Privacy Policy
Last updated August 15, 2026
This policy explains what personal data Gen1Pro Nutrition collects, why, and what rights you have over it. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Who we are
Pure Source Nutrition Pvt. Ltd., Industrial Plot No. 201, Khasra No. 155, Extended Lal Dora, Pooth Khurd, Delhi 110039, India, operating gen1pronutrition.com, is the Data Fiduciary responsible for the personal data described here.
What we collect
- Order data: name, delivery and billing address, email address, phone number.
- Payment data: processed directly by our payment gateway. We do not store your card number, CVV or UPI PIN at any point.
- Account data: if you create an account — your email, a hashed password, and your order history.
- Communications: the content of emails and messages you send us.
- Technical data: IP address, browser type, device type, and pages visited, collected through cookies and server logs.
Why we use it
- To process, dispatch and deliver your orders, and to handle returns
- To provide customer support and answer your questions
- To meet legal obligations, including tax and food-safety record keeping
- To detect and prevent fraud
- To send marketing messages — only where you have opted in, and you can withdraw at any time
Who we share it with
We do not sell your personal data. We share it only with parties who need it to deliver the service:
- Courier and logistics partners, to deliver your order
- Payment gateways, to process your payment
- Our hosting and email service providers
- Government authorities, where required by law
Each of these is bound to use the data only for the purpose we share it for.
How long we keep it
Order and invoice records are retained for 8 years to meet tax and accounting requirements. Account data is kept until you ask us to delete it. Marketing consent records are kept until you withdraw consent, and for a reasonable period afterwards to prove that the withdrawal was honoured.
Your rights
Under the DPDP Act, 2023 you have the right to:
- Access the personal data we hold about you
- Have inaccurate or incomplete data corrected
- Have your data erased, subject to our legal retention obligations
- Withdraw consent you have previously given
- Nominate another person to exercise these rights on your behalf if you are unable to
- Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved
To exercise any of these, write to [GRIEVANCE OFFICER EMAIL]. We will respond within 30 days.
Cookies
We use cookies that are necessary for the site to work — keeping you logged in and remembering your cart — and analytics cookies to understand how the site is used. You can block cookies in your browser settings, but the cart and checkout will not work correctly without the necessary ones.
Security
The site is served over HTTPS, passwords are stored hashed, and access to customer data is limited to staff who need it. No system is perfectly secure; if a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as required by law.
Children
Our products are not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
We may update this policy. The revision date at the top of this page always reflects the current version. Material changes will be notified by email to account holders.
