Dr. Trinath's PHBL Naturals ("we", "us") runs this online store. This policy explains what personal information we collect when you browse, create an account or place an order, why we collect it, who we share it with, and the choices you have. We handle your information in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
1. What we collect
| When | What we collect |
|---|---|
| You create an account | Your name, your email address and/or mobile number, and a password. We never store your password itself, only a one-way scrambled form of it that cannot be turned back into the original. |
| You place an order | Your name, email, phone number, delivery address, any delivery notes, the items you ordered, the order total, and the payment method and status. |
| You pay online | Payments are handled by Razorpay. We receive only a payment reference and whether it succeeded. We never see or store your card number, UPI PIN, or net-banking credentials. |
| You subscribe to updates | Your email address. |
| You write to us | Your name, email, phone number (if you give it) and your message. |
| You visit the store while signed in | A session cookie that keeps you signed in, and the type of browser you used to sign in. |
We do not run advertising trackers or analytics profiling on this store.
2. Why we use it
- to process, pack, deliver and track your order, and to take payment;
- to manage your account, keep your cart, and show your order history;
- to handle returns, refunds, complaints and customer-support requests;
- to send you updates about an order you placed;
- to send our newsletter, only if you subscribed, which you can stop at any time;
- to keep the store secure and prevent fraud and abuse; and
- to meet legal, tax and accounting obligations.
3. Who we share it with
We do not sell your personal information. We share it only as needed to run the store:
- Razorpay, our payment processor, to take and refund online payments.
- Delivery and courier partners, who receive your name, phone number and delivery address so they can deliver your parcel.
- Our technology providers: Vercel hosts this website, and Supabase stores our database. They process data on our behalf and only to provide those services.
- Authorities, where we are required to by law or a valid legal request.
4. Where your data is stored
Our database is hosted on servers in Tokyo, Japan, so your information may be stored and processed outside India. We use reputable providers and restrict access, but by using the store you understand that your information is held there.
5. Cookies and third-party content
We use one cookie, called phbl_session. It is strictly necessary: it keeps you signed
in, is not readable by scripts on the page, and expires after 30 days or when you sign out. Without it, accounts
and saved carts cannot work. Your cart also uses your browser's local storage on your own device.
Our pages load fonts and icons from Google Fonts and the Font Awesome CDN. When your browser fetches those files, those providers can see your IP address and browser details, as with any website that uses them.
6. How long we keep it
We keep account details for as long as your account is open. Order and payment records are kept for as long as the law requires us to keep accounting and tax records. Newsletter addresses are kept until you unsubscribe. Support messages are kept for as long as needed to resolve your query and handle any follow-up. After that we delete or anonymise the information.
7. How we protect it
The store is served over HTTPS. Passwords are stored only in hashed form. Payment details never reach our servers. Access to our admin tools is restricted by a secret key. No online system is perfectly secure, and we cannot guarantee absolute security, but we work to protect your information and will act promptly if we learn of a breach affecting you.
8. Your rights
You can ask us to:
- tell you what personal information we hold about you;
- correct information that is wrong or incomplete (you can also edit your name, email and phone from your account);
- delete your account and personal information, subject to records we must keep by law;
- stop sending you marketing email (every newsletter can be unsubscribed from, and you can ask us directly); and
- withdraw consent you gave us, which does not affect what we did before you withdrew it.
You can also nominate someone to exercise these rights on your behalf, as the law allows. We will respond to your request within a reasonable time and in any case within the time the law sets.
9. Children
This store is intended for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed, and we will make it clear on the store if a change is significant.
11. Contact and grievances
For any question about your information, to exercise your rights, or to make a complaint, contact us. We will acknowledge a complaint within 48 hours and aim to resolve it within one month.
- Email: phblnaturals@gmail.com
- Phone: +91 89810 15679
- Address: Saratpally, Midnapore, Paschim Medinipur
- Grievance Officer: Mr. Indrajit Dhar, National Sales Manager and Grievance Officer
See also our Refund Policy and Terms & Conditions.