Clean Label  |   Science-Backed  |   Vegan Friendly  |  Third-Party Tested  |  Non-GMO  |  Bioavailable  |  No Fillers  |  Clinically Studied  |  Clean Label  |   Science-Backed  |   Vegan Friendly  |  Third-Party Tested  |  Non-GMO  |  Bioavailable  |  No Fillers  |  Clinically Studied 
Sign in
Sign in

Privacy Policy

Effective date: 10th September 2026

1. Objective, scope and acceptance

This Privacy Policy (“Policy”) describes how GENEVO VENTURES, a company incorporated in India with its registered office at OFF NO-01, FIRST FLOOR, BALNIKETAN BHAWAN, HAMIDIA ROAD, Bhopal, Madhya Pradesh-462001 (“Pillpop”, the “Company”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal data in connection with shoppillpop.com, our associated applications, communication channels and services (together, the “Platform”). We are the data fiduciary for this personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and this Policy is also published in accordance with the Information Technology Act, 2000 and the rules made under it.

By accessing or using the Platform, placing an order, or otherwise submitting personal data to us, you accept this Policy and the collection, use and disclosure of your personal data as described in it. Where a particular use of your data requires your consent under applicable law, we obtain that consent through the specific mechanisms described in this Policy, and you may withdraw it as described in Section 7. If you do not agree with this Policy, please do not use the Platform.

This Policy applies to personal data we collect through the Platform; our customer-service channels, our commerce and marketing partners, and offline interactions connected with our business. It does not apply to third-party websites, services or platforms that we do not own or control, even where the Platform links to them (see Section 11), and it does not apply to information processed by our business partners in their own right as independent data fiduciaries.

2. Definitions

“Personal data” means any data about an individual who is identifiable by or in relation to such data, as defined in the DPDP Act. “Processing” means any operation performed on personal data, including collection, storage, use, sharing and erasure. “You” or “user” means any person who accesses or uses the Platform, whether as a visitor browsing the Platform or as a customer who places an order or creates an account. The scope of data we collect differs between visitors and customers, as described in Section 4.

3. Eligibility

The Platform and our products are intended for persons aged 18 or above who are competent to contract under the Indian Contract Act, 1872. By using the Platform, you represent that you meet these requirements. Section 15 describes how we treat data relating to children.

4. Personal data we collect

Data you provide to us. When you place an order, create an account, join a waitlist, take our quiz, subscribe to communications, post a review, participate in a promotion or survey, or contact us, we may collect your name, email address, phone number, shipping and billing address, date of birth (where offered), order details, quiz and survey responses, preferences and opinions, and the contents of your communications with us. Certain details are mandatory to fulfil an order; if you choose not to provide them, we may be unable to provide the relevant service.

Payment data. Payments are processed by our checkout and payment partners (currently including GoKwik and its integrated payment gateways) on their own secure, industry-certified systems. We do not store your full card number, CVV, UPI PIN or banking credentials; we receive payment confirmation and such limited details as are needed to fulfil, reconcile and support your order.

Data collected automatically. When you use the Platform, we and our service providers collect technical and usage data, including IP address, approximate (city-level) location, device identifiers, browser and operating-system type, network information, referring pages, pages viewed, session and clickstream data, and interactions with our content and communications. This is collected through cookies and similar technologies described in Section 8, and through server logs and telemetry used for performance, security and fraud prevention.

Data from third parties. We may receive personal data about you from our service providers and partners — for example checkout and payment partners (order and fraud signals), logistics partners (delivery status), communication platforms (delivery and engagement data), review platforms, social-media platforms where you interact with us, and analytics and advertising partners — and may combine it with data we already hold, for the purposes in Section 5.

Customer-service records. Calls, chats and correspondence with our customer-service channels may be recorded and retained for quality, training, dispute-resolution and fraud-prevention purposes.

Data we do not seek. We do not require health records, diagnoses or prescriptions to sell our products, and our quiz responses are lifestyle preferences, not medical information. If you voluntarily send us information of this kind, we will use it only to respond to you and handle your request.

