Privacy Policy

This website, singularwellness.in, is run by [Legal business name], [registered address](“Singular Wellness”, “we”). We decide how your personal data is used, which makes us the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

Questions or requests about your data: contact@singularwellness.in.

• Account details - your name, email address (used to sign in), and (if you add it) a mobile number for delivery updates. If you set a password we store only a one-way scrambled form of it (Argon2id), never the password itself. If you use “Continue with Google” we receive your name, email and a Google account identifier.
• Addresses you save for delivery, including the contact number for the courier.
• Login and security records - when and how you logged in, the device and browser type, and the IP address, plus security events such as failed logins and password changes.
• How you found us - when you create an account we record the link or advertising campaign that brought you to the site (for example “Instagram ad, Diwali campaign”). If you allowed analytics cookies, we also link your account to the anonymous visitor ID those cookies use.
• Website usage - pages and products viewed and clicks on “Buy on Amazon/Flipkart/Tata 1mg”. Without your cookie consent this is counted anonymously; with consent it is linked to a random visitor ID.
• Messages you send us through the contact form or by email, and newsletter sign-ups.

We do not collect payment card details. When online payments open, they will be handled by our payment provider, not stored by us.

• To create and run your account, log you in, and send the one-time codes and security alerts that keep it safe.
• To deliver orders to your saved addresses (once ordering on this website opens) and to keep the records tax law requires.
• To prevent fraud and abuse - for example blocking bots, limiting login attempts and spotting unusual activity.
• To understand which of our adverts and links bring customers, so we spend less on advertising that does not work.
• To send you marketing emails - only if you opted in when signing up. You can stop them at any time with the unsubscribe link in any email.

We process your data on the basis of your consent and, where the DPDP Act allows, for the legitimate uses needed to provide what you asked for. You can withdraw consent at any time; this does not affect anything done before.

• Necessary - the login cookie that keeps you signed in, and a short-lived cookie used during Google sign-in. These cannot be switched off, because the account would not work without them.
• Analytics (only with your consent) - a random visitor ID and Google Analytics, to see how the site is used.
• Marketing (only with your consent) - the Meta Pixel, to measure our Facebook and Instagram adverts. We never send Meta product names, categories or anything that could reveal a health condition; only neutral product codes.

You can change your cookie choice at any time from the cookie banner.

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, for the purposes above:

• Google - our business email (account emails and codes), Google sign-in if you use it, and Google Analytics with your consent.
• Cloudflare - the “are you human?” check on login and signup.
• MongoDB Atlas, Render and Vercel - host our database, server and website.
• Cloudinary - hosts the images on the site.
• Meta - advert measurement, only with your marketing consent, as described above.
• Have I Been Pwned - when you choose a password, we check whether it has appeared in a known data breach. Only the first five characters of a scrambled form of the password are sent; never the password or anything that identifies you.

Some of these providers store data outside India, with safeguards as permitted under the DPDP Act. When you click through to Amazon, Flipkart or Tata 1mg, your purchase there is covered by their privacy policies, not ours. We may also disclose data where the law requires it.

• Account details and addresses - until you ask us to delete your account.
• Login and security records - 1 year.
• One-time login codes - deleted automatically within 2 days.
• Order and invoice records - as long as tax law requires (currently at least 6 years), without your contact details once your account is deleted.

Under the DPDP Act you can do the following. For anything below, email contact@singularwellness.in; we verify that the request comes from the account holder before acting on it.

• Know what personal data we hold about you - download a copy from My account → Login & security → Manage your data, or email us.
• Correct your name, email, mobile number and addresses yourself in My account, or ask us to.
• Erase your account and personal data - from the same page, or email us from the address on your account.
• Withdraw consent to marketing emails with the unsubscribe link in any of them (or by emailing us), and to cookies from the cookie banner.
• Nominate someone to exercise these rights for you in case of death or incapacity - email us.
• Complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.

Passwords are stored only in scrambled form; login codes are single-use, expire within minutes and lock after five wrong tries; logins use secure cookies that page scripts cannot read; you are alerted by email about new logins and account changes; and you can see your devices and log them out at any time. No system is perfectly secure, but we will notify you and the authorities as the law requires if a breach affects your data.

Our products and accounts are meant for adults. If you are under 18, please use the site only with a parent or guardian, who must give consent on your behalf.

Dharmesh R, Co-Founder, is our Grievance Officer. Email: contact@singularwellness.in. We will acknowledge your complaint promptly and respond within the time the law requires.

If we change how we use your data, we will update this page and the date at the top, and tell account holders by email about important changes.