This website (www.alldaystore.com) and mobile application (collectively, the ‘Platforms’) are operated by Everyday Herbal Beauty Care Private Limited (EHBC) under the ‘All Day Store’ brand.

For the purposes of the Digital Personal Data Protection Act, 2023, EHBC is the Data Fiduciary in respect of personal data collected through the Platforms.

Zota Healthcare Limited, the parent company of EHBC, provides strategic, technological, and governance oversight and does not act as a Data Fiduciary or Data Processor, except where expressly required under applicable law.

This Privacy Policy (“Privacy Policy”) constitutes a legally binding agreement between You, a natural person (hereinafter referred to as “You”, “Your” or “User”) and Us, as the owner and operator of the Platforms.

We may restrict, suspend, or terminate access to the Platforms where required for security, regulatory compliance, risk mitigation, or material breach of applicable law or Platform policies, in accordance with applicable law and principles of fairness.

You are advised to read this Privacy Policy carefully and fully understand the nature, scope, purpose, and legal basis of gathering, collecting, processing, storing, retaining, disclosing, transferring, and sharing of Your personal, sensitive personal, and other information through Your use of the Platforms.

This Privacy Policy does not apply to information You may choose to share independently with other Users, third-party sellers, logistics partners, or service providers through the Platforms where such sharing is not directly controlled by Us.

By creating an account on the Platforms and/or by accessing the Platforms or availing any services provided by Us, You signify Your free, informed, specific, and unambiguous acceptance of this Privacy Policy. If You do not agree with any provision herein, You are advised to immediately discontinue use of the Platforms.

Where required under applicable law, such consent shall be obtained through clear affirmative action and recorded in accordance with applicable legal requirements.

1. DEFINITIONS

For the purposes of this Privacy Policy, unless the context otherwise requires:

Cookies: Small data files placed on Your device when You visit or use certain features of the Platforms, enabling functionality, analytics, security, and personalization.

Data: Includes Personal Data, Sensitive Personal Data, Digital Personal Data, health data, transactional data, non-personal data, anonymised data, and any information capable of identifying You directly or indirectly.

Data Protection Law: Includes but is not limited to the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Digital Personal Data Protection Act, 2023, Consumer Protection Act, 2019, Consumer Protection (E-Commerce) Rules, 2020, and any amendments, rules, regulations, circulars, or guidelines issued thereunder.

Partners: Selected third parties, including Our group entities, sellers, manufacturers, distributors, laboratories, diagnostics partners, wellness service providers, and healthcare service partners with whom We have contractual or commercial arrangements.

Service Providers: Entities engaged by Us to process Data on Our behalf for specific, defined, and lawful purposes under written agreements incorporating confidentiality, data protection, and security obligations.

Group Entity: Includes Our parent company, subsidiaries, affiliates, associate companies, and joint ventures, whether present or future.

2. DATA WE COLLECT

We may collect, store, process, and retain the following categories of Data, subject to applicable law and Your consent where required:

Contact Information: Name, mobile number, email address, billing address, delivery address, and communication preferences.

Financial Information: Payment instrument details (processed via regulated payment gateways), transaction history, refunds, credits, and preferences.

Technical Information: Device identifiers, IP address, operating system, browser type, app version, cookie identifiers, log files, crash logs, and diagnostic data.

Transaction Information: Order details, product selections, quantities, pricing, timestamps, cancellations, returns, refunds, and preferences.

Health Information: Medical history, prescriptions, diagnostic reports, dosage instructions, treatment-related information, wellness assessments, and any healthcare-related data voluntarily shared by You.

Health information, including prescriptions and medical records, constitutes sensitive personal data and sensitive digital personal data. Such data shall be processed strictly on a need-to-know basis, subject to enhanced technical and organisational safeguards, and solely for purposes related to healthcare service delivery, legal compliance, or as otherwise permitted under applicable law.

Product and Service Information: Membership details, registrations, subscriptions, program participation, loyalty identifiers, and benefit usage.

Personal Information: Age, gender, date of birth, occupation, government-issued identification details where required for compliance or fraud prevention.

Self-Reported Information: Information You provide through surveys, forms, chats, customer support interactions, and feedback mechanisms.

Feedback and Reviews: Ratings, comments, testimonials, complaints, and product or service feedback.