5. Purposes of processing

We process personal data for the following purposes:

  • to process, fulfil, deliver and support your orders, including payments, shipping, delivery updates, returns, refunds and warranty or quality claims;
  • to create and administer your account and provide customer service;
  • to send transactional and service communications relating to your orders, account and requests, by email, SMS, WhatsApp, RCS or similar channels;
  • to send you marketing and promotional communications where you have opted in, as described in Section 7;
  • to personalise your experience of the Platform, including product recommendations based on your quiz responses, browsing and purchase history;
  • to conduct analytics, measurement, market and consumer research, and internal reporting on demographics, preferences and shopping behaviour, and to develop, test and improve our products, Platform and services;
  • to operate, secure and maintain the Platform, detect, investigate and prevent fraud, abuse and security incidents, and enforce our terms;
  • to comply with applicable law, respond to lawful requests from authorities, maintain statutory records, and establish, exercise or defend legal claims;
  • for our legitimate internal business purposes reasonably ancillary to the above, such as audits, record-keeping, corporate governance and professional advice; and
  • for any other purpose that is disclosed to you at the time of collection, or for which you separately give consent.

6. Lawful bases

We process personal data on the basis of your consent, and for the legitimate uses recognised by Section 7 of the DPDP Act — including processing for a purpose for which you have voluntarily provided your data and have not indicated objection, compliance with law and judgments, responding to medical emergencies, and employment-related purposes. Processing necessary to perform our contract with you (fulfilling an order you have placed) is undertaken on the basis of the consent inherent in your purchase and the voluntary provision of your data for that purpose.

7. Consent and communications

Transactional communications (order confirmations, delivery updates, service and safety notices, replies to your requests) are sent as necessary to serve you and do not depend on marketing consent.

Marketing communications (offers, new products, content and promotions) are sent by email, SMS, WhatsApp or similar channels where you have opted in — for example by subscribing, ticking a consent box at checkout, or messaging us first on a channel. Where you have expressly opted in, we may send promotional communications to your registered mobile number in accordance with the Telecom Commercial Communications Customer Preference Regulations, 2018, including through consent registered under the mechanisms prescribed by those regulations.

Withdrawal. You may withdraw any consent at any time — via the unsubscribe link in emails, by replying STOP or using the opt-out mechanism on SMS/WhatsApp, through account settings where available, or by writing to Support@shoppillpop.com. Withdrawal is prospective: it does not affect processing already carried out, and data may continue to be retained where Section 13 or applicable law permits. Withdrawing consent required for core operations (for example, order data needed to deliver an order) may limit our ability to provide the relevant service.

8. Cookies and tracking technologies

The Platform runs on WordPress with WooCommerce and uses cookies, pixels, tags, software development kits and similar technologies (together, “cookies”) to operate and improve the Platform. These currently include:

  • Essential cookies — required for the cart, checkout, login and security to function; these cannot be switched off;
  • Analytics — including Google Analytics 4, to measure traffic, performance and use of the Platform in aggregate; and
  • Advertising and measurement — including the Meta Pixel, to measure campaigns and reach people who have shown interest in Pillpop on advertising platforms.

We may adopt comparable technologies and providers from time to time for the same categories of purpose. Non-essential cookies are set in accordance with the choices you make through the cookie notice on the Platform, and you can change those choices through the cookie settings link in the footer or your browser settings. Blocking cookies may disable some features of the Platform. You can additionally opt out of Google Analytics through Google’s opt-out browser add-on and manage advertising preferences within your Meta account settings.

9. Sharing of personal data

We do not sell or rent personal data. We share it, on a need-to-know basis, with:

  • Service providers and data processors acting on our instructions under contract — checkout and payment partners, logistics and courier partners (who receive your name, address and phone number to deliver orders), hosting and IT providers, communication platforms for email, SMS and WhatsApp, customer-service tools, analytics and advertising partners as described in Section 8, and professional advisers such as accountants, auditors and lawyers;
  • Our affiliates and group entities, for the purposes described in this Policy and consistent with it;
  • Our manufacturing partner, which receives aggregate demand and quality information only, not customer-level personal data;
  • Co-sponsors of promotions or events, where you participate and are informed at the time of collection;
  • Government authorities, regulators, courts and law enforcement, where disclosure is required or permitted by law, or reasonably necessary to protect our rights, users or the public; and
  • A prospective or actual acquirer or successor, in connection with any merger, acquisition, financing, reorganisation or sale of all or part of our business — in which case your personal data may be transferred as a business asset, will remain subject to protections consistent with this Policy, and we will take reasonable steps to notify you of any change in the applicable privacy policy.

Our processors are contractually bound to confidentiality and to process personal data only on our documented instructions. Third parties who receive your data in their own right (for example, an advertising platform where you hold an account) process it under their own privacy policies as independent data fiduciaries.

10. Reviews and user content

If you post reviews, comments or other content on the Platform or tag us on social media, that content — including any personal data you choose to include in it — may be publicly visible and may be used by us in Platform and marketing materials with attribution to the name you posted under. You are responsible for the information you choose to make public. You may request removal of your review by contacting us.

