Privacy Policy

Effective Date: 27-07-2026 Last Updated: 27-07-2026 This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or make a purchase through www.novipets.in (the “Website”). This Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) read with the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws of India. By using the Website and providing your personal data, you acknowledge that you have read and understood this Privacy Policy. 1. Who We Are (Data Fiduciary) For the purposes of the DPDP Act, the “Data Fiduciary” responsible for your personal data is: Brand: NOVI Brand Owner: Konoha Ventures LLP Grievance Officer details are provided in Section 11 of this Policy. 2. Definitions “Personal Data” means any data about an individual who is identifiable by or in relation to such data. “Data Principal” means you — the individual to whom the personal data relates. “Data Fiduciary” means NOVI, which determines the purpose and means of processing your personal data. “Processing” means any operation performed on personal data, including collection, storage, use, and sharing. 3. Personal Data We Collect 3.1 Mandatory Data (required to fulfil your order) To process and deliver your order, we collect the following personal data, which is necessary and without which we cannot fulfil your purchase: Customer Name; Delivery Address; Contact details — email address and/or phone number. This data is collected strictly for the purpose of order processing, delivery, communication regarding your order, and customer support. 3.2 Optional Data (for personalised services) You may voluntarily provide details about your pet (such as pet name, breed, age, or coat/skin needs) to help us offer personalised product recommendations and services. Provision of this data is entirely optional. Choosing not to provide it will not affect your ability to purchase our products. 3.3 Automatically Collected Data When you visit the Website, limited technical data (such as device/browser information and pages visited) may be collected through cookies or analytics tools to help the Website function and improve. You may control cookies through your browser settings. 4. Purpose of Processing We process your personal data only for the following specified and lawful purposes: Processing, confirming, packing, and delivering your orders; Communicating with you regarding your order, delivery status, and support queries; Providing personalised product recommendations (only where you have provided optional pet details); Processing refunds, returns, and resolving complaints; Complying with applicable legal, tax, and regulatory obligations; With your separate consent, sending you offers, updates, or marketing communications (which you may opt out of at any time). We follow the principle of data minimisation — we collect only the data necessary for these purposes. 5. Legal Basis — Consent We process your personal data on the basis of your consent, which you provide at the time of submitting your details on the Website. In accordance with the DPDP Act, your consent is free, specific, informed, unconditional, and unambiguous, and is limited to the personal data necessary for the specified purpose. Where processing is necessary for certain legitimate uses permitted under the DPDP Act (such as fulfilling a purpose for which you have voluntarily provided data), we may process data on that basis as permitted by law. 6. Your Rights as a Data Principal Under the DPDP Act, you have the following rights in respect of your personal data: Right to access — to obtain a summary of the personal data we process about you and the processing activities; Right to correction and erasure — to request correction, completion, updating, or erasure of your personal data; Right to grievance redressal — to have your grievances addressed by us (see Section 11); Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity; Right to withdraw consent — to withdraw your consent at any time, as easily as it was given. Withdrawal will not affect the lawfulness of processing carried out before withdrawal. To exercise any of these rights, please contact our Grievance Officer using the details in Section 11. 7. Data Sharing and Disclosure We do not sell your personal data. We may share your personal data only with: Logistics and courier partners (e.g., our shipping/fulfilment provider) strictly for the purpose of delivering your order; Payment gateways and processors, strictly to process your payments securely; Service providers (such as IT, analytics, or communication tools) engaged by us as Data Processors under appropriate obligations of confidentiality and security; Government authorities, courts, or law-enforcement agencies where required by law. Any Data Processor engaged by us is bound to process your data only under our instructions and to maintain appropriate security safeguards. 8. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including order fulfilment, customer support, and to comply with legal, accounting, or tax obligations. When your personal data is no longer required and there is no legal obligation to retain it, we will erase it, in accordance with the DPDP Act. 9. Data Security We implement reasonable security safeguards to protect your personal data against unauthorised access, disclosure, alteration, and loss, in line with the DPDP Act and the reasonable security practices required under the Information Technology Act, 2000 and the SPDI Rules, 2011. These measures include appropriate technical and organisational controls proportionate to the nature of the data we handle. In the event of a personal data breach, we will take appropriate action and provide intimation to the affected Data Principals and to the Data Protection Board of India, as required under the DPDP Act and DPDP Rules. 10. Children’s Data Our products and Website are intended for adults (aged 18 years and above). We do not knowingly collect personal data of children without verifiable consent of a parent or lawful guardian. In accordance with the DPDP Act, we do not undertake processing likely to cause detrimental effect on a child, nor do we carry out tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us personal data, please contact our Grievance Officer for its removal. 11. Grievance Redressal If you have any questions, concerns, or grievances regarding this Privacy Policy or the processing of your personal data, or wish to exercise your rights, you may contact our Grievance Officer: Grievance Officer Name: Divya Nair Email: connect@jpandassoc.in Phone: 8879851598 Address: Gala No. 09, Jyoti Industrial Estate, Noori Baba Darga Road, Makhmali Talao, Thane West - 400 601 We will acknowledge and address your grievance within the timelines prescribed under the DPDP Act and DPDP Rules. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India. 12. Cross-Border Data Transfer Where any personal data is transferred or processed outside India (for example, through cloud or service providers), such transfer will be carried out only in accordance with the DPDP Act and any restrictions notified by the Central Government. 13. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in law or our practices. The updated version will be posted on this page with a revised “Last Updated” date. We encourage you to review this Policy periodically. 14. Governing Law This Privacy Policy shall be governed by and construed in accordance with the laws of India, and any disputes shall be subject to the exclusive jurisdiction of the courts at Mumbai, Maharashtra.