1. Who we are
nammahearth.com is the online store of NammaHearth™, 16/4, Puduthurai Road, Rasi Nagar, Karaikal, Puducherry – 609602, India. We make and sell baby cereals and related food products. On this website you can browse our products, recipes and articles, and create an account to place orders, pay, track deliveries, request returns and use NH Credit. NammaHearth™ decides how your personal information is used and is responsible for it (the “data fiduciary” under the Digital Personal Data Protection Act, 2023).
2. What we collect
- Account details — your name, email address, mobile number and password (stored only in a scrambled, one-way form). You may add a profile photo.
- Sign in with Google — if you choose it, Google shares your name, email address and a Google account identifier with us. We do not receive your Google password and do not access your contacts, Gmail, Drive or any other Google data.
- Mobile verification — to confirm your mobile number we may send a one-time code to your mobile by WhatsApp or SMS. We keep a scrambled copy of the code for 10 minutes, the number it was sent to and the time.
- Orders and delivery — delivery addresses, the products you order, invoices, returns and your NH Credit balance.
- Payments — payments are handled by Razorpay. We receive the payment reference and status, never your full card, UPI PIN or bank details.
- Messages — what you send us through the contact form, email or WhatsApp.
- Website visits — anonymous visit counts: the page, the referring site, screen width, language and a random number stored in your browser. This is not linked to your name or account. If your browser sends “Do Not Track” or “Global Privacy Control”, we count nothing.
- Security records — the internet (IP) address and time of sign-ins and code requests, to stop misuse.
Giving us your information is your choice. You can browse the website without an account; without an account, a verified mobile number and a delivery address we cannot take an online order. Your password is “sensitive personal data” under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; we collect it only to secure your account, with your consent, and store it only in scrambled form. We collect only what we need for the purposes below.
3. Why we use it
- To create and secure your account and keep you signed in.
- To confirm your mobile number, so that your online account is joined to any record we already hold for you (for example from an earlier phone or in-person order) and no one else can claim it.
- To take payment, prepare and deliver your order, issue GST invoices, handle returns and refunds, and keep your NH Credit balance.
- To send messages about your account and orders (order confirmations, delivery updates, password resets).
- To answer your questions and complaints.
- To understand which pages are useful and improve the website, using the anonymous visit counts only.
- To meet our legal duties, such as keeping tax records.
We do not sell or rent your personal information, and we do not use it for advertising by other companies.
4. Who we share it with
We share only what each service needs to do its job for us:
- Razorpay — to take payments and refunds.
- Courier and delivery partners — your name, delivery address and mobile number, to deliver your order.
- Google — only if you choose “Sign in with Google”.
- Meta (WhatsApp) and our SMS provider — your mobile number, to send verification codes and order messages.
- Our email provider — your email address, to send account and order emails.
- Our hosting provider — the website and its database run on servers we rent.
- Authorities — when the law requires it, for example tax authorities or a court order.
These services may use your information only to do that job for us and must keep it secure. Some of them may store it on servers outside India; we use only providers that protect it as Indian law requires, and never in a country the Government of India has restricted.
5. Cookies and browser storage
We do not use advertising or tracking cookies. The website stores a few small items in your browser: your sign-in, your cart and wishlist, a delivery address you enter without an account, copies of page content so pages load faster, and the random number used for anonymous visit counts. Google sign-in and Razorpay checkout may set their own cookies when you use them, under their own privacy policies.
6. How long we keep it
We keep your account details while your account is open. Invoices, payment and order records are kept for as long as GST and other Indian laws require, even if you close your account. Verification codes are deleted after use or expiry. Security records (sign-in and access logs) are kept for at least one year, as Indian law requires, and then deleted. When we no longer need your information and the law doesn't require us to keep it, we delete it.
7. Keeping it safe
The website uses HTTPS for every page. Passwords and verification codes are stored only in scrambled form, access to customer records is limited to our staff who need it, and staff sign-ins are protected. No system is perfectly secure, but if a breach affects your information we will tell you and the authorities as the law requires.
8. Your choices and rights
- You can see and update most of your details in My account.
- You can ask us for a copy of the personal information we hold about you, or ask us to correct it.
- You can ask us to close your account and delete your personal information. We will do so, except records we must keep by law (such as invoices).
- You can withdraw your consent at any time, as easily as you gave it; this does not affect anything done before, but we may then be unable to take orders from you.
- You can nominate another person to exercise these rights for you if you die or become unable to.
- You can ask for this policy in Tamil or another language listed in the Eighth Schedule to the Constitution of India.
- If you use Sign in with Google, you can also remove our access from your Google Account settings.
To make any of these requests, email our Grievance Officer (below) from the email address on your account. We may ask you to confirm it is you. We reply within 30 days. We handle your information in line with India's Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 and its rules.
If you are not satisfied with how we handled your complaint, you can complain to the Data Protection Board of India.
9. Children
Our products are made for babies, but accounts are for parents and other adults only. We do not knowingly collect personal information from anyone under 18.
10. Changes to this policy
We may update this policy when our website, services or the law change. The “Last updated” date above shows the latest version. For a significant change we will tell signed-in customers on the website or by email.
11. Contact and Grievance Officer
Questions, requests or complaints about your personal information can be sent to our Grievance Officer, who can also answer any question about this policy. We acknowledge within 48 hours and resolve within one month.
- Name: Rumana Jasmine
- Designation: Proprietor, NammaHearth™
- Address: 16/4, Puduthurai Road, Rasi Nagar, Karaikal, Puducherry – 609602, India
- Email: support@nammahearth.com
- Phone: +91 99401 23994 (Monday–Saturday, 9am–6pm IST)