Privacy Policy

Nutrinaturals is operated by Nutrinaturals Kitchen, Registered address to be added, Kochi, Kerala (“Nutrinaturals”, “we”, “us”). We cook and deliver meal plans in Kochi.

This policy explains what personal data we collect when you use our website and services, why we collect it, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

Information you give us

• Account details — your name, email address, phone number and password (stored only in encrypted form).
• Delivery details — delivery addresses, PIN codes and any delivery instructions you add.
• Food preferences — diet type, spice level, dislikes and any allergies you tell us about.
• Orders — the plans you buy, dates, skipped or paused days, coupons used and order history.
• Messages — what you send us through the contact form, email, phone or WhatsApp.

Information collected automatically

• Basic technical data such as browser type, device type, IP address and pages visited, used to keep the site secure and working.
• Small items saved in your browser (local storage) to keep you signed in, remember your cart and save your plan progress. See Cookies and browser storage.

Payment information

Card, UPI and net-banking payments are handled by our payment partner. We do not see or store your full card number, CVV or UPI PIN. We only receive a payment reference, the amount and whether the payment succeeded.

We use your personal data only for clear, specific purposes:

• To create and manage your account.
• To prepare, schedule and deliver your meals, including skips, pauses and extensions.
• To keep allergens and disliked ingredients out of your meals as far as our kitchen can.
• To take payments, issue invoices and process refunds.
• To send order confirmations, delivery updates and important service messages.
• To answer your questions and resolve complaints.
• To prevent fraud, keep our systems secure and meet legal, tax and food-safety obligations.
• To send offers or newsletters — only if you opt in. You can unsubscribe at any time from the message itself.

We process your data with your consent, which you give when you create an account, place an order or contact us, and for legitimate uses allowed by law — for example, fulfilling an order you asked for or keeping records we're required to keep.

Allergy and dietary information is used only to prepare your food safely. You can withdraw consent at any time (see Your rights), but we may then be unable to deliver some or all of our services.

We never sell your personal data. We share only what's needed, with:

• Delivery partners — your name, phone, address and delivery instructions, so they can reach you.
• Payment partners — to process payments and refunds securely.
• Service providers — hosting, email/SMS and customer-support tools that process data on our behalf under contract.
• Authorities — when required by law, court order or to protect the rights and safety of our customers and staff.

Everyone we share data with must keep it confidential and use it only for the purpose we gave it to them.

Our site uses your browser's local storage for essential features: keeping you signed in, your cart, the plan you're building and your recent preferences. These are needed for the site to work and are removed when you log out or clear your browser data.

We don't use advertising or cross-site tracking cookies. If we add analytics in future, we'll update this policy and ask for your consent where required.

We keep personal data only as long as we need it:

• Account and preference data — while your account is active.
• Order, invoice and payment records — as long as tax and accounting laws require (generally up to 8 years).
• Support messages — up to 2 years after the issue is closed.

When you delete your account, we erase or anonymise your data unless the law requires us to keep it.

We use reasonable security safeguards — encrypted connections (HTTPS), access limited to staff who need it, and trusted service providers. No system is completely secure, so please use a strong password and keep it private. If a personal data breach affects you, we'll notify you and the Data Protection Board of India as the law requires.

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• Access a summary of the personal data we hold about you and how it's used.
• Correct or update inaccurate or incomplete data — most details can be changed yourself under Profile, Addresses and Preferences.
• Erase your data and withdraw consent, subject to records we must keep by law.
• Nominate someone to exercise these rights on your behalf in case of death or incapacity.
• Raise a grievance with us, and if you're not satisfied, complain to the Data Protection Board of India.

To use any of these rights, email grievance@nutrinaturals.example.com. We may ask you to confirm your identity before acting on a request.

Our services are meant for adults. If you are under 18, please use Nutrinaturals only with the involvement and consent of a parent or guardian. We do not knowingly collect data from children without such consent, and we don't use children's data for tracking or targeted advertising.

We may update this policy as our services or the law change. The “Last updated” date at the top shows the latest version. If a change materially affects how we use your data, we'll tell you by email or on the site before it takes effect.

For privacy questions, requests or complaints, contact our Grievance Officer. We aim to acknowledge within 48 hours and resolve within 30 days.

See also our Terms & Conditions and Cancellation & Refund Policy.