Introduction

This Privacy Policy explains how Lorfin Lifescience Private Limited, operating the Vitabowl brand, collects, uses, stores, shares and protects personal information when you visit, use or purchase products through www.vitabowl.in or otherwise interact with us.

Vitabowl is operated exclusively by Lorfin Lifescience Private Limited. This Privacy Policy is intended to provide clear information about our data practices and the choices and rights available to individuals.

This website is primarily intended for domestic customers in India. Lorfin Lifescience Private Limited also exports products and may receive international enquiries through our contact channels. International customers and enquiries may therefore be subject to additional privacy requirements applicable to their jurisdiction.

---

Who We Are

Legal Entity: Lorfin Lifescience Private Limited

Brand: Vitabowl

Registered / Business Address:
A-06, Akshardham Industrial Estate, Phase - IV, Vatva GIDC, Ahmedabad, Gujarat - 382445

CIN: U21009GJ2023PTC139931

FSSAI License: 10723999001244

Privacy Contact: [email protected]

---

Personal Information We Collect

The information we collect depends on how you interact with Vitabowl. We aim to collect information that is reasonably necessary for the relevant purpose.

Account and Customer Information
When you create or use a customer account, we may collect your name, mobile number, address information and order history.

Address Information
This may include house or building information, address lines, landmark, city, state and PIN code.

Business Information
Where applicable, business customers may provide a company name and GSTIN for billing or other business-related purposes.

Order Information
We collect information necessary to process and fulfil orders, including customer identity, mobile number, billing information, shipping information and order history.

Communication Information
If you contact us, we may process the information contained in your communication and information necessary to respond to your enquiry.

Reviews and Ratings
If you submit a product review, rating or testimonial, we may publish your name and submitted review or testimonial on our website.

Technical and Analytics Information
Our website and third-party services may process technical and usage information such as IP address, user-agent information and information generated through analytics and advertising technologies.

---

Information We Do Not Intentionally Collect

Vitabowl does not intentionally request or collect health information such as medical conditions, allergies, medications, pregnancy status, symptoms, blood reports, prescriptions or other medical records as part of the ordinary operation of our website.

We also do not currently provide functionality through which customers upload photographs, videos, documents or other user-generated files.

---

How We Collect Information

We may collect information:

When you create or use an account

When you place or manage an order

When you contact customer support

When you submit a review, rating or testimonial

When you interact with our website

Through third-party analytics, advertising and technical services used on our website

---

Account Authentication

Vitabowl does not currently provide Google, Apple or Facebook login. Customer verification is performed using a mobile-number-based verification process, where a verification OTP is sent through WhatsApp.

We do not use traditional email-and-password authentication for customer accounts on the website.

---

How We Use Personal Information

We may use personal information for the following purposes:

To create and manage customer accounts

To verify customer identity and authenticate accounts

To process, confirm and fulfil orders

To arrange delivery and logistics

To process payments through our payment service providers

To provide customer support and respond to enquiries

To maintain and improve our website, products and services

To prevent misuse, fraud, abuse or security incidents

To send transactional and, where permitted, promotional communications

To understand website usage and improve our marketing and advertising

To comply with applicable legal, regulatory, accounting and other lawful obligations

---

Legal Bases for Processing

Depending on the applicable law and the nature of the processing, we may process personal information based on consent, the performance of a contract or steps taken at your request, compliance with legal obligations, legitimate interests where legally available, or another lawful basis recognised by applicable law.

Where consent is required, we aim to obtain it through a clear affirmative action and provide an appropriate means to withdraw consent. Under Indian data protection law, consent is required to be free, specific, informed, unconditional and unambiguous, subject to the legal framework and applicable grounds for processing.

---

Payments

Payments made through the website may be processed by Cashfree. We also offer Cash on Delivery where available.

Vitabowl and Lorfin Lifescience Private Limited do not directly receive or store full payment-card information, CVV information, UPI credentials or net-banking credentials through our own systems as part of the payment process described above. Payment information is handled by the applicable payment provider according to its own terms and privacy practices.

---

Shipping & Logistics

We use third-party logistics and fulfilment services to deliver orders. Our domestic fulfilment process primarily uses Amazon Multi-Channel Fulfillment (Amazon MCF) through an API integration.

For fulfilment, we may provide Amazon MCF with information such as your full name, mobile number, house or building information, address line, landmark, city, state and PIN code.

