Privacy Policy
Last Updated: October 9, 2026
1. Introduction
At Vaidyalok (“we,” “us,” or “our”), accessible through https://vaidyalok.com, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our website, create an account, purchase our Ayurvedic products, leave comments, or interact with our website services.
By using our website, you acknowledge that you have read this Privacy Policy. Our collection and processing of personal information will be subject to applicable data protection and privacy laws.
2. Information We Collect
We may collect the following categories of information depending on how you interact with our website.
2.1 Personal Information You Provide
Account and Contact Information: Your name, email address, phone number, billing address, shipping address, and account details when you register, place an order, or contact us.
Order and Transaction Information: Products purchased, order history, transaction references, delivery details, and information necessary to process payments and fulfil orders.
Payment Information: Payments may be processed through third-party payment service providers. Your payment details are handled according to the applicable provider’s security and privacy practices. We do not intentionally store complete payment card details on our website unless a specific payment arrangement requires it and appropriate safeguards are implemented.
Customer Support Information: Information you provide when contacting us regarding product enquiries, orders, returns, refunds, complaints, or other customer service matters.
Comments and Feedback: If you leave comments, reviews, or other feedback on our website, we may collect the information submitted through the relevant forms.
Wellness Information: If you voluntarily share wellness preferences or other health-related information to enquire about our Ayurvedic products, we may process that information to respond to your enquiry or provide relevant product information. Please avoid submitting unnecessary medical or other sensitive information through the website.
2.2 Information Collected Automatically
When you visit our website, certain information may be collected automatically, including:
- IP address and approximate location derived from it.
- Browser type, operating system, and device information.
- Referring URLs and pages visited.
- Products viewed, website searches, and interactions with website features.
- Visit duration, navigation patterns, and other usage information.
- Technical logs relating to website performance, security, and troubleshooting.
2.3 Media Uploads
If you upload images to our website, you should avoid uploading images containing embedded location information, such as GPS coordinates in EXIF metadata. Depending on the image and the tools used, this information may be accessible to people who download the image.
3. How We Use Your Information
We may use the information we collect for the following purposes:
- Order Fulfilment: To process orders and payments, prepare products, arrange shipping, and coordinate delivery.
- Account Management: To create and maintain customer accounts and provide account-related services.
- Customer Support: To respond to enquiries, resolve complaints, and manage returns, refunds, and order-related requests.
- Product Information: To provide information about our Ayurvedic products and respond to product-related enquiries.
- Personalisation: To remember preferences and improve your shopping experience, where applicable.
- Marketing Communications: To send newsletters, promotional offers, product updates, and other marketing communications where permitted by law. You may opt out of marketing communications at any time.
- Website Improvement: To analyse website traffic, understand customer preferences, and improve our website, products, and services.
- Security and Fraud Prevention: To detect suspicious activities, prevent fraud, protect accounts, and maintain website security.
- Legal Compliance: To comply with applicable laws, regulatory requirements, and legitimate legal requests.
4. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to support essential website functions, improve performance, analyse traffic, and enhance your browsing experience.
Depending on the features you use, these technologies may include:
Essential Cookies: Used to support website functionality, account login, shopping cart operations, and other necessary services.
Preference Cookies: Used to remember your preferences and settings.
Analytics Cookies: Used to understand how visitors interact with our website and identify opportunities for improvement.
Marketing Cookies: Where enabled, these may be used to measure advertising performance or deliver relevant marketing content.
You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect website functionality, including login or shopping cart features. Where required by applicable law, we will obtain consent before using non-essential cookies.
WordPress Login and Comment Cookies
If you leave a comment and choose to save your details, cookies may store your name, email address, and website address for convenience. These cookies may remain for up to one year.
If you visit the login page, a temporary cookie may be used to check whether your browser accepts cookies. This cookie contains no personal information and is deleted when you close your browser.
When you log in, cookies may be used to remember your login status and screen preferences. Login cookies may last for two days, while screen preference cookies may last for one year. Selecting “Remember Me” may extend login persistence to two weeks. Logging out removes the login cookies.
If you edit or publish an article, an additional cookie may store the relevant post ID and expire after one day.
Actual cookie usage and retention periods may depend on the website’s installed plugins, configuration, and services.
5. Comments and Spam Detection
When visitors leave comments on our website, we may collect the information entered in the comments form, the visitor’s IP address, and browser user-agent information to assist with spam detection and website security.
An anonymised string generated from your email address, sometimes called a hash, may be provided to the Gravatar service to determine whether you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/.
After a comment is approved, your profile picture, if associated with the service, may be publicly visible alongside your comment.
Visitor comments may also be checked through an automated spam detection service.
