Privacy

This describes what WellVia Wellness Pvt. Ltd. collects when you use this website, why, and what you can do about it. It describes what the system actually does rather than what is customary, and it is written to be checked.

If anything here does not match your experience, tell us — that is a bug in this page or in the site, and both are worth fixing.

What we collect

When you place an order

Your name, email address and phone number, and the delivery address you give us. A GSTIN if you provide one, because it has to appear on the invoice.

When you create an account

Your name and email address, and a password — stored only as an argon2id hash, which cannot be reversed into the password you chose. If you sign in with an emailed code instead, we store an identifier from the authentication provider rather than a password.

As you browse

A record of pages and products viewed, searches made, and items added to or removed from the basket. These are tied to a one-way hash of your session, not to your name, unless you are signed in.

What we never hold

Card numbers, UPI identifiers and bank details. Payments are handled by the payment provider on their own systems; the card you pay with never reaches ours.

Marketing, and what counts as consent

We do not add you to any mailing list because you bought something, created an account, or signed in. Marketing consent is separate, explicit, and recorded with the date you gave it and the screen you gave it on.

Email and WhatsApp are treated as different channels. Turning one on does not turn the other on.

You can see and change both at any time under Account, and the page shows you the date you turned each one on. When you withdraw consent we keep the record that you once gave it, and the date you withdrew — not to keep sending you things, but so that both of us can answer the question later.

Order confirmations, dispatch notes, invoices and replies to your own questions are not marketing and are not affected by those settings. We cannot sell you something and then decline to tell you where it is.

How long we keep it

Browsing and marketing events are deleted automatically after about thirteen months. That is long enough to compare one year with the last and no longer.

Orders, invoices, credit notes and accounting records are kept for as long as Indian tax law requires them to be kept. These are statutory records and we cannot delete them on request — including when you close your account.

Your consent record is kept and is not swept, because it is the evidence that we were allowed to contact you.

Who else sees it

The payment provider, to take payment and to confirm it.

The courier, to deliver to you — which means your name, address and phone number.

An authentication provider, if you choose to sign in with an emailed code rather than a password.

We do not sell your data, and we do not pass your details to anyone else to market to you.

Closing your account

You can ask us to close your account. When we do, you can no longer sign in and we stop sending you anything.

Your orders and invoices remain, because we are required to keep them. Ask us and we will tell you exactly what is retained and why.

Last reviewed: 29 September 2026