1Who We Are

This Privacy Policy applies to Adlay Drug Company, an Ayurvedic pharmaceutical manufacturer and retailer operating at B-8,9 Kunda Road, Industrial Area, NH 58, Meerut – 250103, Uttar Pradesh, India.

We operate the website adlaydrugs.com ("the Website") and sell Ayurvedic health and wellness products directly to consumers. When you use our website, place an order, or contact us, this policy governs how your personal information is collected, used, and protected.

For any privacy-related questions, our designated contact is reachable at adlaymrt@gmail.com or 9808171003.

2What Information We Collect

We collect information in two ways — information you give us directly, and information collected automatically when you use our website.

Information you provide directly:

Information collected automatically:

• IP address and browser type — for website security and performance monitoring
• Pages visited and time spent — to understand which content is most useful to our visitors
• Device type and operating system — to ensure the website displays correctly for you
• Referring website — to understand how visitors find us

3How We Use Your Information

We use your information only for purposes that a reasonable person would expect, given the context in which it was shared:

• To process and deliver your orders — including sending order confirmations, dispatch notifications, and delivery updates
• To respond to your queries — whether via email, phone, WhatsApp or the contact form on our website
• To send you newsletters and health content — only if you have subscribed or opted in; you can unsubscribe at any time with a single click
• To improve our website — understanding which pages and products attract the most interest helps us build a better experience
• To comply with legal obligations — including GST records, AYUSH compliance requirements, and court orders where applicable
• To detect and prevent fraud — protecting both our customers and our business from malicious activity

We do not use your information for automated profiling or decision-making that has legal or significant effects on you.

4Who We Share Your Information With

We do not sell your personal information. Full stop. We share limited information only with service partners who help us fulfil your order and run our website:

• Delivery partners — your name, address and phone number are shared with our courier/logistics partners solely to deliver your order
• Payment gateway — your payment details are processed directly by our payment partner (Razorpay / PayU) under their own security standards; we receive only a transaction confirmation, never your card details
• Website hosting — our website is hosted on servers that may process technical data (such as IP address logs) in the normal course of operation
• Government and regulatory authorities — only where required by Indian law, including the Information Technology Act 2000, GST regulations, or a valid court order

All third parties with whom we share data are contractually required to handle it securely and use it only for the specific purpose for which it was shared.

5Cookies and Website Tracking

Our website uses cookies — small text files stored on your device — to make the website function properly and to understand how visitors use it.

• Essential cookies — required for the website and shopping cart to function; cannot be disabled
• Analytics cookies — help us understand page views, traffic sources and popular content; we use this data in aggregate, not to track individuals
• Preference cookies — remember your language and display preferences so you don't have to reset them each visit

You can control or disable non-essential cookies through your browser settings at any time. Note that disabling cookies may affect some website features, including the shopping cart.

6How We Protect Your Information

We take data security seriously. The measures we have in place include:

• SSL encryption on all pages of the website — your data is encrypted in transit
• Secure, access-controlled servers with regular security updates
• Payment processing entirely handled by PCI-DSS compliant gateway partners — we never see or store your card details
• Limited internal access — only staff members who genuinely need access to customer data for their role are permitted to see it
• Regular review of our data practices as our business grows

No digital system is 100% invulnerable. In the unlikely event of a data breach that affects your personal information, we will notify you promptly and clearly explain the nature of the breach and the steps we are taking.

7Your Rights — What You Can Ask Us to Do

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and existing Indian data protection laws, you have the following rights with respect to your personal information:

• Right to access — ask us what personal data we hold about you and receive a copy of it
• Right to correct — ask us to correct any inaccurate or incomplete information we hold about you
• Right to erase — ask us to delete your personal information, subject to any legal obligation we may have to retain it (such as GST transaction records)
• Right to withdraw consent — if you have subscribed to our newsletter or marketing communications, you may unsubscribe at any time by clicking the link in any email or by contacting us directly
• Right to grievance redressal — if you believe your data has been mishandled, you may raise a formal complaint with us and we commit to responding within 30 days

To exercise any of these rights, write to us at adlaymrt@gmail.com with the subject line "Privacy Request." We will respond within 30 days.

8How Long We Keep Your Information

• Order records — retained for 7 years as required by Indian accounting and GST regulations
• Customer account data — retained as long as your account is active; you may request deletion of your account at any time
• Newsletter and marketing preferences — retained until you unsubscribe or request deletion
• Contact form enquiries — retained for 12 months and then deleted unless ongoing correspondence requires otherwise
• Website analytics data — retained in aggregate, anonymised form; individual session data is not retained beyond 26 months

9Children's Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under the age of 18. If you are a parent or guardian and believe your child has provided personal information on our website, please contact us immediately at adlaymrt@gmail.com and we will delete it promptly.

10Links to Other Websites

Our website may contain links to external websites — for example, links to our social media profiles or partner organisations. Once you leave adlaydrugs.com, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any external websites you visit. We are not responsible for the privacy practices of third-party sites.

11Changes to This Policy

We may update this Privacy Policy from time to time — as our business grows, as we add new features to the website, or as laws change. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered customers by email.

We encourage you to review this page occasionally. Continued use of our website after a change is posted constitutes your acceptance of the updated policy.