Last updated: 12 September 2026 ReHealthMe ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly, in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as applicable in India. By using rehealthme.com ("the Website") or purchasing our products, you agree to the practices described in this Privacy Policy. 1. Information We Collect We may collect: (a) identity and contact information such as your name, email address, phone number and shipping/billing address when you place an order, create an account or contact us; (b) order and transaction information such as products purchased, order value and order history; (c) payment information, which is collected and processed directly by our RBI-authorised payment gateway partners — we do not store your full card, UPI or net-banking credentials on our servers; and (d) technical and usage information such as IP address, browser type, device information and pages visited, collected automatically through cookies and similar technologies. 2. How We Use Your Information We use your information to: process and deliver your orders; communicate order confirmations, shipping updates and customer support responses; respond to enquiries, including health and wellness consultations you request; improve our Website, products and customer experience; send promotional or marketing communications where you have consented, with an option to opt out at any time; and comply with applicable legal, tax and regulatory obligations, including those under FSSAI and consumer protection law. 3. Cookies and Tracking Technologies Our Website uses cookies and similar technologies to remember your preferences, keep your cart and session active, and understand how visitors use our Website through analytics tools. You can control or disable cookies through your browser settings; doing so may affect certain features of the Website. 4. Sharing and Disclosure of Information We do not sell or rent your personal information to third parties. We may share information with trusted service providers who help us operate our business, including courier and logistics partners (to deliver your order), payment gateway providers (to process payments securely), IT and hosting service providers, and consultation/medical partners you choose to engage with. These partners are permitted to use your information only to provide services to us and are contractually obligated to keep it confidential. We may also disclose information where required by law, court order, or a competent government authority. 5. Data Storage and Security We implement reasonable security practices and procedures, including encryption in transit, access controls and secure hosting, to protect your personal information from unauthorised access, alteration, disclosure or destruction, consistent with the standards prescribed under the IT Rules, 2011. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. 6. Your Rights Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate or incomplete data; request erasure of your data, subject to our legal and regulatory recordkeeping obligations; withdraw consent for marketing communications at any time; and raise a grievance regarding the handling of your personal data, as set out in Section 11 below. 7. Data Retention We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to comply with our legal, accounting, tax and regulatory requirements (such as invoicing and FSSAI-related recordkeeping), after which it is securely deleted or anonymised. 8. Children's Privacy Our products and Website are intended for use by adults. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has provided us with personal information, please contact us so we can remove it. 9. Third-Party Links Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of such external sites and encourage you to review their privacy policies separately. 10. Changes to this Policy We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last updated" date. Continued use of the Website after such changes constitutes acceptance of the revised Policy. 11. Grievance Officer In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Consumer Protection (E-Commerce) Rules, 2020, the details of our Grievance Officer are provided below. You may contact the Grievance Officer with any complaint or concern regarding your personal data or this Policy; complaints will be acknowledged within 48 hours and redressed within one month, as required by law. Grievance Officer: [Name to be filled in] Designation: Grievance Officer, ReHealthMe Email: grievance@rehealthme.com Address: [Registered business address], India 12. Governing Law and Jurisdiction This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at [City], India. 13. Contact Us For any questions about this Privacy Policy or how we handle your personal data, please write to us at privacy@rehealthme.com.