Privacy Policy.

1. Who We Are

This privacy policy applies to Adivaa Smart Powering Solutions Pvt. Ltd. ("Adivaa", "we", "us", "our"), a company registered in India with its registered office in Adivaa Smart Powering Solutions Pvt. Ltd., Indirapuram, Ghaziabad, Uttar Pradesh 201014, India.

We operate the website www.adivaasmart.com and sell hydrogen water bottles under the brand name "Adivaa Smart" — including HydroSipr, HydroBeast, HydroMax, and HydroUltra.

2. What We Collect

We collect personal data in three categories:

Information you provide directly

• Name, phone number, email, and shipping/billing addresses (when you place an order or contact us)
• Payment information (processed by our payment partner — we do not store your full card details)
• Messages, queries, reviews, and other communications you send us
• Account information if you create an account on our website

Information we collect automatically

• Device, browser, and operating system info
• IP address and approximate geolocation
• Pages visited, time spent, and links clicked on our website
• Referrer URL (the site you came from)

Information from third parties

• Order data from courier partners (delivery status, RTO)
• Payment confirmation from Razorpay or other payment gateways
• Marketing data from Meta Ads, Google Ads (where applicable, anonymised)

3. How We Use Your Data

We use your personal data for the following purposes only:

• Order fulfillment: To process, ship, and confirm your orders
• Customer support: To respond to your queries via WhatsApp, email, or phone
• Product improvement: To understand which features and bottles people use most
• Marketing: To send you relevant offers, product launches, or content — only if you opt in. You can unsubscribe at any time.
• Legal compliance: To comply with Indian tax laws (GST), accounting requirements, regulatory orders, and law enforcement requests where legally required
• Security: To protect our website, prevent fraud, and detect malicious activity

4. Who We Share Your Data With

We share your data only with these parties, and only for these purposes:

• Courier partners (Delhivery, Bluedart, Ekart, India Post): name, phone, address — to deliver your order
• Payment processors (Razorpay, etc.): the minimum payment data required to process your transaction
• Email/SMS/WhatsApp providers: the contact information needed to send you order confirmations and updates
• Analytics partners (Google Analytics, Meta Pixel): anonymised website usage data only
• Legal authorities: only when legally compelled (court order, tax authority, regulatory body)

We do not sell your data. We do not rent or trade your data. We do not share your data with third-party advertisers for purposes unrelated to delivering and supporting your order.

5. Data Security

We use reasonable security measures to protect your data:

• HTTPS/SSL encryption for all data in transit
• Encrypted storage for sensitive personal data
• Restricted access — only employees who need to handle your order can see your data
• Regular security audits of our website and infrastructure

That said, no security system is 100% impenetrable. If we become aware of a data breach affecting your personal data, we will notify you within 72 hours, as required by the DPDP Act 2023.

6. Cookies & Tracking

Our website uses cookies and similar tracking technologies to improve your browsing experience.

Types of cookies we use:

• Essential cookies: Required for site functionality (cart, checkout, login). Cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site (Google Analytics). You can opt out.
• Marketing cookies: Used by Meta Pixel, Google Ads, etc. to show you relevant ads on other platforms. You can opt out.

You can manage cookie preferences through our cookie banner (if shown) or your browser settings. Disabling certain cookies may impact site functionality.

7. Your Rights Under DPDP Act 2023 Compliant

As an Indian data principal, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Ask us to correct any inaccurate data
• Right to erasure: Ask us to delete your personal data (subject to legal retention requirements like GST records)
• Right to data portability: Get a copy of your data in a portable format
• Right to grievance redressal: File a complaint with our Grievance Officer (see Section 11)
• Right to nominate: Nominate another individual to exercise your rights in case of incapacity or death
• Right to withdraw consent: Opt out of marketing communications at any time

To exercise any of these rights, email us at contact@adivaasmart.com with the subject "DPDP Request" and we will respond within 30 days.

8. Data Retention

We retain your personal data only as long as necessary:

• Order data: 8 years (required for GST and Indian tax compliance)
• Account data: Until you delete your account or request deletion
• Marketing consent: Until you withdraw consent
• Customer support records: 3 years from last interaction

After the retention period, data is securely deleted or anonymised.

9. Minors

Our products are intended for adults. We do not knowingly collect personal data from children under 18. If you are a parent and believe your child has provided us personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. The "Last Updated" date at the top reflects the most recent change. Significant changes will be communicated via email to registered users or a notification on the website.

11. Grievance Officer

In compliance with the DPDP Act 2023 Compliant and the IT Act 2000, our Grievance Officer details are:

12. Contact

For any privacy-related questions or concerns:

• Email: contact@adivaasmart.com
• WhatsApp: +91 7065013838
• Address: Adivaa Smart Powering Solutions Pvt. Ltd., Indirapuram, Ghaziabad, Uttar Pradesh 201014, India