privacy policy

Last Updated: April 30, 2025
1. Introduction
Welcome to Breathify Naturals ("we", "us", "our"). Breathify Naturals is a brand operated by Herbalize Naturals PVT LTD ("Company"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [Your Website Address], including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the "Site") and purchase our products or services (the "Services").
This policy is intended to comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our Services.
Our store is hosted on Shopify Inc. ("Shopify"). They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall. For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

2. Information We Collect
We may collect personal information about you in various ways. The information we may collect on the Site includes:
Personal Data: Personally identifiable information, such as your name, shipping address, billing address, email address, telephone number, and demographic information (such as age, gender), that you voluntarily give to us when you register with the Site, place an order, subscribe to newsletters, respond to surveys, or otherwise contact us. Financial Data: We collect payment information necessary to process your orders, such as your payment card details (credit card number, expiration date, CVV code) or bank account details for certain payment methods. However, most payment data is processed directly by our third-party payment processors (e.g., Razorpay, PayU, Stripe, Cashfree - [List your actual processors]). We typically only receive transaction confirmation and limited details (like the last four digits of your card). We do not store your full payment card information on our servers. Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site. If you are using our mobile application, this information may also include your device name and type, operating system, phone number, country, likes and replies to a post, and other interactions with the application and other users via server log files, as well as any other information you choose to provide. Account Information: If you create an account, we collect information related to your account, such as username, password, and purchase history. Communication Data: Records and copies of your correspondence (including email addresses and chat transcripts), if you contact us.

3. How We Collect Information
Directly from You: When you provide it to us by filling in forms on our Site (e.g., during checkout, account registration, newsletter signup, contact forms) or by corresponding with us (e.g., by email, phone, chat). Automatically: As you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies employed by us and our service providers (including Shopify). From Third Parties: For example, our payment processors, analytics providers (like Google Analytics), and advertising partners.

4. How We Use Your Information
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:
Process your orders, including payment processing and shipping. Create and manage your account. Communicate with you about your orders, account, or inquiries. Send you newsletters, promotional materials, and other information about our products and services (where you have consented or as permitted by law). You can opt-out of marketing communications at any time. Improve our website, products, and services through analysis of usage patterns. Monitor and analyze usage and trends to improve your experience with the Site. Detect, prevent, and address technical issues and security threats, including fraud prevention. Comply with legal obligations, resolve disputes, and enforce our agreements, including our Terms of Service. Fulfill any other purpose for which you provide it or provide consent. Under the DPDPA, our processing of your personal data is based on your consent provided when you use our Services, place an order, or interact with our Site, and for the legitimate purposes outlined above necessary for performing our contract with you (fulfilling orders) and operating our business.

5. Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing (e.g., [List your processors]), data analysis, email delivery (e.g., Mailchimp), hosting services (Shopify), shipping and logistics partners (e.g., [List your couriers like Delhivery, Blue Dart]), customer service, and marketing assistance. These service providers are obligated to protect your data and use it only for the purposes for which it was disclosed. Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. With Your Consent: We may disclose your personal information for any other purpose with your consent. Shopify: As our platform provider, Shopify has access to data necessary for the platform's operation, subject to their Privacy Policy. We do not sell your personal information to third parties.

6. Cookies and Tracking Technologies
We use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. When you access the Site, your personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies, but be aware that such action could affect the availability and functionality of the Site.
For more information on how Shopify uses cookies, please refer to Shopify's Cookie Policy:
https://www.shopify.com/legal/cookies

7. Data Security
We use administrative, technical, and physical security measures designed to help protect your personal information from unauthorized access, use, or disclosure. We use Secure Socket Layer (SSL) technology for encryption during data transmission. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties.

8. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. We retain your order information for our records unless and until you ask us to delete this information, subject to legal obligations. If you have an account, we retain your account information as long as your account is active.

9. Your Rights under Indian Law (DPDPA)
As per the DPDPA and other applicable laws in India, you have certain rights regarding your personal data:
Right to Access: You have the right to obtain confirmation about whether your personal data is being processed and access to that data. Right to Correction and Erasure: You have the right to request the correction of inaccurate or incomplete personal data and the erasure of personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements. Right of Grievance Redressal: You have the right to register a grievance with us if you have concerns about the processing of your personal data. To exercise any of these rights, please contact our Grievance Officer (details below). We will respond to your request in accordance with applicable law. You may need to provide proof of identity before we can process your request.

10. Children's Privacy
Our Site and Services are not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal data from a child under 18 without verification of parental consent, we will take steps to delete that information. If you believe we might have any information from or about a child under 18, please contact us.

11. Third-Party Websites
The Site may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with us. Once you have used these links to leave the Site, any information you provide to these third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your information. We are not responsible for the content or privacy and security practices and policies of any third parties.

12. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in India. This includes data processed by Shopify, which may have servers globally. We will take steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law.

13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Site or Services after the posting of changes constitutes your acceptance of such changes.

14. Contact Us and Grievance Officer
If you have questions or comments about this Privacy Policy, or wish to exercise your rights or register a grievance, please contact our Grievance Officer:
For general inquiries, you can also contact us at: marketing@breathifynaturals.com
Disclaimer: This template provides general information and does not constitute legal advice. Consult with a qualified legal professional in India to tailor this policy to your specific business practices and ensure full compliance with all applicable laws, including the DPDPA 2023 and associated rules. Sources and related content