Privacy policy
Privacy Policy
Trident Nutra Last Updated: July 16, 2026
1. Introduction
This Privacy Policy ("Policy") describes how Trident Nutra ("Trident Nutra," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you," "your," or "Data Principal") who access or use our website, mobile experience, and related services (collectively, the "Platform"), and who purchase, or express interest in purchasing, our products.
This Policy is framed in accordance with the applicable laws of India, including but not limited to:
- The Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules framed thereunder;
- The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), to the extent still applicable;
- The Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020.
Our Platform is hosted and powered by Shopify Inc. ("Shopify"), which provides the underlying e-commerce infrastructure. Where relevant, this Policy explains the respective roles of Trident Nutra and Shopify in processing your personal data.
By accessing or using the Platform, or by providing us with your personal data, you acknowledge that you have read and understood this Policy.
2. Definitions
For the purposes of this Policy, and consistent with the terminology used under the DPDP Act:
- "Data Principal" means the individual to whom the personal data relates — i.e., you.
- "Data Fiduciary" means the entity that determines the purpose and means of processing personal data — i.e., Trident Nutra, in respect of the personal data collected through the Platform.
- "Data Processor" means any entity that processes personal data on behalf of a Data Fiduciary — this includes Shopify and other service providers engaged by us.
- "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
- "Processing" means any operation performed on personal data, including collection, recording, storage, use, sharing, disclosure, and erasure.
- "Consent Manager" means a person registered with the Data Protection Board of India who enables a Data Principal to give, manage, review, or withdraw consent through an accessible, transparent, and interoperable platform, where applicable.
3. Personal Data We Collect
We may collect the following categories of personal data, depending on how you interact with the Platform:
3.1 Information You Provide Directly
- Identity and contact information: full name, billing and shipping address, phone number, email address.
- Account credentials: username, password (stored in encrypted/hashed form), and security preferences.
- Order and transaction details: products purchased, order history, returns, exchanges, cancellations, and preferences.
- Payment information: payment method, transaction reference numbers, and billing details. We do not store your full card, UPI, or net-banking credentials on our servers — these are processed directly by our PCI-DSS compliant payment gateway partners and Shopify Payments infrastructure.
- Communications: any information you share when contacting our customer support, submitting reviews, or participating in surveys or promotions.
3.2 Information Collected Automatically
- Device and technical information: IP address, browser type and version, device identifiers, operating system, and general geographic location inferred from your IP address.
- Usage information: pages viewed, time spent on the Platform, click-through behavior, referring URLs, and interaction with product listings.
- Cookies and similar technologies: as described in Section 9 below.
3.3 Information from Third Parties
- Information received from our logistics and fulfillment partners regarding delivery status.
- Information received from payment processors confirming successful or failed transactions.
- Information received from marketing and analytics partners, where you have interacted with advertisements related to Trident Nutra on third-party platforms.
We do not knowingly collect any special category of sensitive personal data (such as health records, biometric data, or financial account passwords) beyond what is strictly necessary to process a transaction.
4. Purpose and Legal Basis of Processing
We process your personal data for the following purposes, on the legal bases available to us under the DPDP Act — primarily your consent, and, where applicable, legitimate use as recognized under Section 7 of the DPDP Act (such as for the specified purpose for which you voluntarily provided your data, or to comply with a legal obligation):
| Purpose | Examples |
|---|---|
| Order fulfilment | Processing payments, arranging shipping, handling returns and exchanges |
| Account management | Creating and maintaining your account, authenticating your identity |
| Customer support | Responding to queries, resolving complaints, providing after-sales assistance |
| Marketing communications | Sending promotional emails, SMS, or WhatsApp messages, only where you have opted in |
| Platform improvement | Analyzing usage patterns to improve site functionality and product offerings |
| Fraud prevention and security | Detecting and preventing unauthorized transactions or malicious activity |
| Legal compliance | Complying with applicable tax, consumer protection, and other regulatory obligations |
Where we rely on your consent for a specific purpose (particularly for marketing communications), you have the right to withdraw that consent at any time, as described in Section 8.
5. How We Share Your Personal Data
We do not sell your personal data. We may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:
- Shopify, as our e-commerce platform provider and Data Processor, which hosts our store and processes transactional data on our behalf, subject to Shopify's own privacy practices, available at privacy.shopify.com.
- Payment gateway providers engaged to process your payment securely.
- Logistics and courier partners engaged to fulfil and deliver your orders.
- Marketing, analytics, and customer engagement service providers, engaged under contractual confidentiality obligations.
- Professional advisors, including legal counsel and auditors, where necessary.
- Government authorities, regulators, or law enforcement agencies, where required under applicable law, in response to a valid legal process, or to protect our rights, property, or safety, or that of our users.
- A successor entity, in connection with any merger, acquisition, restructuring, or sale of business assets, subject to that entity being bound by equivalent confidentiality obligations.
