Privacy notice
Version 2026-10.4 · Last updated: October 2026
This notice explains, in plain language, what personal data Syndy Life Science Pvt. Ltd. ("we", "Bello Herbals") collects when you use belloherbals.com, why, and your rights under the Digital Personal Data Protection Act, 2023. We are the Data Fiduciary for this data.
1. What we collect and why
| Data | Why we need it |
|---|---|
| Mobile number | For delivery (our courier calls or messages you about your parcel), to look up your order on the tracking page, and to send order and delivery updates |
| Name, delivery address, delivery phone | To deliver your order and issue the tax invoice |
| To log you in with a one-time code (if you choose to log in), to file guest orders under your email so you can see them later, and to send your order confirmation, delivery and return updates, invoices and replies to your queries | |
| Google account name and email (only if you choose "Continue with Google") | To log you in. We receive only your name and verified email from Google, never your password |
| Billing address (optional) | For the tax invoice, when it differs from the delivery address |
| Reviews you write | To show other shoppers, with the display name you choose |
| Order history | To show you your orders, handle returns and refunds, and keep accounts as tax law requires |
| Prescription image (only for prescription medicines) | To check the prescription before we sell those medicines, as required by law |
| Messages and complaints you send us | To answer and resolve them |
| Your choices (consent records) | To prove what you agreed to and when |
| Technical data (IP address, browser) | To keep the site secure: rate limits, fraud prevention and security logs |
We never see or store your UPI or bank login details. Payments are entered directly on Razorpay's secure page.
Marketing messages (offers and new products) are sent only if you ask for them. To start or stop them, email us at info@belloherbals.com; it is as easy to withdraw consent as it was to give it. Order and delivery updates are always sent.
2. Who we share it with
- Delhivery (courier): your name, delivery address and phone, to deliver the order.
- Razorpay (payments): order amount and phone, to take payment and process refunds.
- Email provider (our Hostinger mailbox): your email address, to send login codes, order confirmations and delivery updates.
- Hostinger (web hosting in India): stores our website and database.
- Google sign-in (only if you use it): Google tells us your name and verified email. We send nothing to Google.
- Google Fonts: your browser downloads our typeface from Google, which sees your IP address. No personal data is sent.
- Government authorities, only when the law requires it.
We do not sell your personal data. Advertising cookies are used only if you allow them (see Cookies below).
Cookies
Essential cookies keep the site working: your bag, your login, and security protection for forms. They are always on and are not used for advertising.
Visit statistics. To improve the store we count visits on our own site: the type of device (mobile, tablet or desktop), the pages viewed, time spent, the website or campaign link you came from, and whether products were added to the bag or ordered. This uses no extra cookies and no IP address, is never shared, and is deleted after 13 months. If you are logged in, the visit is linked to your account so we can understand abandoned bags; we do not send marketing because of it. Browsers set to Do Not Track or Global Privacy Control are not counted.
We do not currently set any optional cookies. When you first visit, the cookie popup asks for your choice; if we later start measuring our ads (for example with Meta), those cookies will be used only if you chose Accept all. You can change your choice any time with Cookie settings.
3. How we protect it
- Your name, phone, email, addresses, prescriptions and messages are encrypted in our database.
- Only authorised staff can see customer details. They must use two-factor login, and every time they view your details it is recorded.
- The whole site uses HTTPS. Security logs are kept for at least one year.
4. How long we keep it
- Account details: until you ask us to delete your account.
- Orders and invoices: as long as tax laws require (currently about 8 years), even after your account is deleted.
- Prescriptions: with the order they belong to.
- Login codes: deleted within a day. Security logs: at least one year.
5. Your rights
- Access: email info@belloherbals.com from the email address on your account and we will send you a copy of your data.
- Correction: update your details at checkout or ask us.
- Erasure: email info@belloherbals.com from the email address on your account to have your account and personal details deleted. We confirm by email, normally within 7 days.
- Withdraw consent to marketing at any time, by email.
- Nominate someone to exercise these rights for you in case of death or incapacity: write to us.
- Grievance: contact our Grievance Officer (below). If you are not satisfied, you can complain to the Data Protection Board of India.
6. Children
This site is for adults. You must be 18 or older to create an account or place an order. A parent or guardian must order on a child's behalf.
7. If something goes wrong
If a data breach ever affects your data, we will inform you and the Data Protection Board of India as the law requires, explaining what happened, what was affected and what you can do.
8. Contact
Grievance Officer: Phalguna, Syndy Life Science Pvt. Ltd., 159/C, 2nd Floor, Phase – II, IDA Cherlapally, Hyderabad – 500051, Telangana, India. Phone +91 94403 34236 · Email info@syndygroups.com.