Privacy policy.

This privacy policy applies to Adivaa Smart Powering Solutions Pvt. Ltd. ("Adivaa", "we", "us", "our"), a company registered in India with its registered office in Indirapuram, Ghaziabad, Uttar Pradesh 201014, India.

We operate the website www.adivaasmart.com and sell hydrogen water bottles under the brand name "Adivaa Smart", including HydroSipr, HydroBeast, HydroMax and HydroUltra.

We collect personal data in three categories:

Information you provide directly

• Name, phone number, email, and shipping/billing addresses (when you place an order or contact us)
• Payment information (processed by our payment partner; we do not store your full card details)
• Messages, queries, reviews and other communications you send us
• Account information if you create an account on our website

Information we collect automatically

• Device, browser and operating system info
• IP address and approximate geolocation
• Pages visited, time spent, and links clicked on our website
• Referrer URL (the site you came from)

Information from third parties

• Order data from courier partners (delivery status, RTO)
• Payment confirmation from Razorpay or other payment gateways
• Marketing data from Meta Ads, Google Ads (where applicable, anonymised)

We use your personal data for the following purposes only:

• Order fulfillment: to process, ship and confirm your orders
• Customer support: to respond to your queries via WhatsApp, email or phone
• Product improvement: to understand which features and bottles people use most
• Marketing: to send you relevant offers, product launches or content, only if you opt in. You can unsubscribe at any time.
• Legal compliance: to comply with Indian tax laws (GST), accounting requirements, regulatory orders, and law enforcement requests where legally required
• Security: to protect our website, prevent fraud and detect malicious activity

We share your data only with these parties, and only for these purposes:

• Courier partners (Delhivery, Bluedart, Ekart, India Post): name, phone and address, to deliver your order
• Payment processors (Razorpay, etc.): the minimum payment data required to process your transaction
• Email/SMS/WhatsApp providers: the contact information needed to send you order confirmations and updates
• Analytics partners (Google Analytics, Meta Pixel): anonymised website usage data only
• Legal authorities: only when legally compelled (court order, tax authority, regulatory body)

We use reasonable security measures to protect your data:

• HTTPS/SSL encryption for all data in transit
• Encrypted storage for sensitive personal data
• Restricted access: only employees who need to handle your order can see your data
• Regular security audits of our website and infrastructure

That said, no security system is 100% impenetrable. If we become aware of a data breach affecting your personal data, we will notify you within 72 hours, as required by the DPDP Act 2023.

Our website uses cookies and similar tracking technologies to improve your browsing experience.

Types of cookies we use:

• Essential cookies: required for site functionality (cart, checkout, login). Cannot be disabled.
• Analytics cookies: help us understand how visitors use the site (Google Analytics). You can opt out.
• Marketing cookies: used by Meta Pixel, Google Ads, etc. to show you relevant ads on other platforms. You can opt out.

You can manage cookie preferences through our cookie banner (if shown) or your browser settings. Disabling certain cookies may impact site functionality.

As an Indian data principal, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: ask us to correct any inaccurate data
• Right to erasure: ask us to delete your personal data (subject to legal retention requirements like GST records)
• Right to data portability: get a copy of your data in a portable format
• Right to grievance redressal: file a complaint with our Grievance Officer (see section 11)
• Right to nominate: nominate another individual to exercise your rights in case of incapacity or death
• Right to withdraw consent: opt out of marketing communications at any time

To exercise any of these rights, email us at contact@adivaasmart.com with the subject "DPDP Request" and we will respond within 30 days.

We retain your personal data only as long as necessary:

Our products are intended for adults. We do not knowingly collect personal data from children under 18. If you are a parent and believe your child has provided us personal data, please contact us and we will delete it.

We may update this privacy policy from time to time. The "Last updated" date at the top reflects the most recent change. Significant changes will be communicated via email to registered users or a notification on the website.

In compliance with the DPDP Act 2023 and the IT Act 2000, our Grievance Officer details are:

For any privacy-related questions or concerns. Need to exercise a data right? Email us with "DPDP Request" in the subject and we respond within 30 days.