Nibasu Healthtech LLP (“Nibasu”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit or use www.nibasu.com (the “Website”), create an account, place an order, contact us, subscribe to our communications, submit a review, or otherwise interact with Nibasu.

Nibasu is an India-based ecommerce business offering skincare, beauty, hair-care, personal-care and selected wellness/supplement products to customers in India and, where available, international markets.

By using the Website or providing personal information to us, you acknowledge this Privacy Policy. Where applicable law requires your consent for a particular processing activity, we will obtain that consent in the manner required by law.

ABOUT NIBASU

The Website is operated by:

Nibasu Healthtech LLP
Shop 15, Wegman Plaza, Block H, Sector 18, Rohini
Delhi – 110089, India

Email: support@nibasu.com
Phone: +91-9990849293

For privacy-related questions, requests or complaints, you may contact us using the details above.

Where applicable under privacy or data-protection law, Nibasu acts as the controller or business responsible for personal information collected through the Website.

INFORMATION THIS POLICY COVERS

This Privacy Policy applies to personal information collected through:

• the Nibasu Website;

• customer accounts;

• online orders and checkout;

• payments and transactions;

• shipping and delivery;

• returns, refunds and replacements;

• customer support;

• email and other communications;

• product reviews and feedback;

• marketing subscriptions;

• cookies and similar technologies; and

• other interactions between you and Nibasu.

This Privacy Policy does not govern third-party websites, applications, payment services or other services that Nibasu does not control.

INFORMATION WE COLLECT

We collect information that is reasonably necessary to operate our business, process orders, provide customer support, improve the Website and comply with legal obligations.

3.1 Information you provide to us

Depending on how you interact with Nibasu, we may collect:

• full name;

• email address;

• telephone or mobile number;

• billing address;

• shipping or delivery address;

• city, state/province, country and postal/ZIP code;

• account information;

• order information;

• products purchased;

• payment and transaction information;

• return, refund or replacement information;

• customer-service communications;

• reviews and feedback;

• marketing preferences; and

• other information you voluntarily provide to us.

3.2 Payment information

When you purchase products through the Website, payment may be processed by third-party payment processors or gateways.

Depending on the payment method, the relevant payment provider may collect information such as card details, bank details, wallet information or other payment credentials.

Where payment is processed through a third-party provider, Nibasu generally receives limited transaction information necessary to confirm and administer the transaction, such as:

• transaction reference;

• payment status;

• amount;

• currency;

• payment method;

• refund status; and

• other information required to reconcile or administer the transaction.

We do not intend to store complete payment card numbers or card security codes unless this is specifically required and lawfully permitted for a particular payment arrangement.

Your use of a third-party payment service may also be subject to that provider's privacy policy and terms.

3.3 Order information

When you place an order, we may collect and retain information including:

• order number;

• products ordered;

• quantity;

• price;

• currency;

• order date;

• payment status;

• billing information;

• shipping information;

• tracking information;

• delivery status;

• return information; and

• refund information.

3.4 Information collected automatically

When you access the Website, certain technical information may be collected automatically, including:

• IP address;

• browser type;

• browser version;

• device type;

• operating system;

• language preferences;

• approximate location derived from technical information;

• pages visited;

• products viewed;

• referring website;

• time and date of access;

• interactions with the Website;

• website performance information; and

• cookie or similar technology information.

The information collected depends on the technology used on the Website, your device and your browser settings.

3.5 Customer support information

When you contact Nibasu, we may collect information necessary to respond to your request.

This may include:

• your name;

• email address;

• telephone number;

• order number;

• product information;

• photographs;

• delivery information;

• details of your complaint or request; and

• communications between you and Nibasu.

We may retain customer-service communications for purposes including customer support, dispute resolution, quality assurance, training, security and legal compliance, where permitted by applicable law.

3.6 Reviews and feedback

If you submit a product review, rating, testimonial, photograph or other feedback, we may collect and use the information you choose to submit.

You should avoid including sensitive personal information, payment information or information about another person in a public review.

4. INFORMATION WE DO NOT ROUTINELY REQUEST

Nibasu is an ecommerce business and does not routinely require customers to provide sensitive information such as:

• medical records;

• medical history;

• insurance information;

• religious beliefs;

• political opinions;

• sexual orientation;

• biometric information;

• government identification documents; or

• other sensitive personal information.

Please do not provide such information unless it is specifically requested and reasonably necessary for a lawful purpose.

If you voluntarily provide sensitive personal information, we will handle it in accordance with applicable law.

