Privacy Policy

Depending on how you interact with us, we may collect the following information:

Contact and identification information, such as your name, email address, mobile number, billing address and shipping address.

Order and transaction information, including products purchased, order value, order history, returns, cancellations and delivery information.

Payment information. Payments may be processed by third-party payment service providers such as Razorpay or other payment partners available on our website. We generally do not directly store your complete card, UPI or banking credentials.

Account information, if you create an account with us, including your account details and preferences.

Communications, including messages or information you provide when contacting us through email, telephone, WhatsApp, social media or customer-support channels.

Website and device information, such as your IP address, browser type, device type, operating system, cookies and information about how you interact with our website.

Marketing information, including your communication preferences and your interactions with our advertisements, emails, WhatsApp messages or other marketing communications.

We may collect personal information:

• directly from you when you place an order, create an account, contact us, subscribe to communications or otherwise provide information to us;
• automatically when you use our website, including through cookies and similar technologies;
• from service providers that help us operate our business;
• from advertising, analytics and social-media platforms where permitted; and
• from logistics, payment or other partners involved in completing your transaction.

We may use your personal information to:

Process and fulfil orders, including confirming orders, processing payments, arranging shipping, tracking deliveries and handling cancellations, replacements and refunds.

Provide customer support, including responding to queries or communicating with you regarding your order.

Communicate transactional information, such as order confirmations, payment notifications, shipping updates and delivery information through email, SMS, WhatsApp or other appropriate channels.

Improve our products and website, including understanding how customers use our website and identifying problems with our services.

Prevent fraud and maintain security, including detecting suspicious transactions, misuse or other potentially unlawful activity.

Comply with legal requirements, including accounting, taxation, regulatory and law-enforcement obligations.

Send marketing communications, where permitted, including information about products, offers, launches or other goodstack updates.

Where your consent is required for a particular activity, you may withdraw that consent in accordance with applicable law.

If you provide us with your mobile number or communicate with goodstack through WhatsApp, we may use that number to provide customer support and send communications relating to your orders.

Where permitted and where you have opted in, we may also send promotional or marketing communications through WhatsApp, SMS, email or similar channels.

You may opt out of promotional communications at any time by using the unsubscribe or opt-out mechanism provided in the communication, or by contacting us.

Opting out of marketing communications will not prevent us from sending essential transactional communications relating to an order you have placed.

We do not sell your personal information.

We may share information where reasonably necessary with service providers involved in operating our business, including:

Ecommerce and technology providers

Our store is hosted by Shopify, which processes information necessary to provide and operate our ecommerce services.

Payment providers

Payment information may be processed by Razorpay and/or other payment service providers made available through our website.

Shipping and logistics providers

We may provide your name, address, telephone number and order information to Shiprocket, courier companies, delivery partners and other logistics providers where required to deliver your order or manage returns.

Communication providers

We may use WhatsApp, Meta and third-party WhatsApp Business service providers to facilitate customer support, transactional communications and, where permitted, marketing communications.

Marketing and analytics providers

We may use advertising, analytics or measurement services such as Meta, Google, Shopify and similar platforms to understand website performance, measure advertising and improve our marketing.

Professional and regulatory purposes

We may disclose information to accountants, legal advisers, auditors, government authorities or other parties where reasonably necessary to comply with the law, establish or defend legal rights, or complete a corporate transaction.

Third-party providers process information in accordance with their own terms and privacy practices and, where applicable, our arrangements with them.

Our website and our service providers may use cookies and similar technologies to:

keep the website functioning correctly;
remember preferences and cart information;
understand website traffic and usage;
measure the performance of our advertising; and
provide more relevant advertising where permitted.

Your browser may allow you to block or delete cookies. Disabling certain cookies may affect some website functionality.

Where applicable, you may also be provided with cookie or advertising preference controls through our website.

We may use information about your interactions with our website and products to understand our customers and measure or improve our advertising.

Subject to applicable law and your communication preferences, we may contact you about goodstack products, launches, offers, educational content and other relevant updates.

You can withdraw your consent to promotional communications at any time. Withdrawal will not affect communications that are necessary for an existing transaction or other lawful purposes.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

completing and supporting orders;
maintaining transaction and accounting records;
meeting tax, regulatory and legal requirements;
resolving disputes;
preventing fraud; and
enforcing our agreements.

Different categories of information may therefore be retained for different periods.

When information is no longer required, we may delete, anonymise or otherwise dispose of it in accordance with applicable law.

We use reasonable administrative, technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

If you believe that information you have provided to us has been compromised, please contact us using the details below.

Subject to applicable Indian law, you may have rights concerning your personal information, including rights relating to:

• obtaining information about personal data processed about you;
• correcting inaccurate or incomplete information;
• requesting deletion or erasure where applicable;
• withdrawing consent where processing is based on consent;
• raising a grievance regarding our handling of your personal information; and
• nominating another individual to exercise certain rights in circumstances provided by applicable law.

Some rights may be subject to legal exceptions or may come into force according to the implementation timetable of applicable data-protection legislation.

To make a privacy request, contact us using the details set out below.

The Digital Personal Data Protection Act provides, among other things, for rights concerning access to information, correction and erasure, grievance redressal and nomination once the relevant provisions become effective.

Our website and products are not intended to be purchased directly by children.

We do not knowingly seek to collect personal information from children for marketing purposes.

Where applicable law requires parental or guardian consent before processing a child's personal information, we will process such information only in accordance with those requirements.

If you believe a child has provided personal information to us improperly, please contact us.

Some of our technology and service providers may store or process information on servers located outside India.

Where personal information is transferred or processed outside India, we will do so subject to applicable Indian law and any restrictions or requirements that may apply to such transfers.

I prefer this wording over the current policy's lengthy dedicated EEA/UK section, which currently talks specifically about European Commission Standard Contractual Clauses even though your business is primarily India-facing.

Our website may contain links to websites, applications or platforms operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites. You should review the relevant third party's privacy policy before providing information to them.

We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers, legal requirements or privacy practices.

When we make changes, we will update the “Last updated” date displayed at the beginning of this policy.

Material changes may also be communicated through other appropriate means where required.

Should you have any questions about our privacy practices, this Privacy Policy, or if you would like to exercise any of your privacy rights, please contact us at:

• Name: Core Theory Wellness Private Limited (Brand: goodstack)
• Email: support@trygoodstack.com
• Phone: +91 9818877545
• Address: Core Theory Wellness Private Limited, GH-1, 3A, Gurgaon One, Palam Vihar Extension, Gurgaon One Apartments Road, Gurugram, Haryana 122015, India.

Grievance Officer: For specific legal grievances or data protection concerns under Indian law, please direct your communication to our designated Grievance Officer using the contact details provided above. Dhawal Sharma, Director, Core Theory Wellness Private Limited, is our appointed Grievance Officer under the Information Technology Act, 2000 and rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, and can be reached at the email and phone number listed above. We will acknowledge your grievance within 48 hours of receipt and endeavour to redress it within one month from the date of receipt.