Amazon MCF may, where necessary to fulfil an order or where a particular PIN code is not directly serviceable, pass relevant delivery information to other courier or logistics providers.

For export and international fulfilment activities, logistics providers may include FedEx, DHL, Aramex and UPS, depending on the shipment and destination.

---

Third-Party Services & Service Providers

We use selected third-party services to operate, secure, analyse, market and fulfil our website and services. These providers may process personal information on our behalf or independently according to their respective services and legal obligations.

Payment: Cashfree

Fulfilment: Amazon Multi-Channel Fulfillment through Amazon API

International Logistics: FedEx, DHL, Aramex and UPS, where applicable

Analytics and Advertising: Google services and Meta services

Email: Hostinger Mail / our own SMTP infrastructure

Customer Support: osTicket for email ticket management

Traffic Protection: Cloudflare

CDN / Infrastructure: Cloudflare and applicable infrastructure services

Image Hosting / Resizing: League, Glide and ServerFactory services, where applicable

---

Analytics, Advertising & Tracking

We use third-party analytics and advertising services, including Google and Meta services, to understand website usage, measure marketing activity, improve our services and support advertising activities.

Depending on the service and your settings, these services may process information such as IP address, user-agent information, device or browser information, page interactions, referral information and other analytics or advertising data generated through your interaction with our website.

We do not sell personal information to third parties. However, information may be shared with or made available to advertising platforms for targeted advertising and measurement, where applicable and permitted by law.

---

Cookies & Similar Technologies

Vitabowl does not intentionally operate a separate first-party cookie programme beyond what may be necessary for website functionality. However, third-party services used on the website, including Google and Meta services, may place, read or otherwise process cookies or similar technologies.

We use Cookiebot to provide our cookie-consent functionality and help manage applicable consent choices.

Depending on your location and applicable law, you may be able to control or withdraw consent for non-essential cookies and similar technologies through the available consent controls.

---

Marketing Communications

We may use email and WhatsApp to communicate with customers for transactional, service-related and, where permitted, promotional purposes.

Email communications may be sent through our own SMTP infrastructure using Hostinger Mail.

We do not currently use SMS as a marketing or transactional communication channel.

---

Abandoned Cart Communications

We may identify pending or abandoned carts and associate them with the relevant customer or user information in order to send appropriate follow-up communications.

Our abandoned-cart processing uses scheduled server-side processes, including cron jobs, to identify pending carts and the users associated with them.

---

Reviews, Ratings & Testimonials

Customers may submit product reviews, ratings and testimonials.

Where you submit content intended for publication, your name and the submitted review or testimonial may be displayed publicly on our website. We do not currently use a separate third-party review provider for this functionality.

---

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, enforcing agreements, preventing fraud and complying with legal or regulatory obligations.

Our current operational retention periods include:

Orders: Approximately 1 year, subject to applicable legal and business requirements.

Customer Accounts: Until account deletion, subject to applicable legal and legitimate business requirements.

Customer Support Tickets: Approximately 3 months.

Marketing Information: Until unsubscribe, withdrawal of applicable consent or deletion, subject to applicable legal requirements.

Analytics Information: Retention periods may depend on the applicable analytics provider, configuration and applicable law. We are reviewing and formalising specific analytics retention periods.

---

Data Security

We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, misuse, alteration, disclosure, loss or destruction.

Our current security measures include HTTPS/TLS, verification-code hashing, backups, vulnerability scanning and security monitoring.

No method of transmitting or storing information can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of personal information.

---

When We Share Personal Information

We may disclose personal information where reasonably necessary for operating our business and providing our services, including to:

Payment processors

Fulfilment and logistics providers

Cloud, hosting, CDN and infrastructure providers

Analytics and advertising providers

Customer support and ticketing providers

Professional advisers and service providers where necessary

Government, law-enforcement or regulatory authorities where required or permitted by applicable law

---

International Data Transfers

Although www.vitabowl.in is primarily intended for domestic customers in India, Lorfin Lifescience Private Limited also undertakes export activities and uses third-party services that may process information outside India.

Depending on the service involved, personal information may therefore be processed in India or another country where our service providers, logistics providers, technology providers or advertising platforms operate.

Where a foreign privacy law applies to our processing, we will seek to use the applicable mechanisms and safeguards required by that law for international transfers.

