Privacy policy

Welloura Nutrition ("Welloura", "we", "us" or "our") operates this website and online store, including all related information, content, features, tools, products and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit or use the Services, make a purchase, or otherwise communicate with us. We are a data fiduciary under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and a body corporate under the Information Technology Act, 2000 and the rules made under it. Where this Privacy Policy conflicts with our Terms of Service, this Privacy Policy governs the collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how we handle your personal data as described here.

Personal Data We Collect or Process

"Personal data" means data about an individual who is identifiable by or in relation to that data. It does not include information collected anonymously or de-identified so that it can no longer be linked to you. Depending on how you interact with the Services, we may collect or process:

  • Contact details including your name, billing address, shipping address, phone number and email address.

  • Payment information including payment method, transaction details, payment confirmation and the last four digits of your card. We do not store complete card numbers, CVV or UPI credentials on our systems — these are handled directly by our payment gateway partners.

  • Account information including your username, password, saved addresses, preferences and settings.

  • Transaction information including the items you view, add to cart, add to a wishlist, purchase or cancel, and your order history.

  • Communications with us including anything you write to us by email, WhatsApp, phone or through a contact form, and any product review or feedback you submit.

  • Device information including your IP address, device type, browser, operating system, network connection and unique identifiers.

  • Usage information including how you navigate and interact with the Services, pages visited, and referring source.

We do not collect health records, biometric data, genetic data or government identity numbers through the Services, and we ask that you do not send us medical information or reports. Welloura products are foods for particular nutritional uses, not medicines, and we are not able to provide medical advice.

Where We Collect Personal Data From

  • Directly from you — when you create an account, place an order, subscribe to updates, contact us, or otherwise provide your details.

  • Automatically — through cookies and similar technologies when you use the website.

  • From our service providers — such as Shopify, payment gateways, courier partners and analytics providers who process data on our behalf.

  • From partners and other third parties — where you have consented to their sharing information with us, including marketplaces and advertising platforms.

How We Use Your Personal Data

  • To provide and improve the Services — to process and fulfil your orders, take payment, arrange delivery, manage your account, remember your preferences, respond to queries about damaged or incorrect items, and improve the website.

  • For marketing and advertising — to send you offers, product updates and promotional messages by email, SMS or WhatsApp where you have consented, and to show you advertisements on other platforms. You may withdraw this consent at any time.

  • For security and fraud prevention — to authenticate your account, provide a secure checkout, and detect or investigate fraudulent, unsafe or unlawful activity. You are responsible for keeping your account credentials confidential and should not share your password with anyone.

  • To communicate with you — to provide customer support and maintain our relationship with you.

  • For legal and regulatory reasons — to meet obligations under the Food Safety and Standards Act, 2006, the Legal Metrology Act, 2009, the Consumer Protection Act, 2019, the Goods and Services Tax and income tax legislation, to respond to lawful requests from courts or government authorities, and to establish, exercise or defend legal claims.

Where we rely on your consent, you may withdraw it at any time by contacting us using the details below. Withdrawing consent does not affect processing carried out before the withdrawal, and we may continue to keep records we are legally required to retain.

How We Disclose Personal Data

We do not sell your personal data. We disclose it only in the following circumstances:

  • To Shopify, vendors and processors who provide services on our behalf, including website hosting, payment processing, courier and logistics, cloud storage, email and messaging, analytics and customer support.

  • To business and marketing partners to deliver advertising and measure its effectiveness. These partners use your information in accordance with their own privacy notices. You may ask us not to share your information for targeted advertising.

  • Where you direct or consent to it, for example when you ask us to ship to a third party or use a social media or login integration.

  • In connection with a business transaction, such as a merger, acquisition or transfer of business assets.

  • To comply with law or valid legal process, to enforce our terms and policies, or to protect the rights, safety and property of Welloura, our customers or the public.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services in order to provide and improve them. Information you submit through the Services is transmitted to and shared with Shopify and with third parties that may be located in countries other than India.

We also use certain Shopify enhanced features that draw on data about your interactions with our store, other merchants and Shopify itself. For those features Shopify is responsible for the processing of your personal data, including for responding to requests you make about it. To learn more, see the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/consumer-privacy-policy and the Shopify Privacy Portal at https://privacy.shopify.com/en.

