Privacy Policy

Effective date: 16 July 2026
Last updated: 16 July 2026

This Privacy Policy explains how Indo Soul Harmony (“we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when you visit https://indosoulharmony.com, purchase products (within India or internationally), enquire about our offerings, or otherwise interact with us. We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (India), applicable Indian consumer law, and, where relevant, the EU/UK GDPR for visitors and customers located in those regions.

1. Who is responsible for your data

The data fiduciary / controller for this website and related sales is:

• Legal name of business: Indo Soul Harmony
• Ownership: Sole proprietorship of Tanay Kumar Tapan Kumar Nandi
• Address: Flat B24, Building C21, Navare Nagar, B Cabin Road, Ambarnath East, Maharashtra, Pin Code: 421501, India
• Grievance / privacy contact: Tanay Kumar Tapan Kumar Nandi
• Contact: [email protected] | +917319478732

For privacy requests, please email [email protected] with the subject line “Privacy Request”.

2. Personal data we collect

Depending on how you use our site and services, we may collect:

2.1 Identity and contact data

• Name, email address, phone number, billing and shipping address (including international addresses where applicable)
• Company or organisation name (if provided)
• Messages and attachments you send via contact forms, WhatsApp, email, or social media

2.2 Order and transaction data

• Products purchased, order notes, invoices, refunds, and payment status
• Destination country and shipping preferences for domestic and international orders
• Payment confirmation references from our payment providers (we do not store full card numbers on our servers)

2.3 Account data

• Login credentials for a My Account area (if you create an account), order history, and preferences

2.4 Technical and usage data

• IP address, browser type/version, device type, operating system, referring pages, pages viewed, dates/times of visits
• Approximate location derived from IP address

2.5 Cookie and similar technologies

• Essential cookies required for cart, checkout, login, security, and consent preferences
• Optional analytics/marketing cookies, only where you have consented via our cookie banner

3. How we collect data

• Directly from you (checkout, account registration, contact forms, email, phone)
• Automatically through cookies, logs, and similar technologies when you browse the site
• From payment, shipping, customs brokerage (where used), and IT service providers acting on our instructions

4. Why we use your data (purposes and legal bases)

We use personal data to:

• Fulfil contracts: process orders in India and internationally, arrange shipping, provide invoices, handle returns/refunds, and respond to service requests
• Communicate: answer enquiries, send order updates, and provide customer support
• Operate and secure the website: maintain security, prevent fraud/abuse, troubleshoot, and improve performance
• Comply with law: meet tax, accounting, consumer-protection, customs-related, and other legal obligations
• Marketing (optional): send newsletters or promotional updates only where permitted (for example, with your consent, or as otherwise allowed by law). You can unsubscribe at any time
• Analytics (optional): understand how the site is used so we can improve it, where cookie consent has been given

Where GDPR applies, our legal bases may include contract performance, legitimate interests (site security/improvement, limited direct marketing to existing customers where allowed), consent, and legal obligation.

5. Payments

Online payments are processed by third-party payment gateways (such as Razorpay and/or other processors configured on our store). These providers receive payment details necessary to complete the transaction under their own privacy policies and security standards. Indo Soul Harmony receives confirmation of payment success/failure and limited transaction metadata, not your full card PAN/CVV.

6. Who we share data with

We do not sell your personal data. We may share data with:

• Payment processors and banks
• Shipping/courier partners and logistics providers (including those handling international shipments)
• Website hosting, email delivery, analytics (if enabled), security, and e-commerce platform providers
• Professional advisers (accountants, lawyers) where needed
• Authorities when required by law or to protect our legal rights

Service providers are expected to process personal data only on our instructions and with appropriate safeguards.

7. International transfers

Our primary operations are in India. Because we fulfil international orders and use global IT/service providers, some personal data may be processed in other countries. Where required, we take reasonable steps to ensure appropriate protection for such transfers.

8. How long we keep data

• Orders and invoices: generally retained for the period required under Indian tax/accounting laws (often up to 8 years) and for dispute resolution
• Enquiries: typically retained as long as needed to complete your request and for a reasonable follow-up period
• Accounts: while your account remains active and for a reasonable period afterwards
• Cookie/consent logs: for the duration of the consent record and as needed to demonstrate compliance

When data is no longer required, we delete or anonymise it where feasible.

9. Cookies and consent

We use a cookie consent tool so you can accept, reject, or customise non-essential cookies. Essential cookies cannot be switched off because they are required for core site functions (for example, cart and security). You can change cookie preferences later using the “Consent Preferences” / cookie settings control on the site.

10. Your rights

Under Indian law (DPDP Act, 2023), you may have rights to access your personal data, correct it, erase it (subject to legal retention needs), withdraw consent, and grievance redressal.

If you are in the EEA/UK, you may also have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, and the right to lodge a complaint with your local supervisory authority.

To exercise rights, email [email protected]. We may need to verify your identity before fulfilling a request.

11. Children’s privacy

Our website and shop are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Security

We use reasonable technical and organisational measures to protect personal data (including HTTPS and access controls). No method of transmission or storage is completely secure; please use strong passwords for any account and contact us immediately if you suspect unauthorised access.

13. Third-party links

Our site may link to third-party websites or social media pages. We are not responsible for their privacy practices. Please review their policies separately.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after updates constitutes awareness of the revised policy, except where consent is legally required for a new use.

15. Grievance / contact

For privacy questions, complaints, or data requests, please contact:

• Grievance contact: Tanay Kumar Tapan Kumar Nandi
• Indo Soul Harmony (sole proprietorship)
• Flat B24, Building C21, Navare Nagar, B Cabin Road, Ambarnath East, Maharashtra, Pin Code: 421501, India
• Email: [email protected]
• Phone: +917319478732