This notice explains what personal data we collect when you use the Rejwin website or buy Rejwin, why we collect it, who we share it with, how long we keep it, and the rights you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
1. Who we are
Rejwin is marketed by Eesha Herbals, No. 68, "Banashree", Kolluraiah Street, 3rd Cross, Shivamogga – 577202, Karnataka. Eesha Herbals decides why and how your personal data is used, and is the Data Fiduciary under the Act. Rejwin is manufactured by Valyou Products Private Limited, which does not receive your personal data through this website.
2. What we collect
| Type of data | What it includes |
|---|---|
| Account details | Name, mobile number, email address and password (stored only in encrypted form). |
| Order and delivery details | Billing and delivery addresses, PIN code, GST number (if you give one), items ordered, order history, invoices, courier and tracking details. |
| Payment details | Payments are handled by Razorpay. We receive the payment status, amount, method and reference number. We never see or store your card number, UPI PIN or bank login. |
| Health details for the prescription | Patient name, age, gender, the case history and observations you share with our team, and any medical documents you send us. This is used to prepare a prescription for each order. |
| Messages | One-time passwords (OTPs), enquiries you send through the Contact form, and messages exchanged with us on WhatsApp, email or phone. |
| Technical details | Login records, IP address, device and browser type, and security logs. We use only the cookies needed to keep you logged in and to keep your cart, and a cookie that remembers you have seen our cookie notice. We do not use analytics or advertising cookies. |
3. Why we use it
| Purpose | Data used |
|---|---|
| Create and manage your account | Account details, OTPs |
| Process, pack, ship and deliver orders | Order and delivery details, payment details |
| Prepare the prescription for your order | Health details, order details |
| Issue GST invoices and keep accounts | Order, payment and GST details |
| Send order updates and invoices | Mobile number, email address |
| Remind you when your next bottle is due | Mobile number, order history |
| Answer your enquiries and complaints | Messages, account and order details |
| Keep the website safe and prevent fraud | Technical details |
| Meet our legal duties | Any data the law requires us to keep or share |
We do not sell your personal data, and we do not use it for advertising by others.
4. Your consent
We ask for your consent when you create an account or place an order, through a clear tick box that is not ticked in advance. Separate consent is asked before you share health details. You can withdraw your consent at any time, as easily as you gave it, by writing to us (section 10) or from your account page. Withdrawing consent does not affect what was done before. If you withdraw it, we may not be able to complete orders that need that data, and we will still keep records the law requires.
5. Who can see your data
- Our team: only the people who need it for their work. Health details are seen only by our marketing team, the staff who prepare prescriptions, and the registered doctor who writes your prescription.
- Service providers who work for us, under written contracts that require them to protect your data and use it only for our instructions:
- Razorpay, for payments and refunds
- The WhatsApp Business service and email service we use, for OTPs, order updates and invoices
- Courier companies, which receive only your name, delivery address, mobile number and parcel details
- Our website hosting and database provider, which stores the data
- Government and authorities, when the law requires it, for example tax authorities.
Some of these providers may store or process data on servers outside India. This is done only where the law allows, and they must protect it to the same standard.
6. How long we keep it
| Data | How long |
|---|---|
| Invoices, payments and accounts | For the period required by GST and income tax laws, then deleted. |
| Prescriptions and health details | 6 months from the date of the prescription, then deleted. |
| Account details | While your account is open. If you do not use your account for 3 years, we will tell you at least 48 hours before deleting it. |
| Security and access logs | At least 1 year, as the Rules require. |
| Enquiries and messages | Up to 1 year after the matter is closed. |
When you close your account or withdraw consent, we delete your data unless the law requires us to keep it.
7. How we protect it
- Passwords and secret keys are stored in encrypted form; the website uses HTTPS.
- Each staff member has their own login and sees only the pages their role needs.
- Access to personal data is logged, and the logs are checked.
- Data is backed up so it can be restored if something goes wrong.
If there is a data breach, we will inform you without delay: what happened, what data was affected, what we are doing about it and what you can do to protect yourself. We will also report it to the Data Protection Board of India, with full details within 72 hours.
8. Your rights
- Access: ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with.
- Correction and update: correct wrong or incomplete data, or update it. You can change most details yourself from your account page.
- Erasure: ask us to delete your data, unless the law requires us to keep it.
- Withdraw consent at any time (section 4).
- Grievance: complain to us about how your data is handled (section 10).
- Nominate a person to use these rights for you if you die or cannot act yourself.
We will reply within 30 days, and in any case within 90 days.
9. Children
Accounts are for adults (18 years and above). If an order is for a child, a parent or lawful guardian must place it and give consent for the child's data. We do not track children's behaviour or show them targeted advertising.
10. Contact us
Privacy contact: Mr. Shashikanth Nadig, Proprietor, Eesha Herbals
Email: eeshaherbals09@gmail.com · Phone / WhatsApp: 9108504009
Address: No. 68, "Banashree", Kolluraiah Street, 3rd Cross, Shivamogga – 577202, Karnataka
If you are not satisfied with our reply to a grievance, you may complain to the Data Protection Board of India.
11. Your duties
Please give true and complete information, do not use another person's details, and do not make false or frivolous complaints. The Act provides a penalty for breaking these duties.
12. Changes to this notice
If we change this notice, we will publish the new version on this page with its effective date and inform registered customers of important changes by email or WhatsApp.