Loyalty and Account Information: Membership IDs, reward points, redemption history, account activity, and partner program affiliations.

3. HOW WE COLLECT DATA

We collect Data through lawful, transparent, and fair means, including:

• Information voluntarily provided by You while using Our Platforms or visiting Our physical stores.

• Automatically collected information through cookies, SDKs, pixels, and similar technologies.

• Email and communication interactions, including open and click data.

• Information collected from third-party websites or platforms using Our authorised technology integrations.

• Information shared by Our Group Entities, Partners, or Service Providers with Your consent or as permitted under law.

• Use of third-party analytics tools such as UXCam, under contractual arrangements incorporating confidentiality, data protection, and security obligations.

4. DATA SHARED BY YOU

We collect Data when You:

• Register or create an account

• Place orders or upload prescriptions

• Participate in surveys or promotions

• Subscribe to communications

• Interact with stores or customer support

5. AUTOMATICALLY COLLECTED DATA

We may automatically collect:

• IP address and device identifiers

• Cookies, session data, usage analytics

• Security and fraud-prevention signals

6. HOW WE USE YOUR DATA

Your Data may be used for:

A. Contract fulfilment

B. Service delivery and communication

C. Partner and Group Entity enablement

D. Lawful data sharing

E. Personalisation and marketing

F. Platform improvement

G. Analytics and reporting

H. Loyalty and engagement programs

I. Customer support

J. Experience optimisation

K. Policy enforcement

L. Fraud and security prevention

M. Legal and regulatory compliance

N. Disclosed lawful purposes

7. MINORS

Minor data, if identified or reported, shall be deleted or anonymised upon verification, except where retention is required under applicable law.

8. SHARING OF DATA

Data may be shared with:

• Partners

• Group Entities

• Service Providers

• Technology vendors

• Legal or regulatory authorities

• Business successors

All under binding confidentiality and security obligations.

9. SECURITY OF DATA

We implement industry-standard safeguards.

Absolute security cannot be guaranteed due to external risks.

In the event of a personal data breach, EHBC shall take reasonable steps to mitigate potential harm and shall notify affected users and statutory authorities where such notification is required under applicable law.

10. THIRD-PARTY LINKS

We are not responsible for third-party privacy practices.

11. RETENTION OF DATA

Personal data shall be retained only for such period as is necessary to fulfil the purposes for which it was collected, comply with applicable legal and regulatory requirements, resolve disputes, enforce agreements, or for legitimate business purposes.

Upon expiry of such period, personal data shall be securely deleted, anonymised, or archived in accordance with internal retention schedules and applicable law.

12. YOUR RIGHTS

You may exercise rights including:

• Access

• Correction

• Withdrawal of consent

• Erasure

• Grievance redressal

• Nomination

You may withdraw your consent for the processing of your personal data at any time by contacting us through the details provided in this Policy, subject to applicable legal obligations. Withdrawal of consent may affect the availability of certain services.

13. DATA STORAGE

Personal Data is primarily stored on servers located within India. Where permitted under applicable law, certain data may be processed or accessed by authorised service providers outside India under appropriate contractual, technical, and legal safeguards.

14. PROCESSING YOUR DATA

Processing occurs under binding contracts and compliance audits.

15. APP PERMISSIONS

Permissions may include:

Location, Camera, Photos, SMS, Wi-Fi, Audio, Bluetooth

Used strictly for service functionality.

16. SEVERABILITY

Invalid provisions do not affect remaining clauses.

17. CHANGES TO THIS POLICY

Updates may occur periodically. Continued use implies acceptance.

18. CONTACT US

Email: care@alldaystore.com

19. GRIEVANCE OFFICER

Name: Mr. Randeep Singh

Designation: Grievance Officer – Data Protection & Platform Compliance

Email: randeep@zotahealthcare.com

Phone: +91 989 888 6508

Address: Zota House, 2nd & 3rd Floor, Navsari State Highway, Bhagwan Aiyappa Complex,

Opp. GIDC, Udhna, Pandesara Industrial Estate, Surat, Gujarat – 394221

EHBC shall maintain records of data protection–related complaints, requests, actions taken, and resolutions for audit, compliance, and statutory purposes, in accordance with applicable law.

This Privacy Policy shall be read in conjunction with the Terms & Conditions, Grievance Redressal Policy, and other applicable Platform policies.