Privacy And Policy

So Good India is committed to handling personal data openly and responsibly. This Privacy Policy explains how Life Health Foods India Private Limited a company incorporated in India with CIN U15100MH2003PTC140975 and registered office at address 213, Atlanta Estate, Goregaon East, Mumbai – 400063, (So Good India, we, us or our), processes personal data through sogoodindia.in, our customer support, promotions, retail and business activities.

For personal data processed in connection with this website and our Indian consumer activities, So Good India is the data fiduciary/data controller. We may work with companies in the Sanitarium group, including Australian Health and Nutrition Association Limited trading as Sanitarium Health Food Company, and with service providers. They process data only as described in this policy and under applicable law.

Publication check: Replace every bracketed item before publication. If the site sells products online, also publish clear product, pricing, delivery, cancellation, refund and grievance information at checkout.

1. Laws and scope

This policy is intended to meet applicable Indian privacy and digital laws, including the Digital Personal Data Protection Act 2023 (DPDP Act), its rules when in force and applicable, the Information Technology Act 2000 and applicable rules, and the Consumer Protection Act 2019 and Consumer Protection (E-Commerce) Rules 2020. We also take account of applicable Australian privacy requirements where Sanitarium group entities collect or handle personal information. Where a mandatory law gives you stronger protection, that law prevails.

2. Personal data we collect

Please do not send health, medical, government-ID, financial-account or other sensitive information unless we ask for it and it is necessary for the stated purpose. We process personal data of children only with verifiable parental or lawful guardian consent and in accordance with applicable law. We do not knowingly use children's data for tracking, behavioural monitoring or targeted advertising where prohibited.

3. How we collect data

We collect data directly from you when you browse, register, buy, enter a promotion, contact us or engage on social media; automatically through cookies and logs; and from authorised partners such as retailers, payment, delivery, analytics, marketing and recruitment providers. Where we receive data indirectly, we take reasonable steps to provide the notices required by law.

4. Purposes and consent

We use personal data only for the specific purpose for which it was collected or another lawful, compatible purpose. Before seeking consent, we provide a clear, standalone notice describing the data and purpose. Consent is voluntary, informed, specific, unambiguous and given by clear affirmative action. You may withdraw consent at any time with comparable ease; withdrawal will not affect processing already carried out lawfully, but may limit a service that depends on that data.

We may also process data without consent where permitted by applicable law, including for legal obligations, compliance with court or government directions, responding to medical emergencies, fraud prevention, network and information security, or other legitimate uses recognised by law.

5. Cookies and similar technologies

We use essential cookies for website operation and security. We request consent before placing non-essential analytics or advertising cookies where required. You can change choices through Cookies Preferences or browser settings. Disabling cookies may affect website functions.

6. Sharing and international transfers

We may share personal data with group companies, hosting and IT providers, payment and delivery partners, customer-service, analytics and marketing providers, professional advisers, insurers, regulators and authorities where required by law, and a purchaser or successor in a corporate transaction. We require service providers to use appropriate confidentiality, security and processing safeguards.

Some recipients, including Sanitarium group entities and service providers, may be located outside India, including Australia, New Zealand, the United States, the United Kingdom and other locations used by our providers. We make cross-border transfers only as permitted by applicable Indian law, including any government restrictions or notifications under the DPDP Act, and apply contractual and organisational safeguards. Australian group recipients handling Australian personal information will also apply relevant Australian privacy obligations.

7. Marketing

We send direct marketing only where permitted by law and consistent with your preferences. You can unsubscribe using the link in an email, replying as instructed to an SMS, changing account preferences, or contacting us. We honour opt-out requests as soon as reasonably practicable. Operational, transactional and legally required messages may still be sent.

8. Retention and security

We retain personal data only for as long as necessary for the stated purpose, to meet legal, tax, accounting, dispute and fraud-prevention requirements, or as otherwise allowed by law. We then delete or de-identify it securely. We use reasonable technical and organisational safeguards, including access controls, encryption where appropriate, vendor controls, monitoring and incident-response processes. No internet transmission or system is completely secure.

9. Your rights and choices

Subject to applicable law, you may request a summary of personal data and processing activities, correction, completion, updating or erasure of data that is no longer necessary, withdrawal of consent, and information about how to contact our grievance officer. You may use a consent manager recognised under applicable law when available. We may need to verify identity and may retain limited data where legally required or necessary to establish, exercise or defend legal claims.

10. Grievance and contact

To exercise rights, withdraw consent or make a complaint, contact our Grievance Officer: Marketing Manager, Email – [email protected], contact number – +91- 9820512601, address 213, Atlanta Estate, Goregaon East, Mumbai – 400063. Please use the subject line “Privacy Request”. We will acknowledge and address requests within the period required by applicable law. If you are dissatisfied, you may use the remedies available under applicable law, including the Data Protection Board of India when operational and applicable.

11. Changes

We may update this policy to reflect changes in our practices or law. We will post the updated version and effective date here and provide additional notice or seek fresh consent where required.