Privacy Policy
1. Who we are
EOH Wellness (Private) Limited ("we", "us", "our") is a wellness brand registered in India. Our studio address and GSTIN are listed in the Terms of Service. For any privacy-related question, write to privacy@essenceofhope.in.
2. What data we collect
Data you give us directly
- Account & order data — name, email, phone, shipping/billing address, order history.
- Payment data — handled by our payment partners (Razorpay for India, Stripe for international). We never see or store your full card number, CVV, or UPI PIN.
- Messages — anything you write to us through the contact form, newsletter signup, or email.
Data we collect automatically
- Device & browser — user-agent string, screen size, language.
- IP address — for fraud prevention and tax calculation.
- Cookies — see section 7.
3. Why we collect it
- To process and ship your order.
- To send transactional emails (order confirmation, shipping notification, replies to your messages).
- To prevent fraud and abuse.
- To comply with Indian tax law (GST) and accounting requirements (we keep invoices for 8 years).
- To improve the studio (e.g. which products are most loved).
We do not use your data for automated profiling, advertising, or any form of decision-making that produces legal effects on you.
4. How we store and protect it
- Data is stored on encrypted disks at our hosting provider (in India for the production database).
- All admin access requires a bcrypt-hashed password and a 12-hour session cookie.
- Backups are taken daily and retained for 30 days.
- We never store card numbers, CVVs, or UPI PINs — that data lives only with our PCI-DSS-compliant payment partners.
5. Who we share it with
We share the minimum necessary with:
- Payment processors — Razorpay (India), Stripe (international). They receive your name, email, amount, and currency at checkout.
- Shipping carriers — India Post, Delhivery, BlueDart, DHL, FedEx. They receive your name, address, phone, and tracking number.
- Email service — Resend. They receive your email address and the content of transactional emails.
- Hosting & database — our infrastructure provider. They receive the encrypted database.
We do not sell, rent, or trade your data with any third party for marketing purposes.
6. Your rights
Under India's Digital Personal Data Protection Act 2023, the EU's GDPR, and California's CCPA, you have the right to:
- Access — request a copy of the data we hold on you.
- Correction — ask us to fix anything wrong.
- Erasure — ask us to delete your account and all associated data (we will keep invoices as required by tax law).
- Withdraw consent — unsubscribe from the newsletter at any time using the link in any email.
- Grievance officer — write to grievance@essenceofhope.in. We will respond within 30 days.
7. Cookies
We use a minimal set of cookies:
eoh_admin_sid— admin session (httpOnly, 12h)eoh_csrf— CSRF protection (12h)eoh_cart_v1— your cart (localStorage, 30 days)eoh_currency— your currency preference (localStorage, 1 year)
We do not use advertising cookies or third-party tracking pixels.
8. Data retention
- Order data: 8 years (required by Indian tax law).
- Account data: until you ask us to delete it.
- Contact-form messages: 2 years, then anonymized.
- Newsletter data: until you unsubscribe.
9. Children
Our products and services are not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, please write to privacy@essenceofhope.in and we will erase the data.
10. Changes to this policy
We will post any changes on this page with an updated "Last updated" date. If the changes are material, we will email you.
11. Contact us
Consumer Care
For any order, refund, or product question, our consumer care team is here to help.
Phone: +91 98212 27294
Email: care@essenceofhope.in
Hours: Mon–Sat, 10 am – 7 pm IST
EOH Wellness (Private) Limited
Plot No. 978, Pati Chanda Road
Pratapgarh, Uttar Pradesh – 230138
India
GSTIN: 09AAJCE6404C1ZV
privacy@essenceofhope.in