Cookies and Similar Technologies

We use cookies, pixels and similar technologies to keep the website working, remember your cart and preferences, understand how the site is used, and measure and personalise advertising. This includes analytics and advertising tools operated by third parties.

Cookies that are strictly necessary for the site to function are always active. For all other cookies, we ask for your consent when you first visit the website, and you can change or withdraw that choice at any time through the cookie settings link on the site or through your browser settings. Blocking some cookies may affect how parts of the website work.

Third-Party Websites and Links

The services contain links to websites and platforms operated by others, including Amazon India, Blinkit and our social media pages. We do not control those sites and are not responsible for their content, privacy practices or security. Please review their own privacy policies before providing information to them. Information you post in public or semi-public places, including social media, may be visible to others. A link is not an endorsement unless we say so.

Children’s Data

The services are intended for use by adults aged 18 and over. Orders for children’s products, such as BLOOM Kids Multivitamin Wellness Bites, are placed by a parent or guardian, and the account and order details we collect relate to that adult. We do not knowingly collect personal data from children, and we do not ask for a child’s name, age or health details at any point in the ordering process.

If you believe a child has provided us with personal data, please contact us using the details below and we will delete it.

Security of Your Information

We apply reasonable security safeguards to protect personal data, including encryption of the website in transit, access controls, and the use of established processors such as Shopify and regulated payment gateways. No security measure is perfect, however, and we cannot guarantee absolute security. Please do not send sensitive or confidential information to us over unsecured channels.

If a personal data breach occurs, we will notify affected individuals and the Data Protection Board of India in the manner and within the timelines required under the Digital Personal Data Protection Rules, 2025.

How Long We Keep Your Information

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires. In broad terms:

Type of information

How long do we keep it

Order, invoice, GST and payment records

Eight years from the end of the financial year in which the transaction took place, to meet tax and statutory record-keeping obligations

Account details

While your account is active, and for twelve months after your last activity or your deletion request, whichever is earlier

Marketing contact details

Until you unsubscribe or withdraw consent, after which we keep only the minimum needed to honour your opt-out

Customer support and complaint correspondence

Three years from the date the matter is closed

Product reviews and other content you publish

For as long as it remains published, unless you ask us to remove it

Website analytics and cookie data

Up to fourteen months from collection

Where a longer period is required by law, or where information is needed for an ongoing dispute or investigation, we retain it for that period only.

Your Rights and Choices

Subject to applicable law, you have the following rights in relation to your personal data:

  • Right to access — to ask what personal data we hold about you and how it is processed.

  • Right to correction — to have inaccurate or incomplete data corrected or updated.

  • Right to erasure — to ask us to delete personal data that is no longer needed for the purpose it was collected for, except where we are required to keep it.

  • Right to a copy — to receive a copy of your data and, in certain cases, ask us to transfer it.

  • Right to nominate — to nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

  • Right to grievance redressal — to have your complaint about our handling of your data addressed by us before you approach the Data Protection Board of India.

  • Managing communication preferences — you may unsubscribe from marketing at any time using the link in our emails, replying STOP to a message, or writing to us. We will still send you transactional messages about your orders and account.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the timelines required by law. We will not treat you unfairly for exercising your rights.

For data processed by Shopify, you can also use the Shopify Privacy Portal at https://privacy.shopify.com/en.

Grievance Redressal

If you have a complaint about how we handle your personal data or about any aspect of your order, please contact our Grievance Officer:

Grievance Officer: Welloura Nutrition

Email: care@welloura.in

Phone: +91 97270 05533

Address: C/302, The Palace Green Life, B/h Safalya Parklane, Nr. Vicenza Exotica, New Alkapuri, Gotri, Vadodara, Gujarat – 390021, India

We will acknowledge your complaint within 48 hours of receiving it and resolve it within one month, as required under the Consumer Protection (E-Commerce) Rules, 2020. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India or to the appropriate consumer forum.

Transfers Outside India

Our website is hosted by Shopify and some of our service providers operate outside India. This means your personal data may be stored or processed in other countries. Where that happens, we take reasonable steps to ensure it continues to be protected to a standard consistent with this Privacy Policy and Indian law, and we transfer data only to countries not restricted by the Central Government under Section 16 of the Digital Personal Data Protection Act, 2023.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised version on this page and update the "Last updated" date. Where the change is significant, we will give you notice as required by law.