5. HOW WE USE YOUR INFORMATION

We may use personal information for the following purposes.

5.1 Processing and fulfilling orders

We use information to:

• process orders;

• verify transactions;

• provide order confirmations;

• prepare and dispatch products;

• arrange delivery;

• provide tracking information;

• communicate about orders;

• process returns and replacements; and

• process refunds.

5.2 Customer accounts

Where customer accounts are available, we may use information to:

• create and maintain your account;

• authenticate your account;

• maintain account information;

• provide account functionality; and

• allow you to access relevant order information.

5.3 Customer service

We may use information to:

• answer enquiries;

• resolve complaints;

• investigate delivery issues;

• process returns;

• process refunds;

• investigate damaged or defective products;

• investigate incorrect or missing products; and

• communicate with you about your request.

5.4 Website operation

We may use information to:

• operate the Website;

• maintain website functionality;

• troubleshoot technical problems;

• improve navigation;

• understand how customers use the Website;

• develop new features;

• improve product presentation; and

• improve customer experience.

5.5 Analytics and business improvement

We may use aggregated or appropriately protected information to understand:

• customer behaviour;

• purchasing patterns;

• product interests;

• website performance;

• marketing performance; and

• general business trends.

5.6 Security and fraud prevention

We may process information to:

• detect suspicious transactions;

• prevent fraud;

• protect customer accounts;

• prevent unauthorized activity;

• protect our Website and systems;

• investigate misuse; and

• maintain website and transaction security.

5.7 Marketing

Where permitted by applicable law, we may use your information to send:

• promotional offers;

• discounts;

• newsletters;

• product announcements;

• new product information;

• marketing communications; and

• other promotional material.

Where consent is legally required, we will obtain the required consent.

You may unsubscribe from marketing communications at any time.

5.8 Legal and regulatory purposes

We may process information to:

• comply with applicable laws;

• comply with tax and accounting obligations;

• respond to lawful government requests;

• comply with court orders;

• meet customs or shipping requirements;

• establish or defend legal claims;

• investigate fraud; or

• protect our rights and legitimate interests.

6. LEGAL BASES FOR PROCESSING

Depending on the circumstances and applicable law, we may process personal information on the following legal bases:

Contract

Where processing is necessary to provide products or services you have requested, including processing and delivering an order.

Legal obligation

Where processing is necessary to comply with applicable legal, tax, accounting, regulatory or other obligations.

Consent

Where you have provided consent for a particular activity, such as certain marketing communications or non-essential cookies.

Legitimate interests

Where permitted by applicable law, we may process information for legitimate business purposes such as:

• fraud prevention;

• website security;

• customer support;

• improving services;

• analytics;

• business administration; and

• protecting legal rights.

Legal claims

We may process information where necessary to establish, exercise or defend legal claims.

The applicable legal basis may vary depending on your location and the circumstances.

7. WHO MAY RECEIVE YOUR INFORMATION

We may share personal information with service providers and other parties where reasonably necessary to operate Nibasu and provide our products and services.

7.1 Payment providers

Payment processors and gateways may receive information necessary to process payments, prevent fraud and process refunds.

7.2 Shipping and logistics providers

We may share relevant information with:

• courier companies;

• shipping companies;

• freight providers;

• logistics providers;

• customs brokers; and

• other delivery partners.

This may include your name, address, phone number, email address, order information and information necessary for delivery or customs clearance.

7.3 Website and technology providers

We may use third-party providers for:

• website hosting;

• ecommerce functionality;

• databases;

• website security;

• analytics;

• customer support;

• communication services;

• fraud prevention; and

• other technical services.

7.4 Analytics and advertising providers

Where these services are enabled on the Website, we may share or permit collection of relevant information through analytics, advertising, pixels, cookies or similar technologies.

Such providers may process information relating to:

• website visits;

• product views;

• interactions;

• device information;

• advertising interactions; and

• conversion or performance information.

The use of these technologies is subject to applicable law and, where required, consent.

7.5 Professional advisers

We may disclose information to:

• accountants;

• auditors;

• lawyers;

• insurers;

• consultants; and

• other professional advisers

where reasonably necessary for legitimate business, legal, accounting or compliance purposes.

7.6 Government authorities

We may disclose information when required or permitted by law, including to:

• courts;

• law-enforcement authorities;

• regulators;

• tax authorities;

• customs authorities;

• government agencies; and

• other authorized authorities.

