Effective Date: 22nd September, 2025
Last Updated: 14th September, 2025

At HealthX Labs, your privacy matters. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website [healthxlab.com], create an account, purchase our products, or use our services.
By accessing our website or sharing your data with us, you consent to the practices described in this Policy.

Who We Are

HealthX Labs is a nutraceutical company providing premium dietary supplements for holistic wellness.
Legal Entity: Saroj Biotech Private Limited
Registered Address: 28, Mahalaya Bunglows, Sola Ahmedabad, Gujarat – 380060, India
GST No.: 24ABOCS7905C1ZA
FSSAI License No.: 10725994000287

Information We Collect

• Identity & Contact Data — name, email, phone, billing/shipping address.
• Account Data — username, password, purchase history.
• Payment Data — transaction details via secure payment gateways (we do not store full card/UPI details).
• Order & Transaction Data — product details, quantities, invoices, order IDs.
• Device & Technical Data — IP address, browser type, operating system, cookies, and analytics.
• Marketing Preferences — opt-in/opt-out status, communication preferences.
• Wellness Quiz Data (if used) — answers related to lifestyle, diet, or health preferences.
  
  • Stored with explicit consent.
  • Used only to suggest products or wellness plans.
  • Not shared with third parties without permission.

How We Use Your Information

• Order Fulfillment: Processing, payment, shipping, and delivery.
• Customer Support: Handling inquiries, complaints, and service requests.
• Personalization: Recommending products (including via wellness quiz results).
• Marketing (with consent): Sending promotions, offers, newsletters.
• Analytics & Improvement: Website performance, product improvements.
• Legal Compliance: Tax, invoicing, fraud prevention, and FSSAI/GST obligations.

Consent & Legal Basis

We process your data on the following grounds:

• Contractual necessity: To process your orders.
• Legal obligation: Tax, accounting, regulatory reporting.
• Legitimate interest: To improve services, prevent fraud, maintain site security.
• Consent: For marketing communications, wellness quiz data, cookies.

👉 You can withdraw consent at any time by emailing support@healthxlab.com or adjusting your account preferences.

Cookies & Tracking

• Remember login sessions and cart details.
• Measure website traffic and usage.
• Show personalized promotions (with consent).

You can manage cookie preferences via our Cookie Consent Manager or by adjusting your browser settings.

Data Sharing & Third Parties

We never sell your personal data. However, we may share data with trusted partners:

• Payment Gateways: Razorpay, Stripe, PayU (secure processing).
• Logistics Providers: Delhivery, Bluedart, DTDC, India Post.
• Email & Marketing Tools: Mailchimp, Klaviyo (only if you opt in).
• Analytics & Hosting Providers: Google Analytics, Cloudflare, Hostinger.
• Regulators & Authorities: As required by law (e.g., tax, FSSAI, law enforcement).

All third parties are contractually bound to use data only for specified purposes.

International Transfers

If your data is processed outside India (e.g., by cloud hosting providers), we ensure appropriate safeguards such as contractual data protection clauses.

Data Retention

• Order & Transaction Data: Retained for 7 years (for tax/GST compliance).
• Account Data: Retained until your account is deleted.
• Marketing Data: Retained until you unsubscribe or withdraw consent.
• Wellness Quiz Data: Retained for up to 12 months, then anonymized.

Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data.
• Correct inaccuracies.
• Request deletion (subject to legal retention requirements).
• Withdraw consent for marketing or quiz data.
• File a grievance with our Privacy Officer.

👉 To exercise these rights, contact support@healthxlab.com

Data Security

• SSL encryption for all website transactions.
• PCI-DSS compliance via payment gateways.
• Role-based access for employees.
• Regular backups and vulnerability monitoring.

Children’s Privacy

Our website and products are not intended for persons under 18 years of age. We do not knowingly collect children’s data.
If you believe we have collected such data, contact us for immediate deletion.

Breach Notification

• Notify affected users without undue delay.
• Report the breach to relevant authorities, as required by law.

Policy Updates

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new “Last Updated” date.

Contact Us

If you have questions about this Privacy Policy, or wish to exercise your rights, contact:
📧 support@healthxlab.com
📞 +91 9313500465
📍 28, Mahalaya Bunglows, Sola Ahmedabad, Gujarat – 380060, India