6. Embedded Content and Third-Party Links
Our website may contain embedded content, including videos, images, articles, maps, or other material from external websites. It may also contain links to third-party services, including social media platforms and payment providers.
Embedded content from other websites may behave as though you have visited those websites directly. These third parties may collect information about you, use cookies, apply tracking technologies, or monitor your interactions with their content, particularly if you are logged in to their services.
We do not control the privacy practices or content of external websites. We encourage you to review their respective privacy policies before interacting with their services.
7. How We Share Your Information
We do not sell your personal information as part of our ordinary business operations. We may share information with the following categories of recipients when necessary for the purposes described in this policy:
- Payment Service Providers: To process payments and related transactions.
- Delivery and Logistics Partners: To deliver orders and provide shipment-related services.
- Website Hosting and Technical Providers: To maintain our website, databases, backups, and technical infrastructure.
- Analytics and Marketing Providers: Where enabled and permitted, to measure website performance and manage marketing activities.
- Spam Detection and Security Services: To identify suspicious activity, prevent abuse, and protect the website.
- Professional Advisers and Authorities: Where necessary to comply with applicable laws, respond to lawful requests, protect our legal rights, or address fraud and security concerns.
We expect relevant service providers to handle personal information in accordance with their applicable obligations and the arrangements governing their services.
If you request a password reset, your IP address may be included in the password-reset email.
8. Health and Sensitive Information
Vaidyalok offers Ayurvedic products and related product information. If you voluntarily provide wellness preferences or health-related information, we will use it only for relevant purposes, such as responding to your enquiry or helping you understand our products.
We aim to restrict access to such information and avoid disclosing it to unauthorised parties. However, information may be processed by service providers where necessary to deliver the relevant service or where otherwise permitted or required by law.
Information submitted through our website is not intended to replace professional medical advice, diagnosis, or treatment. Product information or recommendations provided through the website should not be interpreted as a medical diagnosis.
Please do not submit medical records or highly sensitive health information unless it is genuinely necessary and an appropriate process is available.
9. Data Security
We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction.
Depending on the services and infrastructure in use, these measures may include encrypted connections such as SSL/TLS, restricted access permissions, secure authentication, software updates, and security monitoring.
Although we take reasonable steps to protect your information, no website, internet transmission, or electronic storage system can be guaranteed to be completely secure.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining records, resolving disputes, preventing fraud, and meeting applicable legal obligations.
Retention periods may vary according to the type of information and the purpose for which it is processed.
- Customer Accounts: Account information may be retained while the account remains active and for an appropriate period afterward where necessary.
- Orders and Transactions: Order, payment reference, invoicing, and related records may be retained for business, accounting, tax, and legal purposes.
- Comments: Comments and associated metadata may be retained indefinitely to help recognise and approve follow-up comments automatically, unless deletion is appropriate or required.
- Website Logs and Security Data: These may be retained for the period reasonably necessary for security, troubleshooting, and operational purposes.
- Cookies: Cookie retention depends on the cookie type and the settings of the relevant service.
We may retain certain information after an account is deleted or a request for erasure is received where retention is required or permitted by applicable law.
11. Your Privacy Rights
Subject to applicable law, you may have the right to:
- Request access to the personal information we hold about you.
- Request a copy or export of certain personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information where applicable.
- Object to or request restrictions on certain processing activities where permitted.
- Withdraw consent where processing is based on consent.
- Opt out of marketing communications at any time.
- Raise a complaint with the relevant data protection authority where applicable.
Registered users may be able to view, edit, or delete certain account information through their website profile. Website administrators may also have access to account information for legitimate operational purposes.
If you wish to exercise your rights, please contact us using the details provided below. We may need to verify your identity before processing your request.
Any request for deletion remains subject to information we are required or legally permitted to retain for administrative, legal, accounting, security, or other legitimate purposes.
12. International Data Transfers
Some of our website hosting providers, payment processors, analytics services, or other service providers may process information in countries outside your place of residence.
Where personal information is transferred across borders, we will seek to ensure that the transfer and any associated processing comply with applicable legal requirements and relevant safeguards.
13. Children’s Privacy
Our website is not specifically designed to collect personal information from children without appropriate authorisation. If you believe a child has provided personal information in circumstances where such collection is not appropriate, please contact us so that we can review the matter and take appropriate action in accordance with applicable law.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website features, business practices, service providers, or applicable legal requirements.
Any updated version will be published on this page with a revised “Last Updated” date. We encourage visitors to review this page periodically to remain informed about our privacy practices.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:
Brand Name: Vaidyalok
Email: Vaidyalok00@gmail.com
Address: Nellayi, Thrissur – 680305, Kerala, India
Website: https://vaidyalok.com
We will review privacy-related enquiries and respond in accordance with applicable requirements.