7.7 Business transactions

If Nibasu is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

8. INTERNATIONAL DATA TRANSFERS

Nibasu operates from India and may sell products to customers in other countries.

As a result, personal information may be processed, stored or accessed in India or in other countries where Nibasu or its service providers operate.

Where applicable law requires safeguards for international transfers, we will take reasonable steps to use legally recognized transfer mechanisms and appropriate safeguards.

For customers in jurisdictions such as the European Economic Area or United Kingdom, applicable transfer safeguards may include adequacy decisions, contractual safeguards or another legally recognized mechanism, depending on the circumstances.

9. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used for:

• essential Website functionality;

• shopping-cart functionality;

• account functionality;

• security;

• remembering preferences;

• analytics;

• website performance;

• marketing;

• advertising;

• measuring advertising performance; and

• improving the Website.

9.1 Essential cookies

Some cookies are necessary for the Website to function correctly.

Disabling these cookies may affect features such as shopping carts, checkout, login or other essential functionality.

9.2 Analytics

Where analytics tools are enabled, they may help us understand how visitors use the Website and how we can improve it.

9.3 Advertising and marketing

Where advertising technologies are enabled, cookies or similar technologies may be used to measure advertising effectiveness or deliver more relevant advertising.

Depending on your jurisdiction, certain non-essential cookies may require your consent.

9.4 Managing cookies

You may be able to control, block or delete cookies through your browser settings or available cookie-management tools.

Disabling cookies may affect some Website functionality.

10. MARKETING COMMUNICATIONS

Nibasu may send marketing communications where permitted by applicable law.

Our Website currently provides visitors with an option to subscribe for offers and discounts.

If you subscribe, we may use your email address to send promotional communications.

You can unsubscribe at any time by:

• clicking the unsubscribe link in the relevant email; or

• contacting us at support@nibasu.com.

Unsubscribing from marketing communications does not prevent essential transactional communications such as:

• order confirmations;

• payment confirmations;

• shipping updates;

• delivery notifications;

• return/refund communications;

• security notices; or

• important service communications.

11. ABANDONED CART AND TRANSACTION COMMUNICATIONS

Where permitted by applicable law, if you begin an order or provide contact information during checkout but do not complete your purchase, we may contact you regarding the incomplete transaction.

Where consent is required for such communications, we will obtain the required consent.

You may opt out of marketing communications at any time.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on:

• the nature of the information;

• the purpose for which it was collected;

• whether you maintain an account;

• whether you have completed a purchase;

• tax and accounting requirements;

• legal obligations;

• dispute resolution;

• fraud prevention; and

• legal claims.

When information is no longer required, we may delete, anonymize or securely dispose of it, subject to applicable legal and business requirements.

13. DATA SECURITY

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, misuse, loss, alteration or disclosure.

Depending on the circumstances, security measures may include:

• access controls;

• authentication procedures;

• secure communications;

• restricted access;

• system monitoring;

• security procedures for service providers; and

• other appropriate safeguards.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If you believe that your account or personal information has been compromised, please contact us promptly at:

support@nibasu.com

14. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights relating to your personal information.

These may include:

Right of access

You may request access to personal information we hold about you.

Right to correction

You may request correction of inaccurate or incomplete information.

Right to deletion

You may request deletion of personal information in circumstances permitted by applicable law.

Right to restriction

You may request restriction of certain processing in circumstances permitted by applicable law.

Right to object

You may have the right to object to certain processing, including certain direct marketing activities.

Right to portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect processing that occurred lawfully before withdrawal.

Right to complain

Where applicable, you may have the right to complain to the relevant data-protection or privacy authority.

These rights may be subject to legal limitations and exceptions.

15. EUROPEAN UNION / EEA CUSTOMERS

If you are located in the European Economic Area and applicable data-protection law applies to our processing of your personal information, you may have rights including:

• access;

• correction;

• deletion;

• restriction of processing;

• objection;

• data portability;

• withdrawal of consent where applicable; and

• the right to lodge a complaint with a competent supervisory authority.

You may also have the right to object to processing for direct marketing.

The specific rights available to you depend on the circumstances and applicable law.

16. UNITED KINGDOM CUSTOMERS

If you are located in the United Kingdom and applicable UK data-protection law applies, you may have rights including:

• access;

• correction;

• deletion;

• restriction;

• objection;

• data portability; and

• withdrawal of consent where processing is based on consent.

You may also have rights concerning direct marketing and certain automated processing, where applicable.