All third parties with whom we share personal data are contractually obligated to process such data solely for the specified purpose and to implement appropriate security safeguards.
6. Cross-Border Data Transfers
Personal data collected through the Platform may be stored, processed, or transferred to servers located outside India, including in jurisdictions where Shopify and our other service providers operate.
In accordance with Section 16 of the DPDP Act, we may transfer personal data outside India except to countries or territories that are specifically restricted by notification of the Central Government of India. Where such transfers occur, we take reasonable steps to ensure that the receiving party affords a level of protection to your personal data that is consistent with this Policy and applicable Indian law.
7. Data Retention
We retain your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements under applicable Indian law (including retention periods prescribed under tax and consumer protection legislation).
Where you request erasure of your personal data and we have no legal obligation or legitimate business need to continue processing it, we will delete or anonymize such data within a reasonable timeframe, as required under Section 8(7) of the DPDP Act.
8. Your Rights as a Data Principal
Under the DPDP Act, you have the following rights in relation to your personal data, subject to the conditions and exceptions prescribed under applicable law:
- Right to Access: You may request a summary of the personal data we hold about you and the processing activities undertaken.
- Right to Correction and Erasure: You may request that we correct inaccurate or incomplete personal data, or erase personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
- Right to Grievance Redressal: You have the right to have any grievance related to the processing of your personal data addressed by us in a timely manner, as detailed in Section 12.
- Right to Nominate: You have the right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw such consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal, and may limit our ability to continue providing certain features of the Platform (for example, order tracking notifications).
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before processing your request, and will respond within the timeframe required under applicable law. You may also designate an authorized agent to act on your behalf, subject to proof of authorization.
Where a Consent Manager framework becomes operationally available under the DPDP Act, we will update this Policy to reflect how you may manage your consent through such a platform.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate the Platform, remember your preferences, understand how you interact with our site, and — where you have consented — to deliver personalized marketing.
| Category | Purpose |
|---|---|
| Strictly necessary cookies | Required for core Platform functionality, such as maintaining your cart and enabling checkout. These cannot be disabled. |
| Performance and analytics cookies | Help us understand how visitors use the Platform, so we can improve it. |
| Functional cookies | Remember your preferences, such as language or currency. |
| Marketing cookies | Used to deliver relevant advertisements and measure campaign performance, subject to your consent. |
You may control or disable non-essential cookies through your browser settings or, where available, through a cookie consent banner on the Platform. Disabling certain cookies may affect the functionality of the Platform.
10. Data Security
We implement reasonable security practices and procedures, commensurate with the sensitivity of the personal data we process, including technical and organizational measures such as encryption of data in transit, restricted access controls, and secure hosting infrastructure provided by Shopify.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security, and any transmission of personal data to us is at your own risk.
In the event of a personal data breach that is likely to result in harm to you, we will notify you and, where required, the Data Protection Board of India, in accordance with the DPDP Act and rules made thereunder.
11. Children's Data
The Platform is not directed at, and we do not knowingly collect personal data from, individuals below the age of 18 years without the verifiable consent of their parent or lawful guardian, in accordance with Section 9 of the DPDP Act.
If we become aware that we have inadvertently collected personal data from a minor without appropriate parental or guardian consent, we will take reasonable steps to delete such data promptly. If you believe we may have collected information from a minor, please contact us using the details in Section 12.
12. Grievance Officer and Contact Details
In accordance with the requirements of applicable Indian law, including the Information Technology Act, 2000 and rules made thereunder, we have designated a Grievance Officer to address any concerns or complaints relating to the processing of your personal data.
Grievance Officer [Insert Full Name] Trident Nutra Email: [Insert Grievance Officer Email] Address: [Insert Registered Business Address]
For all general privacy-related queries or to exercise your rights under this Policy, you may also contact us at:
Email: ramvanlabs@gmail.com
We will acknowledge and address grievances in a timely manner, as required under applicable law. If you are not satisfied with our response, you may have the right to escalate your complaint to the Data Protection Board of India, once its complaint mechanism is operationalized, or to any other competent regulatory authority.
13. Third-Party Links
The Platform may contain links to third-party websites or platforms not owned or controlled by Trident Nutra. This Policy does not apply to such third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit.
14. Changes to This Policy
We may update this Policy from time to time to reflect changes in our data practices, business operations, or applicable law. Any material changes will be notified through an update to the "Last Updated" date at the top of this Policy, and, where required by law, through additional notice on the Platform or via email.
We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
15. Governing Law and Jurisdiction
This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at [Insert City, State].
This Privacy Policy is a draft template prepared for informational purposes and does not constitute legal advice. Before publishing this Policy or relying on it for regulatory compliance, we strongly recommend that Trident Nutra engage a qualified Indian data protection or corporate lawyer to review it against your specific data flows, business operations, and any subsequently notified rules under the DPDP Act.