Privacy policy
Last updated: 22 October 2026
This policy explains what personal data HVB Labs Private Limited ("HVB", "we", "us") collects when you use humanvsbiology.com, why we collect it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). We are the data fiduciary for the personal data described here.
1. Who we are
HVB Labs Private Limited, a company incorporated under the Companies Act, 2013 (CIN: U10790MH2026PTC473428). Registered office: 205, 2nd Floor, Stovewala House, CST Road, Kurla West, Mumbai, Maharashtra 400070, India. Email: info@humanvsbiology.com.
2. What we collect
| Category | Examples | When |
|---|---|---|
| Identity and contact | Name, email address, mobile number, shipping and billing address | Checkout, account creation, founding-list signup, WhatsApp or email contact |
| Order and payment | Products ordered, amounts, payment method, transaction reference from Razorpay, cash-on-delivery confirmation status | Checkout and fulfilment. We never see or store your card number, CVV, UPI PIN or bank login. Razorpay handles those. |
| Refill eligibility | A marker on your customer record that you have bought a Monthly pack, and when, so the refill price applies to your later orders | After your first paid Monthly order |
| Founding-list signup | Name, email, WhatsApp number, work profile, working hours | Pre-launch form on the coming-soon page or product page |
| Guarantee claims and support | Order number, what you tell us about your experience, bank or UPI details if a refund on a cash-on-delivery order is approved | When you claim a guarantee or contact us |
| Reviews | Name, city, rating, review text, photos or video you choose to upload | When you post a review |
| Device and usage | IP address, device type, browser, pages viewed, referring site, approximate location, cookie identifiers | Automatically, when you browse |
We do not collect health records. Work profile and working hours are collected only to understand who our customers are and to tailor how we communicate.
3. Why we use it
- To deliver your order: process payment, confirm cash-on-delivery orders by WhatsApp or automated call, print the shipping label, send dispatch and delivery updates.
- To apply the refill price: recognise you at checkout by email address or mobile number so the refill price applies to Monthly packs after your first, and, if you have consented to marketing, remind you when a pack is likely to run out.
- To honour the guarantee: verify one claim per person, review your routine with you, and pay an approved refund.
- To support you: answer questions by email or WhatsApp.
- To send marketing, only with your consent: launch news, your founding-member code, product updates. Every message has an opt-out.
- To understand and improve the site: analytics, heatmaps and error logs.
- To meet legal obligations: tax invoices, accounting records, fraud prevention, responding to lawful requests.
4. Consent
When you place an order, create an account or submit a form, you consent to the processing needed to do what you asked for. Marketing consent is separate: it is the checkbox at checkout or on the signup form, and you can withdraw it at any time by clicking unsubscribe in any email, replying STOP on WhatsApp, or emailing us. Withdrawing consent does not affect processing that already happened, or processing we need to complete your order or meet the law.
5. Who we share it with
We share personal data only with service providers who process it on our instructions, and only what each one needs:
- Shopify — store platform, checkout, order records, email notifications.
- Razorpay — payment processing (UPI, cards, net banking, wallets).
- Shiprocket and its courier partners — shipping, tracking, cash-on-delivery collection.
- Interakt (and, if used, HillTeck) — WhatsApp messages such as order updates, reminders and cash-on-delivery confirmation, and automated-call confirmation.
- Judge.me — collecting and displaying reviews.
- Google (Analytics), Meta (Pixel and Conversions API), Microsoft (Clarity) — site analytics and advertising measurement.
- Our email and messaging providers — order emails, launch emails, WhatsApp Business.
We do not sell personal data. We may disclose it if the law requires, or to protect our rights, our customers or the public. Some providers store data on servers outside India. We allow this only where the provider offers contractual and technical safeguards and where Indian law does not restrict the transfer.
6. Cookies and tracking
We use cookies and similar technologies for the shopping cart and login (essential), for analytics (Google Analytics, Microsoft Clarity) and for advertising measurement (Meta Pixel). You can block non-essential cookies in your browser; the cart and checkout still work.
7. How long we keep it
- Order, invoice and payment records: 8 years from the end of the financial year of the order, as required by tax and company law.
- Founding-list signups that never become customers: 12 months after launch, then deleted.
- Marketing data: until you withdraw consent.
- Support and guarantee-claim messages: 3 years.
- Analytics data: per the retention setting of each tool, no longer than 26 months.
We delete or anonymise data once its purpose ends, unless we must keep it by law.
8. Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how we have used it.
- Correct inaccurate or incomplete data, or update it.
- Erase data that we no longer need for the purpose you gave it, unless the law requires us to keep it.
- Withdraw consent at any time.
- Nominate a person to exercise these rights for you if you are unable to.
- Raise a grievance with our Grievance Officer and, if unresolved, with the Data Protection Board of India.
To use any of these, email info@humanvsbiology.com with the subject "Data request" from the email address on your account, or write to the registered office. We will verify your identity, acknowledge within 48 hours and respond within 30 days.
9. Grievance Officer
Mohd Faiz Khandwani, Director
HVB Labs Private Limited, 205, 2nd Floor, Stovewala House, CST Road, Kurla West, Mumbai, Maharashtra 400070
Email: info@humanvsbiology.com (subject: "Grievance")
Phone: +91 91378 95027
10. Children
Our products and site are for adults aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, email us and we will delete it.
11. Security
Payments run on Razorpay's PCI-DSS certified infrastructure. The store runs on Shopify, with TLS on every page. Access to customer data inside HVB is limited to the people who need it to fulfil orders and support you. No system is perfectly secure; if a breach affects your data, we will inform you and the Data Protection Board as the law requires.
12. Changes
We will post any change to this policy on this page with a new "last updated" date. If a change materially affects how we use your data, we will email you before it takes effect.