Privacy Policy

This Privacy Policy describes how PotionX World Private Limited (“Potion,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you visit our website www.idrinkpotion.com (the “Website”), place orders, subscribe to our newsletter, or interact with us through any digital channels. By accessing or using our Website, you consent to the practices described in this policy.

This Privacy Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDPA”) of India.

1. Information We Collect

1.1 Information You Provide to Us

When you create an account, place an order, subscribe to our newsletter, fill out a contact form, or reach out to us via WhatsApp, email, or social media, we may collect the following:

Full name
Email address
Phone or mobile number
Billing and shipping address
Payment information (processed securely through third-party payment gateways; Potion does not store your credit/debit card details)
Order history and purchase preferences
Any other information you voluntarily provide through forms, surveys, or communications

1.2 Information Collected Automatically

When you browse our Website, certain technical data is collected automatically, including:

IP address and approximate geographic location
Browser type and version, device type, and operating system
Pages visited, time spent on pages, and clickstream data
Referring website or source
Cookie and pixel data (see our Cookie Policy for details)

1.3 Information from Third Parties

We may receive information about you from third-party platforms such as payment processors, logistics partners, marketing and analytics platforms (e.g., Google Analytics, Meta Pixel), or social media platforms if you interact with our ads or content.

2. How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfil your orders, including shipping, delivery tracking, and customer support
To create and manage your account on our Website
To communicate with you regarding orders, promotions, new product launches, and relevant updates (you may opt out at any time)
To personalise your experience and recommend products based on your preferences
To process payments securely through our payment partners
To analyse website traffic and usage patterns to improve our products, content, and overall user experience
To detect, prevent, and address fraud, technical issues, or security concerns
To comply with applicable legal obligations

3. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information to third parties for their commercial purposes. We may share your information in the following circumstances:

Logistics and Delivery Partners: We share your name, address, phone number, and order details with our shipping and logistics partners solely for the purpose of delivering your orders.
Payment Processors: Payment information is shared with our payment gateway providers (such as Razorpay or similar) to securely process transactions. We do not store your full card details on our servers.
Analytics and Marketing Partners: We share anonymised or aggregated data with analytics tools (e.g., Google Analytics) and advertising platforms (e.g., Meta, Google Ads) to measure campaign effectiveness and improve our services.
Legal Requirements: We may disclose your information if required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Potion, our customers, or others.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order data and transaction records are typically retained for a period of up to five (5) years from the date of the transaction for compliance with tax and accounting regulations in India. You may request deletion of your data at any time by contacting us at hi@idrinkpotion.com, subject to applicable legal retention obligations.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption on our Website, secure payment gateways, restricted access to personal data within our organisation, and regular security reviews. However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Your Rights Under Indian Law

Under the Information Technology Act, 2000, and the DPDPA, 2023, you have the following rights:

Right to Access: You may request access to the personal data we hold about you.
Right to Correction: You may request that we correct or update inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data, subject to applicable legal requirements.
Right to Withdraw Consent: Where we rely on your consent to process your data, you may withdraw such consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
Right to Grievance Redressal: You may lodge a complaint with our Grievance Officer (details below) or with the Data Protection Board of India.

To exercise any of these rights, please contact us at hi@idrinkpotion.com.

7. Third-Party Links

Our Website may contain links to third-party websites, including social media platforms such as Instagram and LinkedIn. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party website you visit through links on our Website.

8. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are as follows:

Name: [Grievance Officer Name]

Email: hi@idrinkpotion.com

Phone: +91-9100325050

The Grievance Officer shall address your concerns within 30 days of receipt of the complaint.

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

Email: hi@idrinkpotion.com

Phone: +91-9100325050

Website: www.idrinkpotion.com