Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when registering an account, completing orders, subscribing to the newsletter, or interacting with our concierge support. This details:

• Contact details such as name, email address, phone number.
• Delivery and shipping address snapshots.
• Authentication and token credentials (stored securely using bcrypt hashing algorithms).
• Payment references processed securely via Razorpay Payment Gateway or Cash on Delivery logs.

2. How We Use Your Information

Your data is processed strictly under secure conditions to:

• Manage registrations and verify active customer accounts via stateless OTPs.
• Process shopping cart transactions, fulfill packages, and record orders in your account history.
• Improve site search functionalities, custom routine calculations, and skin concern layouts.
• Send email receipts or support updates via Nodemailer SMTP.

3. Data Security and Cookie Policies

We do not sell your personal data. We utilize secure cookies for otp token to monitor active user sessions. These are configured as HTTPOnly, Secure cookies to prevent cross-site scripting (XSS) exposures. We safeguard transactional information utilizing Supabase's PostgreSQL infrastructure behind Row Level Security (RLS) protections.

4. Direct Integrations and Third-Party Processors

We are committed to maintaining a high privacy standard. We do not use any third-party analytics trackers, marketing pixels, advertising networks, or social profiling scripts. All your primary data is kept strictly inside our database storage.

For core system transactions, data processing is handled securely as follows:

• Payment Gateway: Digital payments are processed securely via the Razorpay Payment Gateway. Your payment and card credentials are encrypted and passed directly to Razorpay's PCI-DSS compliant secure infrastructure. We do not see, access, or store your credit/debit card numbers, UPI PINs, or banking passwords on our servers.
• Transactional Updates: Communication for account activation OTPs and order status reports are dispatched internally using secure SMTP services without external telemetry tracking.

5. Your Rights and Access

You have the right to request access to the personal data we hold about you, request corrections to your address listings, change passwords within security settings, or request account suspension. You can manage these parameters directly inside your account's dashboard page.

6. Contact Information

If you have any questions or complaints regarding our Privacy Policy or data handling, please reach out to us:

• Brand: one1herbs
• Email: contact.one1herbs@gmail.com
• Phone: +91 80003 13747
• Address: Vadodara, Gujarat, India