Privacy policy
Who is responsible for your data?
The editorial team of herbreview.info (“we”) decides why and how your personal data is used on this site. Contact: [email protected]. This policy follows the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the related SPDI Rules, 2011.
What data do we collect?
- Order form: your name and mobile number, the product and page you ordered from.
- Contact form: your name, phone number or e-mail, the topic, your message.
- Technical data for protection against fraud and bots: IP address (stored shortened, except when passed to the seller with your order), country by IP, browser type, time of the request.
We do not collect health data. We never ask about illnesses, test results or medicines you take. Please do not write such details in the contact form.
Why do we use it?
- To pass your order request to the seller so they can call you, confirm and deliver it.
- To answer your message.
- To protect the forms against fraud, spam and repeated fake orders.
By sending a form you give consent for these purposes. You can withdraw consent at any time, as easily as you gave it — write to us; this does not affect processing done before.
Who receives your data?
- The affiliate network Limonad and the seller of the product — your name, phone number, the page and the IP address, to process the order.
- The internal messaging service through which we receive notices of orders and messages (Telegram): for orders, the masked phone number and the first letter of the name; for contact messages, the name, the contact and the text, so that we can reply.
- Our hosting provider and Cloudflare, which deliver and protect the site.
Some of these services may process data outside India. We use them only for the purposes above.
How long do we keep it?
Order and message records and the related processing logs are kept for one year from the date of processing, the minimum required by Rule 8(3) of the DPDP Rules, 2025, and are then deleted, unless another law requires longer storage.
Your rights
- Ask what data we hold about you and how we use it.
- Ask us to correct, complete or delete your data.
- Withdraw your consent.
- Nominate another person to use your rights in case of death or incapacity.
Grievances
Write to our grievance contact at [email protected]. We respond within a reasonable time and no later than 90 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Cookies
See our cookie policy. We do not use analytics or advertising cookies.
Changes
When we change this policy we update the version date at the top.