17. UNITED STATES CUSTOMERS

Privacy laws in the United States vary by state.

Depending on your location and whether a particular state privacy law applies to Nibasu, you may have rights concerning:

• access to personal information;

• correction;

• deletion;

• information about categories of personal information collected or disclosed;

• portability;

• opting out of certain forms of targeted advertising or sale/sharing where legally applicable; and

• other rights provided by applicable state law.

To exercise an applicable privacy right, contact us at:

support@nibasu.com

We will evaluate and respond to your request in accordance with the law applicable to you.

18. INDIA PRIVACY

Nibasu is based in India and processes personal information in accordance with applicable Indian laws and regulations.

Where applicable, individuals may have rights relating to their personal information, including rights concerning access, correction, consent, withdrawal of consent and grievance redressal.

If you have a privacy-related concern or grievance, contact:

support@nibasu.com

19. HOW TO EXERCISE YOUR PRIVACY RIGHTS

To submit a privacy request, contact:

Email: support@nibasu.com
Phone: +91-9990849293

Please provide:

• your name;

• email address associated with your account or order;

• nature of your request;

• order number, where relevant; and

• any other information reasonably necessary to verify your identity or process the request.

For security purposes, we may need to verify your identity before completing certain requests.

We will respond within the period required by applicable law.

We may decline or limit a request where permitted or required by law.

20. CHILDREN'S PRIVACY

The Website is intended for general consumers and is not directed at children.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact:

support@nibasu.com

We will review the matter and take appropriate action where required.

21. THIRD-PARTY WEBSITES AND SERVICES

The Website may contain links to third-party websites, social media platforms, payment services or other external services.

Nibasu does not control the privacy practices of those third parties.

Your interactions with third-party services are governed by the privacy policies and terms of those third parties.

We recommend reviewing their privacy policies before providing personal information.

22. SOCIAL MEDIA

Nibasu may maintain or link to social media accounts.

If you interact with us through a social media platform, the platform may collect and process information under its own privacy policy.

Information that you publicly post may be visible to others.

23. REVIEWS, TESTIMONIALS AND USER CONTENT

If you voluntarily submit a product review, testimonial, photograph, rating, comment or other content, we may use and display that content in accordance with applicable law and the terms under which it was submitted.

We may use submitted reviews or testimonials for purposes such as:

• displaying product reviews;

• improving customer experience;

• understanding customer feedback; and

• legitimate promotional activities.

We will not intentionally publish sensitive personal information that you did not intend to make public.

You should not include:

• payment information;

• government identification numbers;

• passwords;

• sensitive health information; or

• personal information belonging to another person

in publicly visible reviews or comments.

24. FRAUD PREVENTION AND SECURITY MONITORING

We may use personal and technical information to identify suspicious transactions, prevent fraud, protect our customers and secure the Website.

This may include:

• IP address;

• device information;

• transaction information;

• order history;

• payment status;

• delivery information; and

• unusual account or Website activity.

Where required by applicable law, we will provide additional information about automated decision-making or profiling.

25. INTERNATIONAL ORDERS AND CUSTOMS

For international orders, information may be shared with shipping, logistics, customs and government authorities where necessary to process and deliver an order.

Information may include:

• name;

• delivery address;

• telephone number;

• email address;

• order information;

• product information; and

• information required for customs or import clearance.

This information may be processed in India or another country involved in the shipment.

26. BUSINESS TRANSFERS

If Nibasu undergoes a merger, acquisition, restructuring, financing, sale or transfer of all or part of its business or assets, personal information may be transferred as part of that transaction, subject to applicable law.

27. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes in our business;

• changes to the Website;

• changes to our products or services;

• changes to technology;

• changes to our service providers;

• changes in applicable law; or

• changes to our data-processing practices.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

Where applicable law requires additional notice or consent for material changes, we will provide such notice or obtain the required consent.

We encourage you to review this Privacy Policy periodically.

28. GOVERNING LAW AND MANDATORY RIGHTS

This Privacy Policy is primarily governed by the applicable laws of India, except to the extent that mandatory privacy, data-protection or consumer-protection laws of another jurisdiction apply to you.

Nothing in this Privacy Policy is intended to exclude, restrict or waive any rights that cannot lawfully be excluded, restricted or waived under applicable law.

29. SEVERABILITY

If any provision of this Privacy Policy is found to be invalid, unlawful or unenforceable under applicable law, that provision will be interpreted or limited to the extent necessary, and the remaining provisions will continue to apply to the maximum extent permitted by law.