Privacy Policy

NatureLock Store (‘NatureLock’, ‘we’, ‘us’, ‘our’) is operated by Badonia and Sons, Proprietor Mamta Sunil Badonia.

• Address: Dr. Rai Complex, Shop No. 1, Rajpal Chowk, Chhindwara, Madhya Pradesh – 480001, India
• GSTIN: 23AKYPB5217E1ZC
• Website: naturelockstore.com
• Privacy Email: carenaturelock@gmail.com
• Phone: +91 70839 71986

This Policy explains what personal data may be collected through the Website and related customer interactions, why it is used, how it may be shared and retained, and the choices available to individuals.

We do not ordinarily require Aadhaar numbers, UPI PINs, banking passwords, CVVs, biometric information or detailed medical records. Please do not voluntarily send unnecessary sensitive personal information.

• Order processing, fulfilment, payment, shipping, cancellation, refund and replacement.
• Customer support, complaints and service communications.
• Website operation, security, troubleshooting, analytics and improvement.
• Marketing where permitted and, where required, based on consent.
• Fraud prevention and protection of legal/business rights.
• Tax, accounting, regulatory and other legal compliance.

We process personal data for specified and lawful purposes, including to provide requested products/services, fulfil transactions, comply with law, protect permitted legitimate interests or process data based on consent where consent is required.

Where processing relies on consent, withdrawal will be enabled through a reasonably accessible mechanism, subject to applicable law.

As applicable provisions of India's data-protection framework commence, our notices and consent mechanisms will be maintained to meet the requirements in force at the relevant time.

Payments may be processed by Razorpay or another provider displayed at checkout. NatureLock does not ordinarily store complete card credentials, CVV or UPI PIN on its own systems.

Payment processing may involve payment providers, banks and other payment participants. Their own terms and privacy notices may apply.

Essential cookies may support cart, session and security functions. Non-essential cookies or similar technologies may be used for analytics, performance, advertising or personalisation where applicable.

The exact technologies may change as Shopify applications and Website integrations change. Where consent is legally required, an appropriate mechanism will be used.

Analytics tools may process technical and usage information depending on their configuration. We do not make a blanket representation that all analytics data is anonymous.

We do not sell or rent personal data to data brokers for their own independent marketing purposes.

• Logistics/courier providers: delivery name, phone, address, PIN and relevant order information.
• Payment providers: information necessary for payment, refund and fraud checks.
• Technology/service providers: Shopify, hosting, analytics, customer support, email/SMS/WhatsApp, security and related services, as applicable.
• Professional advisers: accountants, auditors, lawyers, consultants or insurers where reasonably necessary.
• Authorities: where required/permitted by law, court order or lawful government/regulatory request.
• Business transactions: where reasonably necessary for a merger, restructuring, sale or acquisition, subject to applicable law.

We use reasonable technical and organisational safeguards appropriate to the nature of data processed, including access controls, restricted access, secure communications and service-provider/security controls.

No electronic system can be guaranteed completely secure.

Data is retained only as reasonably necessary for service delivery, transaction records, complaints/disputes, fraud prevention, legal claims and legal/regulatory obligations.

Different records may have different retention periods. We do not state a single blanket retention period for all personal data.

Where data is no longer required and no legal or legitimate reason for retention remains, we will take reasonable steps to delete, anonymise or securely dispose of it.

Subject to the applicable data-protection framework and its commencement, individuals may have rights relating to access, correction, erasure, withdrawal of consent, marketing preferences and grievance redressal.

The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 provide the framework for these rights and obligations, with phased commencement of the Rules. We will apply the provisions in force at the relevant time.

Email carenaturelock@gmail.com with the subject ‘Privacy Request – NatureLock’.

We may reasonably verify the requester before providing, correcting or deleting personal data. We will respond within the period prescribed by applicable law.

A request may be limited or refused where permitted/required by law, including where records must be retained for tax, accounting, legal, security or dispute purposes.

Promotional communications may be sent where permitted and, where required, based on consent. You can opt out using the unsubscribe mechanism or by contacting us.

Transactional communications such as order, payment, delivery, refund, cancellation and security notices may continue after marketing opt-out.

We do not knowingly collect personal data from children in circumstances where collection is prohibited by applicable law. Contact us if you believe such data has been submitted so we can assess and act appropriately.

Public reviews, photographs, videos and testimonials may contain personal data. Avoid unnecessary personal information. Promotional use of customer content will be subject to applicable law and relevant permissions/terms.

Some service providers may process or store personal data outside India. Such processing will be subject to applicable Indian law and requirements in force concerning cross-border processing/transfer.

Third-party services operate under their own terms and privacy policies.

If we become aware of a personal-data security incident, we will take reasonable steps to assess, contain and address it and make notifications required by applicable law.

Consumer/e-commerce grievances will be handled in accordance with applicable consumer-protection requirements. Privacy complaints may use the subject ‘Privacy Grievance – NatureLock’.

We may update this Policy to reflect changes in business, technology, data practices or law. The revised version will carry a new Last Updated date; additional notice or consent will be provided where required.

This Policy is governed by Indian law and does not exclude any mandatory statutory right or remedy.

Compliance note: This Privacy Policy is drafted to accommodate the current Indian e-commerce and data-protection framework. Actual compliance also depends on the Shopify/app configuration, vendors, consent mechanisms and data flows used by NatureLock.