Privacy Policy

1. Who We Are

Plantvita is a brand operated by Eaglehatch Lifetech LLP, a limited liability partnership registered in Maharashtra, India (LLPIN AAP-7287, GSTIN 27AAHFE8199B1Z7). In this policy “we”, “us” and “our” mean that entity, which is the data fiduciary for the personal data described below.

Registered office address: to be confirmed before launch.

2. What We Collect

When you place an order, create an account, or write to us, we collect:

• Identity data — the name you give at checkout or on the contact form.
• Contact data — email address, phone number, and your shipping and billing address.
• Order data — the products you bought, order value, delivery status, and our correspondence with you.
• Payment reference data — for Pay Later orders, the UPI or bank transfer reference you send us so we can match the payment to your order. We take no card payments on this website, so we never receive, process or store card numbers, CVVs or UPI PINs.
• Technical data — IP address, browser and device type, and the pages you visited, recorded automatically in server logs and by the cookies described in Section 5.

We do not ask for, and would rather you did not send us, health information. If you volunteer it in a message we use it only to answer that message.

3. Why We Collect It

• To process, pack and deliver your order, and to collect payment for it.
• To answer your questions and handle returns, replacements and refunds.
• To issue a GST-compliant tax invoice and keep the accounting records Indian law requires.
• To send transactional messages — order confirmation, dispatch and delivery updates, Pay Later payment details.
• To send marketing messages only where you have opted in. You can withdraw that consent at any time, and every marketing email carries an unsubscribe link.
• To keep the site secure and to detect fraudulent or abusive orders.

4. Who We Share It With

We share the minimum necessary, and only with the following categories of recipient:

• Courier partners — your name, delivery address and phone number, so the parcel can be delivered and, for Cash on Delivery, so payment can be collected.
• Our hosting and security provider — the website, its database and its bot protection run on Cloudflare infrastructure.
• Our transactional email provider — your email address and the contents of the message, so order and support emails can be delivered.
• Tax and government authorities — where disclosure is required under the Goods and Services Tax Act, 2017 or any other law, or under a valid legal order.
• Professional advisers — accountants and lawyers, under a duty of confidentiality.

We do not sell, rent or trade your personal data to anyone.

Some of these providers operate servers outside India. Where personal data is processed abroad, it is done under contractual terms requiring a comparable standard of protection.

5. Cookies & Tracking

The site sets cookies that are strictly necessary for it to work:

• Session cookie — keeps you signed in while you browse.
• Cart cookie — remembers what is in your basket between pages.
• Bot-protection cookie — set by Cloudflare Turnstile on the contact form to tell people from automated scripts.

We also load a tag manager, which is used to run measurement scripts. Where an analytics or advertising tag is switched on, it may set its own cookies and share usage data with that provider. The full list of active tags is being finalised and will be published here, with an opt-out, before launch. Blocking non-essential cookies in your browser will not stop you shopping; blocking essential cookies will break checkout.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• Access — give you a summary of the personal data we hold about you and who we shared it with.
• Correct or complete — fix data that is wrong, out of date or incomplete.
• Erase — delete data we no longer need, subject to the retention periods in Section 7.
• Withdraw consent — for marketing, at any time and as easily as you gave it.
• Nominate — name someone to exercise these rights on your behalf if you die or become incapacitated.
• Complain — raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.

Email care@plantvita.in to exercise any of these. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not hand your data to someone else.

7. How Long We Keep It

• Order and invoice records — retained for 8 years from the end of the relevant financial year, as required by Indian tax law. These cannot be deleted on request.
• Account details — kept while your account is open. Close it and we delete what we are not legally obliged to keep.
• Support correspondence — kept for up to 24 months so we can follow up on a repeat issue.
• Marketing consent records — kept for as long as the consent stands, plus proof of when it was withdrawn.

8. Security

The site is served over HTTPS, accounts are password-protected, and access to order data is limited to the people who need it to fulfil orders. No system is perfectly secure, so we do not promise that it is; if a breach affects your data we will notify you and the Data Protection Board of India as the law requires.

9. Children

Our products and this website are meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, write to care@plantvita.in and we will delete it.

10. Legal Framework

This policy is drafted with reference to:

• The Digital Personal Data Protection Act, 2023.
• The Information Technology Act, 2000 and the rules made under it.
• The Consumer Protection (E-Commerce) Rules, 2020.
• The General Data Protection Regulation, where a visitor is in the European Union.

11. Grievances & Contact

Grievance Officer: to be appointed and named here before launch. Until that appointment is published, every privacy question and complaint should go to the support mailbox below and will be handled by the partners of the LLP.