PRIVACY POLICY – thirstymolecule.com

PRIVACY POLICY

This Privacy Policy explains how Thirsty Molecule LLP (“Thirsty Molecule”, “we”, “our” or “us”) collects, uses, shares, stores and protects personal data when you visit or purchase from https://thirstymolecule.com (the “Website”), create an account, contact us or otherwise interact with us.

Thirsty Molecule LLP, GSTIN 27AATFC2693Q1ZF, has its business address at A 401, Raheja Serenity, Thakur Village, Borivali East, Mumbai 400066, Maharashtra, India. For privacy-related requests, email hello@thirstymolecule.com.

2.1 Information You Provide: We may collect your name, email address, telephone number, billing and shipping addresses, account username and password, order details, product preferences, reviews, customer-support communications, cancellation or replacement evidence, and any other information you voluntarily provide.

2.2 Transaction Information: We receive limited payment and transaction information needed to confirm and reconcile payments, such as payment status, transaction identifier, method category and amount. Payments are processed through Razorpay. We do not directly collect or store complete card numbers, CVV, UPI PINs, net-banking passwords or other full payment credentials.

2.3 Technical and Usage Information: When you use the Website, we and our authorised service providers may automatically receive information such as your IP address, browser and device type, operating system, referring pages, pages viewed, session activity, login status, cart activity, cookie identifiers and error or security logs.

2.4 Information from Other Sources: We may receive delivery and tracking updates from Shiprocket and its courier partners, payment status from Razorpay, and information from service providers that help us prevent fraud, maintain the Website or support customers.

We collect information through Website forms, WooCommerce checkout and account functions, orders, cookies and similar technologies, emails, customer-support interactions, reviews, promotions and lawful offline interactions. You may browse general Website content without creating an account, but an order requires the checkout information necessary to process payment and delivery. Account availability and guest checkout may depend on the Website settings in force at the relevant time.

We use personal data to operate the Website; create and manage accounts; process and fulfil orders; accept and reconcile payments; arrange shipment and tracking; communicate order and service updates; respond to queries and claims; prevent fraud and misuse; maintain security; improve products, services and Website performance; maintain financial and business records; comply with law; establish or defend legal claims; and send marketing communications where permitted or consented to.

We do not sell personal data. We do not use facial recognition, voice recognition or biometric identification through the Website.

5.1 WooCommerce: The Website uses WordPress and WooCommerce to operate the online store. WooCommerce may process account, cart, checkout, order, billing, shipping and technical data on our behalf or within our Website environment.

5.2 Razorpay: At checkout, information required to process or support payment—such as the transaction amount, billing/contact information and selected payment method—is transmitted to Razorpay and its banking, card-network or payment partners. Razorpay processes payment data under its own terms and privacy policy.

5.3 Shiprocket: We share the customer’s name, contact number, email address where required, shipping address, pin code, order contents, value and related shipment information with Shiprocket and relevant courier partners to generate shipping labels, dispatch, deliver, provide tracking, manage delivery attempts and investigate delayed, damaged or lost shipments.

We may share only the information reasonably necessary with hosting, website-maintenance, email, analytics, marketing, fraud-prevention, accounting, professional-advisory and customer-support providers; government authorities, regulators, courts or law-enforcement agencies where disclosure is legally required; and parties involved in a merger, restructuring, financing or transfer of all or part of our business, subject to appropriate safeguards.

Our service providers may process information under their own privacy policies and applicable contractual or legal obligations. Links to third-party websites or services are governed by those third parties’ policies, not this Privacy Policy.

The Website may use essential cookies needed for security, login, cart and checkout functions; functional cookies that remember preferences; analytics or performance cookies that help us understand Website use; and advertising or marketing cookies where configured and permitted. Some cookies may be placed by third-party plugins or service providers.

You can control non-essential cookies through any cookie controls made available on the Website and through your browser settings. Blocking essential cookies may prevent login, cart, checkout or other core functions from working correctly.

Where you have opted in or where otherwise permitted by law, we may send product updates, offers or other marketing communications. You may unsubscribe using the link or instructions in the communication or by emailing hello@thirstymolecule.com. Service messages concerning an account, order, payment, delivery, security or policy update are not marketing messages and may still be sent where necessary.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including completing transactions, supporting customers, preventing fraud and meeting tax, accounting, regulatory and legal requirements. Account data may be retained while the account remains active. Where deletion is requested, we may retain limited records that the law requires us to keep or that are necessary to establish, exercise or defend legal claims.

We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information, including access controls and encrypted transmission through SSL/TLS where supported. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Customers are responsible for protecting their account credentials and should notify us promptly if unauthorised account use is suspected.

Subject to applicable law, you may request access to, correction or updating of, or erasure of personal data; withdraw consent where processing is based on consent; opt out of marketing; or raise a grievance about our handling of personal data. Some account information may be editable through the My Account section of the Website.

To submit a request, email hello@thirstymolecule.com from the email address associated with your account and provide sufficient information to verify your identity and locate the relevant records. We may refuse or limit a request where permitted by law, including where retention is required for a legal obligation or an ongoing dispute.

The Website is not intended for independent use or purchase by persons under 18 years of age. A parent or legal guardian may use the Website or place an order on behalf of a minor. We do not knowingly seek to collect personal data directly from children for marketing purposes.

Privacy and Grievance Officer
Thirsty Molecule LLP
A 401, Raheja Serenity, Thakur Village
Borivali East, Mumbai 400066, Maharashtra, India
Email: hello@thirstymolecule.com

Please include “Privacy Request” or “Grievance” in the email subject line, together with sufficient details for us to understand and respond to the request.

We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000 and its applicable rules, the Digital Personal Data Protection Act, 2023 and rules brought into force from time to time, and applicable consumer-protection and e-commerce requirements.

We may revise this Privacy Policy from time to time. The updated version becomes effective when posted on the Website, unless a later effective date is stated. We may provide additional notice of material changes where appropriate.

If any provision of this Privacy Policy is held to be unlawful, invalid or unenforceable, the remaining provisions will continue in full force and effect.

This Privacy Policy is governed by the laws of India. Subject to applicable consumer-protection and data-protection law, the courts at Mumbai, Maharashtra shall have exclusive jurisdiction over disputes arising from or relating to this Privacy Policy.