Nature Theory – Privacy Policy

Effective Date: 27 September 2026

Nature Theory is a formulation-first cosmetics brand operated by:

NOVALYNT CONSUMER (OPC) PRIVATE LIMITED
JK Business Center
8-2-293/82/A/787/1/4F/1
Jubilee Hills, Shaikpet
Hyderabad – 500033
Telangana, India

CIN: U47912TS2026OPC210375

Website: naturetheory.in

For privacy and personal-data related questions or requests:

Email: privacy@naturetheory.in


1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how NOVALYNT CONSUMER (OPC) PRIVATE LIMITED (“Nature Theory”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit our website, place an order, contact us, or otherwise interact with our services.

We aim to collect and use personal data only for legitimate and defined purposes and only to the extent reasonably necessary for those purposes.


2. PERSONAL DATA WE COLLECT

Depending on how you interact with us, we may collect the following categories of personal data.

2.1 Identity and Contact Information

This may include:

  • Name
  • Email address
  • Mobile or telephone number

2.2 Order and Transaction Information

When you place an order, we may collect or receive:

  • Billing address
  • Shipping address
  • Order details and purchase history
  • Transaction reference and payment status
  • Information required to process, fulfil, deliver or support your order

We do not intend to store complete card numbers, UPI credentials, banking passwords or similar payment authentication credentials on our own systems.

Payment information may be processed by third-party payment service providers in accordance with their applicable terms and privacy policies.

2.3 Technical and Usage Information

When you visit our website, certain information may be collected automatically, depending on the technologies and services enabled on the website.

This may include:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Pages visited
  • Website interaction information
  • Referring website or source
  • Information relating to website performance and security

2.4 Account Information

If customer accounts are enabled and you choose to create an account, we may process information associated with that account, such as account credentials, saved addresses and account preferences.


3. HOW WE USE PERSONAL DATA

We may use personal data for the following purposes:

Order Processing and Fulfilment

To:

  • Process and confirm orders
  • Process payments
  • Pack and dispatch products
  • Coordinate delivery
  • Manage cancellations, returns, refunds and exchanges

Customer Support

To:

  • Respond to enquiries
  • Provide information about products and orders
  • Handle complaints and service requests
  • Communicate with you regarding your interactions with us

Communications

To send:

  • Order confirmations
  • Shipping and delivery updates
  • Transactional communications
  • Responses to enquiries and support requests

Where required, promotional communications will be sent in accordance with applicable law and your communication preferences.

Website Operation and Improvement

To:

  • Maintain and operate our website
  • Understand website performance and usability
  • Improve website functionality and user experience

Security and Fraud Prevention

To:

  • Protect our website and systems
  • Detect, investigate and prevent fraud, abuse or unauthorised activity
  • Maintain the security and integrity of our services

Legal and Regulatory Compliance

To comply with applicable laws, regulations, legal processes and lawful requests from competent authorities.


4. PAYMENT PROCESSING

Payments made through our website may be processed by third-party payment service providers.

These providers may process payment and transaction information necessary to complete the transaction.

Nature Theory does not intend to store complete payment credentials such as card numbers, CVV values, UPI PINs or banking passwords on its own systems.

The processing of payment information by third-party providers is subject to their respective terms and privacy policies.


5. WHEN WE SHARE PERSONAL DATA

We may share personal data with service providers and other parties where reasonably necessary for the purposes described in this Privacy Policy.

Logistics and Delivery Providers

Information such as your name, phone number and delivery address may be shared where necessary to fulfil and deliver your order.

Payment Service Providers

Relevant information may be shared to process and verify transactions.

Technology and Platform Providers

We may use third-party providers for website hosting, e-commerce functionality, analytics, communications, security, customer support and other business operations.

Marketing and Analytics Providers

Where enabled, certain information may be shared with analytics or advertising platforms to measure website activity, understand marketing performance and improve our services, subject to applicable law and your choices where required.

Legal and Regulatory Authorities

We may disclose information where required or permitted by applicable law, legal process or lawful governmental request.

We do not sell personal data.


6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

These technologies may be used for:

  • Essential website functionality
  • Shopping-cart and session functionality
  • Security
  • Website analytics
  • Performance measurement
  • Advertising or marketing measurement, where enabled

Some cookies may be placed by third-party service providers whose services are integrated with our website.

You can manage certain cookie settings through your browser or device settings. Where applicable law requires consent for particular technologies, we will seek consent through the relevant mechanism.


7. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required or permitted by applicable law.

For example:

  • Order and transaction records may be retained for accounting, tax, legal, fraud-prevention and record-keeping purposes.
  • Customer-support communications may be retained for service, dispute-resolution and record-keeping purposes.
  • Account information may be retained while an account remains active and thereafter as reasonably necessary or required by law.

When personal data is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with our retention practices and applicable law.


8. YOUR PRIVACY RIGHTS

Subject to applicable law, you may have rights relating to your personal data, including rights to:

  • Request access to information about your personal data
  • Request correction of inaccurate or incomplete personal data
  • Request deletion or erasure where applicable
  • Withdraw consent where processing is based on consent
  • Raise a grievance regarding the processing of your personal data
  • Nominate another individual to exercise your rights on your behalf in accordance with applicable law
  • Exercise other rights available under applicable law

To submit a privacy request:

Email: privacy@naturetheory.in

Please provide sufficient information for us to identify the relevant account, order or interaction and process your request securely.

We will respond to privacy requests within the period required by applicable law.


9. DATA SECURITY

We take reasonable technical and organisational measures appropriate to the nature of the personal data we process.

Depending on the systems and services involved, these measures may include:

  • Access controls
  • Secure communications
  • Restricted access to personal data
  • Authentication and account-security measures
  • Monitoring and security controls
  • Appropriate safeguards through contracts with relevant service providers

No method of transmission or electronic storage can be guaranteed to be completely secure. However, we take reasonable steps to protect personal data against unauthorised access, misuse, alteration, loss or disclosure.


10. PERSONAL DATA BREACH

If we become aware of a personal data breach, we will take appropriate steps to contain, assess and address the breach and will provide notifications to the Data Protection Board of India and affected Data Principals in the manner and within the time periods required by applicable law.


11. THIRD-PARTY SERVICES AND CONTENT

Our website may use or embed services provided by third parties, including payment, analytics, advertising, video, social-media, communication, hosting and other technology providers.

When you interact with such services, those providers may collect information directly from your device or browser in accordance with their own privacy policies and applicable settings.

We recommend reviewing the privacy policies of third-party services where appropriate.


12. CHILDREN’S DATA

Our website and services are not directed to children under 18.

We do not knowingly solicit personal data from children.

If we become aware that personal data relating to a child has been collected in circumstances where the required consent or authorisation has not been obtained, we will take appropriate steps in accordance with applicable law.


13. INTERNATIONAL DATA PROCESSING

Some of our technology and service providers may process or store personal data in jurisdictions outside India.

Where personal data is processed outside India, we will take the measures required by applicable law and the terms applicable to the relevant service providers.

This Privacy Policy is governed by applicable Indian law.


14. PRIVACY CONTACT

For questions regarding how we collect, use or process personal data, or to exercise applicable privacy rights:

Privacy Contact
NOVALYNT CONSUMER (OPC) PRIVATE LIMITED
Email: privacy@naturetheory.in


15. CONSUMER GRIEVANCE OFFICER

For consumer complaints and grievances relating to our e-commerce services:

Grievance Officer: Krishna Ravi
Designation: Grievance Officer
Email: grievance@naturetheory.in
Phone: +91 8143454440

Consumer grievances will be acknowledged within 48 hours of receipt and addressed within one month from the date of receipt, subject to applicable law.

For privacy and personal-data matters, please use:

privacy@naturetheory.in


16. APPLICABLE PRIVACY LAWS

Our processing of personal data is subject to applicable Indian laws and regulations relating to privacy and data protection, including the Digital Personal Data Protection Act, 2023 and applicable rules and notifications made under it, as and when their respective provisions become applicable.

We may update our privacy practices and this Privacy Policy as applicable laws, regulations, technology, services or our operations change.


17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes in our services or operations
  • Changes in technology or third-party services
  • Changes in applicable laws or regulatory requirements

The latest version will be published on this page with its effective date.


NOVALYNT CONSUMER (OPC) PRIVATE LIMITED
CIN: U47912TS2026OPC210375
JK Business Center
8-2-293/82/A/787/1/4F/1
Jubilee Hills, Shaikpet
Hyderabad – 500033
Telangana, India

Privacy: privacy@naturetheory.in
Customer Support: support@naturetheory.in
Grievance: grievance@naturetheory.in
Phone: +91 8143454440

NATURE THEORY — FORMULATION-FIRST SKINCARE