• your name
• your email address
• your mobile number
• your delivery address, including the landmark and pincode you give us
• your order history with us
• what you put in your basket, so we can hold it for you between visits and tell whether anything went wrong on the way to paying
• the pincode you type into the delivery checker
• which pages you opened, in what order, how long each was in front of you, how far down you read, and which links and buttons you pressed
• what kind of device, browser and screen you used, which site or campaign link sent you to us, and roughly where you were — the city, never the street
• if you tell us you are outside our delivery area, the name, address, number and email you leave on that form
• any message you send through the contact form

To take and deliver your orders, to confirm a delivery with you, to answer questions you write to us about, and to understand which oils sell and where people are asking us to deliver next. We do not sell your details to anyone.

We never see or store your card, UPI or bank details. Payments are handled entirely by our payment gateway, which is responsible for the security of that information. We only receive confirmation of whether a payment succeeded.

Running a shop takes a handful of other companies, and each of them sees only the part of your information their job needs:

• our payment gateway, Razorpay, so your payment can be taken
• the company that hosts this website and its database, so your account and your orders can be stored
• the company that sends our email, so receipts and replies reach you
• the company that sends our text messages and WhatsApp messages, so a one-time code, your order updates and your bill of supply reach your phone
• Google, when you use the address box — what you type there is sent to Google so it can suggest the address
• a free location service (ip-api.com), which is asked once per visit which city a network block belongs to — see the next section for what it is and is not sent
• whoever brings you the order — our own delivery staff, or the courier company carrying it — so it can reach your door

Nobody else, and never for their own marketing. We never sell your data.

We keep order and invoice records for as long as tax and accounting law in India requires us to. You may ask us to delete your account at any time by writing to info@swasthaayu.in, and we will remove everything we are not legally required to retain.

We use cookies and local storage to keep you signed in, to remember your basket between visits, and to give your browser a random label so we can tell one unfinished basket from another. That label is not tied to your name unless you have signed in.

We count visits ourselves, on our own servers: which pages were opened, in what order, how long each one was in front of you, how far down you read, which links and buttons you pressed, and which site or campaign link sent you here. It is how we learn that a page is confusing or that an oil nobody buys is also an oil nobody opens. We do not use any outside advertising or tracking service on this site today. If that ever changes, this page will say so.

Your IP address is not kept as part of what we record about a visit. It is used briefly to stop the forms on this site being abused, and once per visit to work out roughly where you are: the last part of the address is blanked first, so what is looked up is a block shared by a few hundred connections, not you, and what comes back is a city and a network provider. A scrambled copy of that blanked block is remembered for a week so the same question is not asked again, and then forgotten.

You can switch the counting off for this browser. Signing in, your basket and your orders are unaffected; we simply stop recording which pages you open. Browsers that send the Global Privacy Control signal are treated as having ticked this already.

Write to info@swasthaayu.in and a person will read it. If you would like a copy of what we hold about you, ask and we will send it.