Privacy Policy

This Privacy Policy explains what data we collect, why we collect it, how we use it, how we share it, and your choices—when you visit urbherb.in, place orders, contact support, or interact with our social channels.

We follow applicable Indian law, including the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 (and its subordinate rules as notified). Where required, we obtain your consent.

• Identity & contact: name, email, phone, billing/shipping address.
• Order data: items, amounts, invoices, support tickets, RMA.
• Payment data: transaction IDs, status, method (via Razorpay). We do not store your full card/bank details.
• Technical data: IP, device, browser, pages viewed, cookies, approximate location.
• Marketing preferences: newsletter opt‑ins, campaign responses.
• Social interactions: DMs/comments on Instagram or other platforms, if you contact us there.

• Process orders, payments, shipping, returns, and support.
• Prevent fraud, ensure security, and comply with legal obligations (tax/GST).
• Improve our Website, products, and customer experience.
• Send transactional emails/SMS and, with consent, marketing communications (you can opt out anytime).
• Feature anonymized reviews/testimonials.

• We use essential cookies (cart, checkout), analytics (e.g., first‑party analytics or tools we may add), and advertising pixels if/when enabled.
• You can control cookies via browser settings; blocking some cookies may affect site functionality.

We share data only as needed:

• Razorpay (payments processing).
• Shiprocket and its courier partners (logistics, tracking, COD remittance).
• Hosting/CDN/Cloud & email providers (secure infrastructure & notifications).
• Professional advisors (accounting/compliance), and law enforcement/regulators if required by law.
  We do not sell your personal data.

Some service providers may process data outside India. We require appropriate safeguards and contractual protections.

• Order, invoice, and taxation records are retained as per statutory requirements.
• Marketing consents are retained till you withdraw.
• We retain only as long as necessary for the purposes stated above.

• Access/Update/Erase: Write to info@urbherb.in.
• Withdraw consent / Opt‑out: Use unsubscribe links or email us.
• Grievance redressal: See contact below.
  We may verify your identity before fulfilling requests.

We use administrative, technical, and physical safeguards to protect your data (HTTPS, access controls, need‑to‑know principle). No method is 100% secure; we cannot guarantee absolute security.

Our Website is not intended for children under 13. We do not knowingly collect data from them.

Our site may contain links to third‑party sites (including Instagram). Their privacy practices apply to your use of those platforms.

We may update this Policy periodically. Material changes will be indicated by an updated “Last updated” date.