relevant provisions becoming applicable to the processing concerned, you may have rights relating to your personal data, including rights to:

  • Obtain information about processing
  • Request access to personal data
  • Request correction of inaccurate or incomplete information
  • Request deletion/erasure where legally applicable
  • Withdraw consent where consent is the basis of processing
  • Exercise applicable grievance/complaint rights

The DPDP Act specifically provides for consent withdrawal where consent is the basis for processing, with the withdrawal process required to be comparable in ease to giving consent.

Some requests may be subject to legal exceptions, verification requirements, or other limitations under applicable law.

15. How to Exercise Your Rights

To make a privacy-related request, contact us:

Email: [Privacy Email Address]
Subject: Privacy Request – [Type of Request]

Please include:

  • Your full name
  • Registered email/mobile number
  • Nature of your request
  • Relevant Order ID, if applicable
  • Any information necessary for us to identify the relevant account or transaction

We may request reasonable information to verify your identity before processing certain requests.

We will handle valid requests within the timeframes required by applicable law.

16. Withdrawal of Consent

Where we process your personal data based on consent, you may withdraw that consent by contacting us or using the applicable withdrawal mechanism provided by us.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Also, withdrawal may not stop processing where we are required or authorised to continue processing the information under applicable law—for example, where information must be retained for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes.

17. Children’s Privacy

Our website is intended for general consumers and is not specifically directed at children.

We do not knowingly request or intentionally collect personal data from children in circumstances where applicable law prohibits such collection.

If you believe that a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

18. International Data Transfers

Our website may use third-party technology, hosting, payment, analytics, advertising, or other service providers that may process data outside India.

Where personal data is transferred or processed outside India, we will do so subject to applicable Indian law and any restrictions or requirements that apply to such transfer.

The DPDP Act provides a framework under which the Central Government may restrict transfers of personal data outside India in specified circumstances.

19. Third-Party Websites

Our website may contain links to third-party websites, including:

  • Payment providers
  • Social-media platforms
  • Courier tracking websites
  • Other external services

Once you leave our website, the privacy practices of that third-party website will apply.

We are not responsible for the privacy practices or content of websites that we do not control.

20. Data Breaches & Security Incidents

If a personal-data security incident occurs, we will take reasonable steps to investigate, contain, and address the incident.

Where notification is required by applicable law or regulation, we will provide the required notifications to the appropriate authority and/or affected individuals within the applicable timeframe.

The DPDP framework contains specific obligations concerning personal-data breaches, with the detailed implementation phased under the notified Rules.

21. Accuracy of Your Information

You are responsible for providing accurate and current information when placing an order or creating an account.

If your:

  • Name
  • Mobile number
  • Email address
  • Shipping address

changes, please update your information where the website provides an account-management facility or contact us for assistance.

Providing an incorrect delivery address may result in delivery delays or failed delivery.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our business
  • New website functionality
  • Changes in third-party services
  • Changes in data-processing practices
  • Changes in applicable Indian laws or regulations

The latest version will always be published on this page.

The “Last Updated” date at the top of this policy will indicate when the policy was most recently revised.

23. Grievance & Privacy Contact

If you have a question, complaint, or concern about the way we handle your personal information, please contact:

Privacy / Grievance Contact

Joziya Ayurveda & Beauty
Name: [Grievance Officer / Privacy Contact Name]
Email: [Privacy/Grievance Email]
Phone: [Phone Number]
Address: [Complete Business Address]

Working Hours: [Days & Time]

We will review and respond to privacy-related complaints in accordance with applicable law.

Where applicable, you may also have the right to approach the relevant statutory authority or forum.

24. Governing Law

This Privacy Policy is governed by the laws of India.

Any dispute concerning this Privacy Policy will be subject to applicable Indian law and the jurisdictional rights available to consumers.

Nothing in this Privacy Policy is intended to restrict any statutory right available to an individual under applicable law.

25. Contact Us

For questions about this Privacy Policy or your personal information:

Joziya Ayurveda & Beauty
📧 Email: [Your Email Address]
📞 Phone/WhatsApp: [Your Phone Number]
📍 Address: [Complete Business Address]

Your Privacy Matters

At Joziya Ayurveda & Beauty, we believe that shopping online should be convenient, transparent, and secure.

We are committed to using your personal information responsibly and only for legitimate business, service, legal, and other permitted purposes.

Your trust matters to us.