Privacy Policy

Last Updated: [Insert Date]

Welcome to Anihra, accessible via our website at https://anihra.com (the "Site") and our mobile application, "Anihra" (collectively, the "Platform").

This Privacy Policy describes the policies and procedures of Ingenious Hub LLP ("we", "our", or "us") regarding the collection, use, maintenance, protection, and disclosure of information, including your Personal Information and Sensitive Personal Data or Information (SPDI), when you use our Platform and associated services (collectively, the "Services").

By clicking "Continue" during signup, or by accessing and using our Platform and Services, you explicitly agree to the data collection and processing practices described herein. Please read this document in conjunction with our Terms of Service.

Legal & Compliance Framework

This Privacy Policy is published in compliance with:

· Section 43A of the Information Technology Act, 2000 ("IT Act").

· Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 ("SPDI Rules").

· Regulation 3(1) of the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021 ("Intermediaries Guidelines").

1. General Terms

· Legal Capacity: By using this Platform, you confirm you have the capacity to enter into a legally binding contract under the Indian Contract Act, 1872. If you share information belonging to someone else, you represent that you have their explicit authority to do so.

· Policy Amendments: We reserve the right to modify or replace this policy at any time. Continued use of the Platform signifies implicit acceptance of the revised policy. Please review this page periodically.

· Cross-Border Use: If you access our Services from outside India, you do so at your own risk and are fully responsible for compliance with your local laws.

· Consent Withdrawal: If you do not agree with this policy, please immediately discontinue the use of our Platform and Services.

2. Information We Collect

We collect information to personalise your hair health journey and fulfil your orders effectively.

A. Information You Directly Provide

· Account Registration: Name, age, gender, email address, phone number, and physical/delivery address. We may verify your credentials using a One-Time Password (OTP).

· Profile & Health Assessment Data: Height, weight, lifestyle choices, dietary habits, and exercise routines.

· Sensitive Personal Data or Information (SPDI): Health and medical records, medical history, baseline scalp/hair conditions, laboratory or diagnostic testing results, consultation notes from assigned hair coaches or healthcare professionals, treatment plans, and product dosage tracking.

· Payment Information: Billing address, shipping address, and payment card/account information (processed through secure, third-party payment gateways).

· User Contributions: Publicly posted reviews, photos, comments, ratings, and feedback. Please note: Anything posted in community zones is public data and shared at your own risk.

B. Information Collected Automatically

When you browse the Platform, we automatically collect device metrics to improve security and performance:

· Operating System (OS) type and version, application version, and device brand.

· Browser software, user-agent details, stream patterns, and timestamp data.

· IP Addresses & Unique Device Identifiers (e.g., IDFA, GAID, or mobile device IDs) are used instead of cookies to remember preferences, analyse marketing trends, and prevent fraudulent activity.

C. Cookies and Tracking Technologies

We utilise browser cookies and SDKs to recall your preferences, evaluate marketing efficacy, and analyse traffic patterns. You may block or limit cookies through your device settings; however, doing so may restrict access to certain interactive features of our Platform.

3. How We Use Your Information

We leverage your personal and medical information strictly to operate our business and deliver a tailored, high-quality healthcare consumer experience:

· Service Delivery: Processing and dispatching orders, conducting diagnoses, and setting up digital hair assessments.

· Consultations: Connecting you with qualified hair coaches and healthcare practitioners, and sharing your user profile with them to enable accurate recommendations.

· Communication: Contacting you via SMS, Email, WhatsApp, or phone calls for order updates, follow-up consultations, customer support, and collecting feedback.

· Internal Operations: Optimising platform algorithms, building recommendation systems, troubleshooting system crashes, and conducting internal audits.

· Safety & Legality: Investigating potential fraud, preventing illegal activities, protecting human safety, and defending our rights in accordance with legal obligations.

4. How Your Information is Shared & Transferred

We do not sell your personal data to unauthorised third parties. Your information is shared only under strict operational boundaries:

· Affiliates & Successors: Shared with our holding companies, subsidiaries, or corporate successors in the event of a corporate restructuring, merger, or acquisition.

· Service Partners: Shared with trusted logistics networks, delivery agents, payment processors, and communications tools contractually bound to absolute confidentiality.

· Medical Specialists: Shared directly with assigned medical practitioners and coaches to ensure the efficacy of your treatment plan.

· Legal Mandates: Disclosed to law enforcement agencies, judicial courts, or regulatory authorities when required under an official government demand or legal subpoena.

· Cross-Border Transfers: Subject to applicable law, we may store or process your data on cloud servers located outside of India, provided the destination maintains data security standards equivalent to or higher than Indian statutory requirements.

5. Information Security

We enforce rigorous physical, managerial, and electronic protocols to safeguard your records:

· Secure Sockets Layer (SSL) software is used to encrypt sensitive financial and personal inputs during transit.

· Strict access control ensures that only authorised employees and agents under non-disclosure contracts can view customer accounts.

· Your password is fully encrypted; no employee or administrator can read your actual plain-text password.

User Responsibility: You are solely responsible for keeping your login credentials confidential. Remember to log off when finishing a session on a shared device. Anihra assumes no liability for unauthorised account break-ins resulting from negligence with credentials.

6. Access, Correction, and Retention

· Data Correction & Account Deletion: You may modify, update, or permanently delete your account profile at any time by contacting our support team via email.

· Limitations: Your right to retrieve or modify data may be restricted if your request is deemed excessively repetitive, infringes on another individual's privacy, or directly impacts pending legal proceedings between you and Anihra.

· Retention Schedule: SPDI is deleted or anonymised once the baseline business or healthcare fulfilment reason for its collection has ended. However, general profile parameters may be preserved longer to comply with historical tax, financial reporting, and accounting legislation.

· App Uninstallation: Please note that deleting or uninstalling the app from your mobile device does not scrub your account records from our cloud database. A formal account deletion request must be raised to do so.

7. Age of Consent

Our Platform is explicitly designed for individuals who are at least 18 years of age. If you are a parent or legal guardian and discover that your minor child has created an unapproved account, contact us at info@anihra.com to initiate immediate data removal.

8. Third-Party Links

Our Platform may feature links to external payment gateways, advertising networks, or informational sites. Because we exert no control over independent third parties, Anihra is not liable for their discrete data collection frameworks. Review their independent privacy disclosures before committing to any external transactions.

9. Grievance Redressal Officer

In compliance with the Information Technology Act, 2000, and the relevant rules framed thereunder, any complaints, concerns, or queries regarding data usage should be directed to our Grievance Officer:

· Name: [Insert Name]

· Postal Address: [Insert Office Address, Ingenious Hub LLP]

· Email: info@anihra.com

We pledge to investigate and resolve all formal consumer privacy grievances within one (1) month of official receipt.