Legal
Privacy Policy
This site has no forms, no accounts and no advertising. We set no cookies of our own. This page explains the little that is processed anyway, and what you can do about it.
- Effective
- 6 September 2026
- Last updated
- 6 September 2026
1. Who is responsible for your data
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Data Fiduciary for this website is:
- Sandra Ayurvedics ([legal entity type — sole proprietorship / partnership / Pvt Ltd])
- Chelakode P.O., Thrissur 680587, Kerala, India
- Registration: [GSTIN or registration number, if applicable]
- Contact: Prabhakolakkattil@gmail.com · +91 94476 69943
2. What this website collects
Directly, nothing. There is no contact form, no newsletter signup, no account, no login and no payment on this site. Every call to action is a plain link that opens your own phone dialler, email client or WhatsApp.
Indirectly, three things happen that are worth naming:
a. Hosting and delivery
The site is served by Cloudflare. Like any web server, Cloudflare processes your IP address, approximate location, browser and device type in order to deliver the page and to protect the site from attack and abuse. This is necessary for the site to function at all. See Cloudflare's privacy policy.
b. Audience measurement
We may use Cloudflare Web Analytics, which is privacy-preserving by design: it sets no cookies, does not fingerprint visitors, does not track you across other websites, and reports only aggregate figures such as page views and referrers. We cannot identify you from it.
c. Your theme preference
If you switch between light and dark mode, that single preference is
saved in your browser's localStorage on your own device. It
is never transmitted to us or to anyone else, and clearing your browser
data removes it.
The material search on the homepage runs entirely inside your browser. What you type into it is never sent anywhere.
3. When you contact us
If you choose to call, email or message us on WhatsApp, we receive whatever you send: typically your name, phone number or email address, your company, and the details of your enquiry. We use this solely to respond to and fulfil your enquiry and to maintain ordinary business records of our dealings with you. We do not sell it, rent it, or use it for advertising.
WhatsApp is operated by Meta and telephone and email by your own providers. Messages you send through those channels are also handled under their respective privacy policies, which we do not control.
4. Legal basis and retention
Where you contact us, we process your data on the basis of your consent, given by voluntarily initiating contact, and for the legitimate uses permitted under the DPDP Act in the course of responding to you. Enquiry records are retained only as long as needed for the business relationship and any statutory record-keeping, and are erased when that purpose is served.
5. Sharing
We do not sell or trade personal data. We share it only where necessary with our hosting provider (above), or where we are required to by law, a court, or a government authority.
6. Your rights
Under the DPDP Act you have the right to:
- ask what personal data of yours we hold and how we have processed it;
- have inaccurate or incomplete data corrected, updated or completed;
- have your data erased where we no longer need it;
- nominate another person to exercise these rights on your behalf in the event of death or incapacity;
- withdraw consent at any time, and have a readily available means of grievance redressal.
To exercise any of these, write to Prabhakolakkattil@gmail.com or call +91 94476 69943. We will respond within the timeframes the Act requires.
7. Grievance redressal
Complaints about how your data has been handled should go to Prabha K.K. at Prabhakolakkattil@gmail.com. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
8. Children
This is a business-to-business website, not directed at children. We do not knowingly process the personal data of anyone under 18. If you believe we have, tell us and we will erase it.
9. Security
The site is served exclusively over HTTPS. We apply reasonable security safeguards to enquiry records. No system is perfectly secure, and we cannot guarantee absolute security.
10. Changes
We may update this policy. The "last updated" date at the top always reflects the current version.