11. Third-party links and services

The Platform may contain links to third-party websites, advertisements or services, and features provided by third parties (such as embedded content and social-media features). These are governed by the privacy policies of those third parties. We do not control, endorse or make representations about such third parties, and, to the maximum extent permitted by applicable law, we are not responsible for their content, privacy practices or security. We encourage you to review the privacy policy of every site you visit.

12. Storage and international transfers

Personal data is stored on our systems and those of our service providers. Some providers (for example Google, Meta and certain communication platforms) process data on servers located outside India, including in jurisdictions with data-protection standards different from India’s. We transfer personal data outside India only as permitted by the DPDP Act — that is, to territories not restricted by the Central Government — and we require our providers to protect it consistently with this Policy. By using the Platform and submitting personal data, you acknowledge such transfer, storage and processing.

13. Data retention

We retain personal data for as long as reasonably necessary for the purposes described in this Policy, and thereafter as required or permitted by applicable law. Typical periods are:

  • order, invoice and payment-reconciliation records: 8 years, in line with Indian tax and company-law record-keeping requirements;
  • account data: for the life of your account, and up to 90 days after verified closure or a deletion request, subject to the other periods in this Section;
  • marketing data: until you opt out or withdraw consent, after which we retain a suppression record of your contact details so that your opt-out is honoured;
  • analytics data: per our analytics providers’ retention settings (currently 14 months for Google Analytics user-level data); and
  • customer-service records, disputes and fraud-prevention records: for as long as reasonably required for quality, defence of legal claims and prevention of abuse.

Copies may persist for a limited period in routine backups and archives before being overwritten. When retention ends, we delete personal data or irreversibly anonymise it, after which it is no longer personal data.

14. Your rights

Subject to applicable law, you have the right to: access a summary of the personal data we hold about you and the processing activities undertaken; correction and completion of inaccurate or incomplete data; erasure of data that is no longer necessary for the purpose for which it was processed, unless retention is required or permitted by law; grievance redressal as described in Section 19; and nomination of another individual to exercise your rights in the event of death or incapacity.

To exercise these rights, write to support@shoppillpop.com from the contact details registered with us. We may need to verify your identity before acting, and we may decline or limit requests where permitted by law — for example where data must be retained under Section 13, where a request is manifestly unfounded or excessive, or where it would adversely affect the rights of others. We aim to acknowledge requests within 72 hours and respond within 15 days.

15. Children

The Platform is not directed at children, and we do not knowingly process the personal data of persons under 18 except with such parental consent as the law requires. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If we become aware that a child’s data has been collected contrary to this Section, we will take prompt steps to delete it. If you believe this has occurred, contact us at support@shoppillpop.com.

16. Security

We implement reasonable security safeguards appropriate to the nature of the data we process, including HTTPS encryption in transit, encrypted storage, access controls that limit personal data to personnel who need it, monitoring, and contractual security obligations on our service providers. Payment processing is handled by partners maintaining industry-standard certifications for payment security.

No method of transmission or storage is completely secure, and the transmission of information over the internet is undertaken at your own risk. To the maximum extent permitted by applicable law and provided we have implemented the reasonable security safeguards required of us, we shall not be liable for loss or damage arising from unauthorised access, hacking, tampering or other acts of third parties, or from events beyond our reasonable control.

17. Data breaches

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users in the form and manner required under the DPDP Act and applicable rules and will take reasonable steps to mitigate harm.

18. Job applicants

If you submit a résumé or application to us, we will use it to evaluate you for current and future opportunities, keep it confidential within our hiring process, and retain it for a reasonable period for recruitment purposes.

19. Changes to this Policy

We may amend this Policy from time to time. The revised Policy will be posted on this page with an updated effective date and applies prospectively from posting; your continued use of the Platform after posting constitutes acceptance of the revised Policy. Where a change introduces a new purpose that requires fresh consent under applicable law, we will seek that consent before applying the change to you.

20. Grievance redressal, governing law and general

Grievance Officer: UJJWAL THARANI

Email: Utharani@shoppillpop.com

Address: OFF NO-01, FIRST FLOOR, BALNIKETAN BHAWAN, HAMIDIA ROAD, Bhopal, Madhya Pradesh-462001.

We aim to acknowledge grievances within 72 hours and resolve them within 15 working days. If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act.

This Policy is governed by the laws of India, and courts at Bhopal, Madhya Pradesh shall have exclusive jurisdiction over disputes arising from it, subject to any mandatory forum prescribed by law. If any provision of this Policy is held invalid or unenforceable, the remaining provisions continue in full force and effect.