How your information is handled.

Information we collect

We may collect information that you voluntarily provide, including:

• Name
• Email address
• Phone number
• Shipping and billing address
• Prescription-related information when required by applicable law
• Customer support communications

We may also collect limited technical information such as device type, browser type, IP address, and website usage analytics.

How we use your information

We use information to process orders and deliveries, verify prescription requirements where applicable, respond to customer inquiries, improve our products and services, maintain website security, and comply with legal and regulatory requirements.

Medical information

Any health-related information submitted through our website is handled with appropriate care and used only for order processing, consultation support, regulatory compliance, or customer service purposes. Kushiva does not sell personal medical information to third parties.

Sharing of information

We do not sell personal information. Information may be shared only with:

• Licensed healthcare professionals involved in consultations
• Logistics and delivery partners
• Payment processing providers
• Regulatory authorities when legally required

Consent and how to withdraw it

We collect and process personal information on the basis of your consent, given when you place an order, submit a form, or contact us for a stated purpose. You may withdraw your consent at any time by writing to hello@kushiva.com — withdrawing consent is as simple as giving it. After withdrawal, we will stop the related processing unless we are required by law to retain specific records (for example, tax and invoicing records).

Data retention

We keep personal information only for as long as it is needed for the purpose it was collected — such as processing and delivering your order, supporting doctor review where applicable, and meeting legal, tax, and regulatory record-keeping obligations. When the purpose has been served and no legal requirement applies, the information is erased. Prescription and consultation records are retained only as long as required for order support and applicable regulatory requirements.

Data security

We implement reasonable technical and organizational measures to protect personal information from unauthorized access, misuse, or disclosure. However, no internet-based system can guarantee absolute security.

Data breach notification

If a personal data breach occurs that affects your information, we will inform you without undue delay in clear and plain language — including the nature of the breach, its likely consequences for you, the measures we have taken, and the steps you can take to protect yourself — and we will notify the Data Protection Board of India as required under the DPDP Act and its Rules.

Cookies and analytics

Our website may use cookies and analytics tools to improve user experience, understand website performance, and maintain security. Users may disable cookies through their browser settings.

Your rights under the DPDP Act

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a summary of the personal information we hold about you and how it is processed.
• Correction and completion — have inaccurate or incomplete information corrected or updated.
• Erasure — request deletion of your personal information where it is no longer needed and no legal retention requirement applies.
• Withdraw consent — at any time, as easily as it was given.
• Grievance redressal — raise a complaint with our Grievance Officer through the process described on our Grievance Redressal page, and escalate to the Data Protection Board of India if unresolved.
• Nomination — nominate another person to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these rights, write to hello@kushiva.com from the email address linked to your order or account. We respond within the timelines published on our Grievance Redressal page.

Children's privacy

Kushiva products and services are intended only for adults. We do not knowingly collect personal information from individuals under 18 years of age.

Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external websites.

Changes to this policy

We may update this Privacy Policy periodically. Updates will be posted on this page with the revised effective date.

Contact us

For privacy-related questions, please contact Kushiva at hello@kushiva.com, www.kushiva.com, or on X: @InfoKushiva.

Rooted in Nature. Guided by Science. Driven by Responsibility.