Privacy Policy

This Privacy Policy explains how Health Plus Innovation Pvt. Ltd. (“HPI”, “we”, “us”) collects, uses, stores and protects personal information when you use our website and services, and the choices you have.

It is separate from our Terms & Conditions and our Refund & Return Policy.

We collect only the information needed for the features you use:

• Newsletter sign-up: your email address.
• Support requests: your name, email address, phone number, customer type, issue category, subject and description, and — if you provide them — an order ID and an attachment (PDF or image).
• Customer accounts: your name, email address and password, and the contents of your shopping cart.
• Wishlist: the products you save, kept in your own browser (not sent to us).

Contact details you give us — such as your name, email address and phone number — are used to respond to you and to manage your account. Please don't include sensitive health information about yourself or others in support requests or attachments unless it is necessary for your query.

If you request a business account, we may ask for business details to confirm that you are eligible to buy certain products. The website does not currently collect verification documents online; any such details are exchanged with our team directly.

[Business details collected for verification, and how they are stored, to be confirmed by HPI]

• to respond to your support requests and enquiries;
• to sign you in and keep your cart linked to your account;
• to send the newsletter, if you subscribed;
• to review requests for business accounts;
• to keep the website secure — for example, limiting repeated sign-in attempts and blocking automated spam;
• if you accept analytics cookies, to understand how visitors use the website (Google Analytics), so we can improve it;
• to meet legal obligations.

The website does not currently offer online checkout or take payments, so it does not collect card or bank details. Orders are arranged with our team directly. If online payments are introduced, this policy will be updated to name the payment provider and explain what it processes.

The website uses essential cookies that it needs to work. These are always on:

Analytics cookies (optional). If you choose “Accept” in the cookie banner, we use Google Analytics to understand how visitors use the website — for example which pages are visited and how visitors arrive. Google Analytics sets these cookies:

If you choose “Decline”, Google Analytics is not loaded and nothing is sent to Google; the website works the same either way. You can change your choice at any time with Cookie Settings at the bottom of every page — declining later switches analytics off and deletes these cookies. We ask again after 12 months. Pages opened from password-reset and newsletter links never load Google Analytics.

Your wishlist and your cookie choice are saved in your browser's local storage and stay on your device. We do not use advertising cookies.

We do not sell personal information. We share it only where needed to run the website:

• Google Maps: the map on our Support page is provided by Google. When the map loads, Google may receive information such as your IP address under its own privacy policy.
• Google Analytics: only if you accept analytics cookies. Google receives information about your visit — such as the pages viewed, your device and browser type, and your approximate location derived from your IP address — under its own privacy policy. We do not send your name, email address or account details to Google Analytics.
• Hosting: the website runs on Google Cloud, on servers in Mumbai, India.

We may also disclose information where required by law or to protect our rights and users.

We take reasonable steps to protect personal information, including:

• passwords are never stored in readable form — only as one-way hashes;
• sign-in sessions use a cookie that page scripts cannot read;
• uploaded attachments are checked by file type and size, and stored under random file names;
• repeated sign-in attempts and support requests are rate-limited.

We keep personal information only as long as needed for the purposes above or as required by law. [Retention periods for support requests, newsletter subscriptions and customer accounts to be confirmed by HPI]

Subject to applicable law — including India's Digital Personal Data Protection Act, 2023 — you may be able to:

• ask what personal information we hold about you;
• ask us to correct or update it;
• ask us to delete it, where we are not required to keep it;
• withdraw consent you have given, such as for the newsletter;
• raise a grievance about how your information is handled.

To make a request, email digitalhpi2026@gmail.com. We may need to confirm your identity before acting on it.

We send the newsletter only to people who subscribe. To unsubscribe, email digitalhpi2026@gmail.com and we will remove your address.

The website is intended for healthcare businesses and adult customers. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

The website may link to other websites, such as Google Maps for directions. We are not responsible for the privacy practices of those websites; please review their policies.

We may update this Privacy Policy as our website and services change. The “Last updated” date at the top of this page shows when it was last changed.

For privacy questions, requests or grievances, contact: