Overview
This Privacy Policy explains how HerbaLife Wellness Pvt. Ltd. ("HerbaLife", "we", "our", "us") collects, uses, shares, and protects information about you when you visit our website, purchase our products, or participate in our wellness programs.
By using our services, you consent to the practices described in this policy. This policy applies to all data collected through www.herbalife.in and any associated mobile applications or services.
Data We Collect
Information You Provide Directly
| Data Type | Examples | When Collected |
|---|---|---|
| Identity Data | Name, date of birth | Registration, checkout |
| Contact Data | Email, phone, address | Account creation, orders |
| Health Data | Health goals, conditions, dosha type | Consultation intake forms |
| Transaction Data | Order history, payment method type | Purchases |
| Communication Data | Messages, support tickets | Contact forms, emails |
| Preference Data | Newsletter preferences, interests | Subscription, account settings |
Data Collected Automatically
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent, and navigation paths
- Referring URLs and exit pages
- Device identifiers and screen resolution
How We Use Your Data
- To process and fulfil your orders and deliver products
- To personalise your wellness consultation and program experience
- To communicate order updates, appointment reminders, and support responses
- To send wellness tips, newsletters, and promotional offers (with your consent)
- To improve our website, products, and services based on usage analytics
- To comply with legal obligations and prevent fraud
- To conduct internal research and product development
We will never use your health data for advertising purposes or share it with insurance companies, employers, or marketing agencies.
Legal Basis for Processing
Under applicable data protection laws (including the Digital Personal Data Protection Act, 2023), we process your data on the following legal bases:
- Contract performance — Processing necessary to fulfil your orders and deliver services
- Consent — Marketing communications, health data collected during consultations
- Legitimate interests — Improving our services, fraud prevention, analytics
- Legal obligation — Tax records, regulatory compliance, court orders
Data Sharing
We do not sell, rent, or trade your personal information. We may share limited data with trusted third parties strictly for operational purposes:
- Logistics partners — Your name and delivery address are shared with shipping providers (Delhivery, Blue Dart) to fulfil orders
- Payment processors — Razorpay and Stripe process payments under their own privacy policies
- Analytics providers — Google Analytics receives anonymised usage data
- Email service providers — Mailchimp manages newsletter distribution
- Legal authorities — When required by law, court order, or to protect our rights
All third parties are contractually bound to handle your data in accordance with applicable privacy laws and to use it only for the stated purpose.
Cookies & Tracking
We use cookies and similar technologies to enhance your browsing experience and gather analytics data. You can manage cookie preferences through your browser settings.
Cookie Types We Use
- Essential cookies — Required for the website to function (shopping cart, login session). Cannot be disabled.
- Analytics cookies — Track page views and user behaviour to improve our website. Can be declined.
- Preference cookies — Remember your settings and preferences. Can be declined.
- Marketing cookies — Used for retargeting ads. Can be declined via our cookie banner.
Data Retention
- Account and order data is retained for 7 years to comply with Indian tax and commercial law
- Health and consultation data is retained for the duration of our practitioner-client relationship, plus 3 years
- Marketing preferences are retained until you unsubscribe or request deletion
- Anonymous analytics data may be retained indefinitely
After the applicable retention period, data is securely deleted or anonymised.
Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:
- 256-bit SSL/TLS encryption for all data transmission
- AES-256 encryption for data stored in our databases
- Role-based access controls limiting who can view your data
- Regular security audits and penetration testing
- Secure data centres with physical access controls
While we strive to protect your data, no method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours in accordance with applicable law.
Your Rights
Under the Digital Personal Data Protection Act, 2023 and applicable regulations, you have the following rights:
To exercise any of these rights, email privacy@herbalife.in with the subject "Data Rights Request". We will respond within 30 days. We may request identity verification before processing your request.
Children's Privacy
Our website and services are not directed at children under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly. If you believe a minor has submitted data to us, please contact privacy@herbalife.in immediately.
Third-Party Links
Our website may contain links to third-party websites (social media platforms, partner organisations, publications). HerbaLife is not responsible for the privacy practices of these sites and we encourage you to review their privacy policies before providing any personal data.
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via email and/or a prominent notice on our website. The "Last Updated" date indicates when this policy was most recently revised.
Continued use of our services after notification of changes constitutes your acceptance of the updated policy.
Contact Our Privacy Team
If you have questions, concerns, or complaints about how we handle your data, please contact our Data Protection Officer:
- Email: privacy@herbalife.in
- Subject line: "Privacy Enquiry" or "Data Rights Request"
- Phone: +91 98765 43210 (Mon–Sat, 9 AM – 7 PM IST)
- Post: Data Protection Officer, HerbaLife Wellness Pvt. Ltd., Ring Road, Surat, Gujarat 395002
We commit to acknowledging your request within 3 business days and resolving it within 30 days.
Privacy Questions?
Our Data Protection Officer is here to help you understand and exercise your rights.