Last updated 5 October 2026. This policy explains what Vedanya Elixirs collects, why, and the control you have over it — on our website and in the Vedanya Elixirs Health OS app.
Vedhanya Elixirs Private Limited ("Vedanya Elixirs", "we", "us") operates the Vedanya Elixirs website and Vedanya Elixirs Health OS app for users in India. Our registered office is at Chitra Gupta Colony, Chhawani Cantonment, Lucknow, Uttar Pradesh 226023. GSTIN: 09AALCV8330N1ZK.
This policy applies to our Ayurveda, skin and personal-care marketplace, health screening, teleconsultation, diagnostic, health-record and support services. It does not replace a doctor’s privacy notice or a marketplace seller’s legally required notice where that party independently decides how it uses your data.
This policy is published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We are preparing for the phased requirements of the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 as they commence. ABDM-linked activity also follows the applicable ABDM Health Data Management Policy and consent framework.
Account and identity data may include your name, date of birth or age, sex, email address, mobile number, delivery address, account identifiers and the basic profile supplied by a sign-in provider. We do not receive your password from Google or Apple.
Health and other sensitive data may include symptoms, allergies, medicines, screening answers, photographs, reports, device vitals, consultation recordings or notes where disclosed and consented, diagnoses, prescriptions, laboratory results and health records you choose to link or upload.
Transaction and care data may include appointments, queue history, orders, seller and product details, prescriptions presented to a licensed pharmacy, diagnostic bookings, invoices, refunds, support messages and consent records.
Technical and usage data may include IP address, device and browser type, app version, language, approximate location derived from IP, security logs, crash information and interactions with the service. Exact location, camera, photos, notifications, Bluetooth or health-platform data are accessed only after the relevant device permission or action.
We use data to create and secure your account; provide the order, consultation, diagnostic, screening or record service you request; verify prescriptions through a participating licensed pharmacy; process payment and refunds; deliver support; prevent fraud; maintain legally required records; and comply with lawful directions.
We seek clear, purpose-specific consent before collecting or using sensitive personal data where consent is required. You may refuse optional data or withdraw consent through the relevant setting or by contacting us. Withdrawal does not invalidate earlier lawful processing and may prevent us from providing a feature that needs that data.
AI may help generate screening summaries, severity indicators or vitals predictions. AI output is decision support, not a diagnosis, emergency service or prescription. A registered medical practitioner remains responsible for clinical decisions and prescriptions.
We use contact details for service messages. Marketing messages are sent only where permitted and can be stopped using the unsubscribe control or by contacting us. We do not use health data for targeted advertising.
Creating or linking an Ayushman Bharat Health Account (ABHA) is voluntary and is not a condition for ordinary marketplace use. We do not present ourselves as the issuer of an ABHA.
Where an ABDM connection is available, a record request is made only through the ABDM consent mechanism for the stated purpose, health-information type, date range and validity period. You may deny or revoke that consent through the applicable ABDM consent manager. Revocation stops future access under that consent but does not require deletion of a record that another healthcare provider must retain by law.
We use ABHA and consented ABDM records only to provide the health service you request. We do not sell them, share them with advertisers or use them for unrelated commercial profiling. Any copy placed in your Vedanya record remains subject to access controls, your rights and applicable medical-retention requirements.
Electronic payments are handled by payment providers subject to applicable Reserve Bank of India requirements. Card numbers, CVV, UPI PINs and net-banking passwords are entered with the provider and are not stored by us.
We retain transaction references, payment status, amount, channel, invoice details and billing or delivery data needed to complete the transaction, resolve disputes and meet tax and accounting duties. A payment provider may retain a token for a saved payment method under applicable rules; we do not receive the underlying card number.
We disclose only the data reasonably needed to the doctor, diagnostic provider, participating licensed pharmacy or marketplace seller, delivery partner and payment provider involved in your request. Marketplace sellers are responsible for their own legally required records and notices when acting independently.
Vetted technology, communications, analytics, security and hosting providers may process data for us under contractual confidentiality and security restrictions. We may also disclose data when required by law, a court or competent authority, to protect safety, or in a corporate transaction subject to lawful safeguards and notice where required.
We do not sell personal data or health data. We do not permit third parties to use clinical data for their own advertising.
We use strictly necessary local storage or cookies for sign-in, security, cart and preferences. We may use limited analytics to understand aggregate visits and service performance. Optional analytics or advertising technologies, if introduced, will be presented with a choice where law requires it.
Browser signals such as Do Not Track are not uniformly standardised. Where a legally binding opt-out signal applies to us, we will honour it. You can also restrict cookies in your browser, although essential account and cart functions may then be unavailable.
We use proportionate administrative, technical and physical safeguards, including access controls, encryption in transit, protected storage, audit logs, backups, vendor review and incident procedures. References to internationally recognised controls describe our security approach and do not claim ISO, PCI or other certification unless we expressly publish a current certificate.
No system is risk-free. We investigate suspected incidents, preserve required logs and notify CERT-In, affected people and other authorities when and within the time required by applicable law.
Our service is offered in India. If a service provider processes data outside India, we require appropriate contractual and security safeguards and apply any government transfer restriction then in force. ABDM data is handled under the localisation and network conditions applicable to ABDM participants.
We keep personal data only while needed for the stated purpose, account operation, safety, disputes or a legal obligation. Order, invoice, tax, prescription, Schedule H1 and medical records may have different statutory retention periods. Security logs are retained for at least the period required by applicable cyber-security directions.
When retention is no longer required, data is deleted, anonymised or securely isolated. Account deletion does not erase records that a doctor, pharmacy, seller or Vedanya must lawfully preserve; we will explain any such exception when responding to a request.
Subject to applicable law, you may ask for a summary of personal data we process, correction or completion, deletion, withdrawal of consent, marketing opt-out, grievance redressal and information about recipients. You may also nominate another individual to exercise applicable data rights in the event of death or incapacity once that right applies to our processing.
Send a request from your registered email or phone so we can verify your identity. We do not charge for ordinary requests, but may refuse or limit requests where the law permits, including to protect another person’s rights or preserve legally required records.
Accounts and purchases are intended for adults aged 18 or older. A parent or lawful guardian may provide a minor’s information only for a care service and must give any verifiable consent required by law. We do not knowingly profile children, track them for behavioural advertising or direct targeted advertising to them.
Our paid services and delivery are offered only in India and these terms are not an intentional offer into another country. If we later intentionally offer services to people in another jurisdiction, we will apply mandatory local rights, including GDPR or UK GDPR requirements where their territorial rules apply, before doing so.
We may update this policy for legal, security or service changes. The revised date will appear at the top. We will give prominent notice and obtain fresh consent before a material new use where applicable law requires it.
Alok Sahay, Founder & CEO and designated contact for privacy and consumer grievances, Vedhanya Elixirs Private Limited, Chitra Gupta Colony, Chhawani Cantonment, Lucknow, Uttar Pradesh 226023, India. Phone: +91 87675 10955. GSTIN: 09AALCV8330N1ZK.
Privacy, ABHA, marketplace and payment queries: support@vedanyaelixirsindia.shop
We acknowledge consumer complaints within 48 hours and aim to resolve them within one month. Privacy grievances are addressed within the period required by applicable law. After using this process, an eligible complaint may be taken to the National Consumer Helpline or the competent data-protection authority, as applicable.
