What we collect, why, and what you can do about it

What we collect

Information you give us

• Order details: name, email address, phone number, billing and shipping address, and what you bought. Phone numbers are required because express carriers need them for delivery and customs.
• Account details if you create an account: the same, plus saved addresses, wishlist and order history.
• Messages: anything you send us by email, WhatsApp, the contact form or a support ticket, including attachments such as photos of a damaged parcel.
• Newsletter: your email address, if you subscribe.
• Reviews you choose to leave on a product.

Information collected automatically

• IP address, approximate location derived from it, browser and device type, pages viewed and how you reached the site. We use this to show prices in the right currency, keep the site secure and understand what people look for.
• Cookies and similar identifiers, described below.

We do not ask for and do not want health records, medical history or any other sensitive personal data. If you mention a health condition in a message to us, we use it only to answer that message.

How we use it

• To process, pack, ship and track your order and to handle returns and refunds.
• To send order confirmations, shipping and tracking emails, and replies to your messages.
• To send the newsletter if you subscribed. Every email has an unsubscribe link.
• To detect fraud, abuse and attacks on the site.
• To measure and improve the site and our advertising, in aggregate.
• To comply with tax, customs and accounting law.

We do not sell personal data, and we do not send marketing on behalf of other companies.

Payments

Card and wallet payments are processed by PayPal, Stripe, Razorpay or PayU, depending on the option you choose. Your card number goes directly to the payment provider over an encrypted connection and is never stored on our servers. Each provider handles your payment data under its own privacy policy.

Cookies and analytics

We use cookies for three things:

• Running the store: keeping your cart, currency choice, login session and wishlist between pages. The site does not work without these.
• Measurement: Google Analytics, so we can see which pages and products people use, in aggregate.
• Advertising: the Meta (Facebook) pixel and Google Ads tags, so that our ads are shown to people who are likely to be interested and so we can tell whether an ad led to a purchase. These may share hashed order information with Meta and Google.

You can block or delete cookies in your browser at any time; the store cookies will be recreated as you shop. If you would rather not be measured or shown our ads, block those cookies in your browser or use the opt-outs that Google and Meta provide in your account settings.

Who we share it with

Only what each party needs to do its job:

• Carriers (DHL, UPS, FedEx and domestic couriers): name, address, phone, and the customs declaration for your parcel.
• Payment providers (PayPal, Stripe, Razorpay, PayU): order amount and the details needed to take payment and process refunds.
• Email and support tools that send our order emails, newsletter and support replies.
• Hosting, CDN and security providers that run the site.
• Customs and tax authorities, where the law requires it, and other authorities on a lawful request.

Some of these providers are outside India, including in the USA and the EU. Where we transfer your data to them we do so under their standard contractual protections.

How long we keep it

• Orders and invoices: for the period Indian tax and accounting law requires after the sale.
• Accounts: until you delete the account or ask us to.
• Support messages: for as long as needed to resolve the matter and handle any follow-up.
• Newsletter: until you unsubscribe.
• Analytics and advertising data: according to the retention settings of those tools, which we keep at their shortest practical setting.

Your rights

Wherever you are, you can ask us to tell you what personal data we hold about you, correct it, delete it, stop using it for marketing, or send you a copy. Customers in the EU, UK, California and other places with data protection law have these rights by statute, and we honour them for everyone. Email [email protected]; see the data deletion page for how deletion works and what we must retain. We respond within 30 days and never charge for a request.

Security

The site is served over HTTPS, protected by a web application firewall, and access to order data is limited to the people who pack and support orders. No system is perfectly secure; if we ever discover a breach affecting your data we will tell you and the relevant authority as the law requires.

Children

The site is for adults. We do not knowingly collect data from anyone under 18; if you believe a child has given us personal data, email [email protected] and we will delete it.

Changes to this policy

When we change this policy we update the date at the top. Changes that affect how we use data you have already given us will be emailed to account holders before they take effect.

Contact and grievance officer

Under India’s Information Technology Act and rules, complaints about the handling of your personal data go to our Grievance Officer:

Grievance Officer
Moolihai Wellness Private Limited
Main Road, Kalanthapanai, Panagudi
Tirunelveli, Tamil Nadu 627109, India
Email: [email protected]
Phone: +91 75980 18880

Complaints are acknowledged within 48 hours and resolved within 30 days.