📄 Privacy Policy – Namrata Nutri Studio (GDPR + Indian IT Act Compliant)

Last Updated: 02.10.2025

Namrata Nutri Studio (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679), the Information Technology Act, 2000 (India), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information We Collect

Identity Data: Full name, gender, date of birth.
Contact Data: Email address, phone number, billing/shipping address.
Health & Lifestyle Data: Voluntary details about dietary preferences, health conditions, and wellness goals (sensitive personal data).
Financial Data: Payment information (processed securely through third-party gateways like Stripe, Razorpay, PayPal – we do not store card details).
Technical Data: IP address, browser type, device information, cookies, and website usage analytics.

2. Lawful Basis for Processing

Consent – Voluntary data sharing (forms, newsletters).
Contractual Necessity – To fulfill your service purchase.
Legal Obligation – Where required by law.
Legitimate Interests – Service improvement, marketing, fraud prevention.

3. How We Use Your Information

Deliver personalized nutrition and wellness services.
Process secure payments and fulfill orders.
Provide customer support and communication.
Send offers and service updates (with your consent).
Ensure website security and compliance with laws.

4. Sharing and Disclosure

We never sell personal data. We may share with:

Payment Gateways (Stripe, Razorpay, PayPal).
Service Providers (hosting, analytics, delivery).
Legal Authorities, if mandated by law.

5. International Data Transfers

If data is transferred outside India, we ensure compliance with GDPR safeguards like Standard Contractual Clauses (SCCs).

6. Data Retention

Data is kept only as long as necessary.
Financial/transactional records retained per Indian tax laws.
You may request deletion anytime.

7. Your Rights (GDPR + IT Act)

Access, Rectification, Erasure.
Restriction & Data Portability.
Withdraw Consent anytime.
Grievance Redressal (see below).

8. Cookies Policy

We use cookies for:

Site functionality.
Analytics and performance.
Personalization.

Users can disable cookies in their browser.

9. Data Security

We implement ISO 27001 equivalent measures: encryption, firewalls, limited access.

10. Children’s Data in Nutrition Services

We provide child health and nutrition services.
For clients under 18 years, data must be provided only by a parent/guardian.
By booking/purchasing a child service, parent/guardian confirms consent for collection and use of child’s data.
Safeguard: If we learn that a child has submitted data without parental consent, we will delete it immediately.

11. Updates to Privacy Policy

We may update this policy; revisions will appear here with updated dates.

12. Contact & Grievance Redressal

For privacy concerns:

Grievance Officer (as per IT Act, 2000 – Rule 5(9))
Name: Namrata Sharma (Founder & Chief Nutritionist)
Designation: Grievance Officer, Namrata Nutri Studio
Email: namratanutristudio@gmail.com
Phone:
Website: https://www.namratanutristudio.com

📌 Note: Please also review our Terms & Conditions and Refund Policy for additional details on service usage.