---

Your Privacy Rights

Depending on your location and the law applicable to you, you may have rights concerning your personal information.

These may include the right to:

Request access to personal information held about you

Request correction of inaccurate or incomplete information

Request deletion of personal information, where applicable

Withdraw consent where processing is based on consent

Request information about how your personal information is processed

Object to or restrict certain processing where such rights apply

Exercise additional rights provided by the law applicable to you

---

Access, Correction & Deletion Requests

If you believe that information we hold about you is inaccurate, you may request correction. Where the information is stored in our systems and correction is appropriate, we will update it.

You may also request deletion of your personal information where applicable. Deletion requests are currently handled manually by our designated privacy personnel.

Following a valid deletion request, applicable information will be removed from relevant systems where deletion is legally and technically possible. We will conduct appropriate checks and provide an acknowledgement of the request.

---

Requesting a Copy of Your Information

If you wish to request information about the personal data we hold about you, contact our privacy team at [email protected] .

We do not currently provide an automated privacy-data access portal. Requests are reviewed and handled manually. We may need to verify your identity before fulfilling a request in order to protect your information.

---

Marketing Choices

Where we send promotional communications, you may request to stop receiving them. You may also withdraw applicable consent where processing relies on consent.

Withdrawal of consent does not necessarily affect processing that is otherwise permitted or required by applicable law, or processing necessary for an existing transaction or legal obligation.

---

California Privacy Rights

If California privacy law applies to you and to our activities, you may have additional rights under applicable California privacy legislation. Depending on the circumstances, these may include rights to know/access, delete, correct, opt out of certain sales or sharing, limit certain uses of sensitive personal information, and receive equal treatment for exercising applicable privacy rights.

Vitabowl does not sell personal information for monetary consideration. However, our website uses Google and Meta services for analytics, advertising and measurement, and applicable California law may treat certain forms of sharing for targeted advertising as "sharing".

Where applicable, California residents may exercise their rights by contacting our privacy team at [email protected] . Cookiebot and applicable advertising-platform controls may also provide mechanisms for managing certain tracking preferences.

---

European Economic Area & United Kingdom

Where applicable European or United Kingdom data-protection laws apply, individuals may have additional rights including access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent where consent is the applicable legal basis.

Where required by applicable law, we will identify the relevant lawful basis for processing, provide information about recipients and international transfers, and provide information concerning applicable rights and complaint mechanisms.

Individuals located in the EEA or United Kingdom may contact us at [email protected] regarding applicable privacy rights.

---

Children's Privacy

Vitabowl's current product range and website are intended for adults. We do not knowingly design the current website to collect personal information from children.

If you believe that a child has provided personal information to us contrary to applicable requirements, please contact [email protected] so that we can review the information and take appropriate action.

---

Automated Decision-Making & Profiling

We do not currently use personal information to make decisions producing legal or similarly significant effects on individuals through solely automated decision-making.

---

Data Breach & Security Incidents

We maintain security measures intended to protect personal information. If we become aware of a security incident involving personal information, we will assess the incident and take reasonable steps to contain, investigate and remediate it.

Where notification is required by applicable law, we will make the required notifications to the appropriate individuals, authorities or other parties within the applicable timeframes.

---

Legal & Regulatory Disclosures

We may disclose personal information where we reasonably believe that disclosure is necessary to comply with applicable law, court orders, governmental requests, regulatory requirements or lawful requests from law-enforcement authorities.

We may also process or retain information where reasonably necessary to establish, exercise or defend legal claims, enforce our terms, prevent fraud or protect the rights, safety and security of Vitabowl, Lorfin Lifescience Private Limited, our customers or others.

---

Accuracy of Information

We aim to maintain accurate and relevant personal information. If you identify an error in information associated with your account or interactions with us, please contact our privacy team so that the information can be reviewed and corrected where appropriate.

---

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, data practices, legal requirements or regulatory expectations.

When we make material changes, we may provide additional notice where required by applicable law. We encourage you to review this page periodically for the latest version.

---

Contact Our Privacy Team

For privacy questions, data-access requests, correction requests, deletion requests, withdrawal of consent or other privacy-related concerns, please contact:

Privacy Contact

[email protected]

Customer Support

+91 99097 62089 [email protected]

You may also contact us through our Contact Us page .

---