Privacy Policy

Welcome to Sahaj Elements (sahajelements.com). This Privacy Policy explains how Sahaj Elements collects, uses, shares, and protects your digital personal data when you visit our website, register an account, or purchase our cosmetic creams and skincare products.

1. Introduction and Scope

This Privacy Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the DPDP Rules 2025, and the Information Technology Act, 2000. It outlines your rights as a Data Principal under Indian law.

2. Identity of the Data Fiduciary

Company Name: Sahaj Elements
Registered Address: 15 Mangalnagar, Vidya Dairy Road, Anand, Gujarat 388001
Contact Email: [email protected]

3. Types of Personal Data We Collect

We collect personal data only when necessary and with your explicit consent. This includes identity and contact data (name, email, phone, address), order and transaction data, customer support data, and automated usage data such as IP address and browsing patterns collected via cookies subject to your consent. We do not store full card numbers, CVVs, or UPI PINs on our servers.

4. Purpose and Legal Basis of Processing

Contact and shipping data is processed to deliver orders and manage returns (Consent and Contract Performance). Payment data is processed for secure checkout (Contract Performance). Browsing and cookie data is used to improve user experience (Explicit Consent). Marketing communications are sent only with explicit opt-in consent. Transaction history is retained for legal and tax obligations.

5. Notice and Consent Framework

We do not use pre-ticked checkboxes for marketing or non-essential cookies. Consent must be an affirmative, unambiguous action. Providing our core service is not conditional upon consent for unrelated purposes. You can withdraw consent at any time via the unsubscribe link in our emails or by contacting us.

6. Data Sharing and Third-Party Disclosures

We do not sell your personal data. We only share data with vetted third parties under strict Data Processing Agreements: logistics partners (for delivery), payment gateways (for transactions), cloud infrastructure providers, and analytics tools (Google Analytics or Meta Pixel, limited to anonymized data with your explicit consent). All data processing occurs within India.

7. Data Retention Policy

Customer account data is retained while active; inactive accounts are anonymized or deleted after 3 years. Marketing data is deleted upon withdrawal of consent or after 12 months of inactivity. Financial and tax records are retained for 7 years as required by Indian law. Browsing data is purged after 12 to 14 months.

8. Rights of the Data Principal

Under the DPDP Act, 2023, you have the right to access your data, correct inaccurate information, request erasure when data is no longer needed, nominate another individual to exercise your rights, and file a grievance. To exercise any right, email [email protected]. We will respond within 30 days.

9. Security Safeguards

All data transmitted between your browser and our servers is encrypted via SSL/TLS (HTTPS). We enforce strict role-based access controls secured by Multi-Factor Authentication. In the event of a data breach, we will notify affected users and the Data Protection Board of India within 72 hours as mandated by the DPDPA.

10. Children's Privacy

Sahaj Elements does not knowingly collect data from individuals under the age of 18. If we discover that a minor has provided personal data without verifiable parental consent, we will delete that information immediately.

11. Grievance Redressal Mechanism

In compliance with the DPDPA, we have appointed a dedicated officer to address your privacy concerns.