Privacy Policy

Last Updated: November 21, 2025 | Effective Date: November 21, 2025

1. Introduction

Welcome to the privacy policy of Aruna Chaudhary, Independent Herbalife Distributor. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you interact with our website, services, and communications.

We are committed to protecting your privacy and ensuring the security of your personal information. This policy complies with:

• The Information Technology Act, 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (India)
• General Data Protection Regulation (GDPR) where applicable
• Google Ads advertising policies
• Herbalife International distributor compliance requirements
• Other applicable data protection laws and regulations

By using this website, submitting forms, or providing your information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us, including but not limited to:

• Contact Information: Name, email address, phone number, mailing address, city, state, postal code, country
• Demographic Information: Age, date of birth, gender (where legally permissible and relevant)
• Health & Wellness Information: Current weight, height, health goals, dietary preferences, fitness level, medical conditions (only when voluntarily provided for consultation purposes)
• Account Information: Username, password, security questions and answers (if you create an account)
• Communication Information: Messages, inquiries, feedback, testimonials, reviews, survey responses
• Transaction Information: Purchase history, product preferences, payment method details (processed through secure third-party payment processors)
• Business Opportunity Information: If you express interest in becoming a distributor, we may collect professional background, employment status, and financial information

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Device Information: IP address, browser type and version, operating system, device type, unique device identifiers
• Usage Information: Pages viewed, time spent on pages, links clicked, referring/exit pages, date and time of visits
• Location Information: General geographic location based on IP address (city, region, country)
• Technical Information: Browser settings, screen resolution, language preferences, time zone

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. See Section 8 for detailed information about cookies.

2.4 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

• Social media platforms (if you interact with us on social media)
• Analytics providers (Google Analytics, Facebook Pixel)
• Advertising networks and partners
• Payment processors (for transaction verification)
• Public databases and data aggregators (for address verification)

3. How We Use Your Information

3.1 Primary Uses

We use your personal information for the following purposes:

3.2 Business Operations

• Processing payments and preventing fraud
• Maintaining and improving website functionality
• Analyzing website usage and user behavior
• Conducting market research and analytics
• Ensuring security and preventing abuse
• Complying with legal obligations and regulations

3.3 Legal Basis for Processing (GDPR Compliance)

Where applicable under GDPR, we process your personal information based on:

• Consent: You have given explicit consent for specific purposes
• Contract Performance: Processing is necessary to fulfill our contractual obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing is required to comply with legal requirements

4. Information Sharing and Disclosure

4.1 When We Share Your Information

We may share your personal information with third parties in the following circumstances:

4.2 Information We DO NOT Share

We will NEVER:

• Sell your personal information to third parties for their direct marketing purposes
• Share your sensitive health information without explicit consent
• Disclose your payment card details (processed securely by payment processors)
• Provide your information to competitors or unauthorized parties
• Use your information for purposes not disclosed in this policy without notification

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Restricted access to personal information on a need-to-know basis
• Authentication: Strong password requirements and multi-factor authentication
• Secure Storage: Personal information stored on secure servers with regular backups
• Regular Monitoring: Continuous monitoring for security threats and vulnerabilities
• Staff Training: Regular privacy and security training for team members
• Third-Party Audits: Periodic security assessments and compliance audits

5.2 Limitations

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

6.1 Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.2 Deletion of Data

After the retention period expires, we will securely delete or anonymize your personal information. You may request earlier deletion by contacting us (see Section 12).

7. Your Rights and Choices

7.1 Your Privacy Rights

Depending on your location and applicable laws, you have the following rights regarding your personal information:

7.2 Marketing Communications

You can opt-out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Replying "STOP" to SMS messages
• Contacting us directly at Support@wellnessaruna.life
• Updating your communication preferences in your account settings

Note: Even if you opt-out of marketing communications, we may still send transactional messages (order confirmations, delivery updates, account notifications).

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using the information in Section 12. We will respond to your request within 30 days (or as required by applicable law).

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device and remember your preferences.

8.2 Types of Cookies We Use

8.3 Third-Party Cookies

We use third-party services that may set cookies on your device:

• Google Analytics: Website traffic analysis and user behavior tracking
• Google Ads: Advertising campaign measurement and optimization
• Facebook Pixel: Social media advertising and conversion tracking
• YouTube: Video content embedding (if applicable)

8.4 Managing Cookies

You can control cookies through your browser settings:

• Block All Cookies: Prevent websites from storing cookies (may affect functionality)
• Delete Cookies: Remove existing cookies from your device
• Cookie Preferences: Allow only specific types of cookies
• Third-Party Cookies: Block cookies from external sources

For more information about managing cookies, visit www.allaboutcookies.org

8.5 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals but will update this policy if standards are established.

9. Children's Privacy

9.1 Age Restrictions

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

9.2 Parental Consent

If you are under 18, you may only use our services with the involvement and consent of a parent or legal guardian. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9.3 Verification and Deletion

If we become aware that we have collected personal information from a child under 18 without proper parental consent, we will take immediate steps to delete such information from our systems.

10. International Data Transfers

10.1 Data Transfer

Your personal information may be transferred to, stored, and processed in countries other than India, including countries that may not have the same data protection laws as your country of residence.

10.2 Safeguards

When we transfer personal information internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission (for GDPR compliance)
• Privacy Shield certification (where applicable)
• Adequate data protection agreements with third-party service providers
• Compliance with local data protection regulations

11. Third-Party Links and Services

11.1 External Websites

Our website may contain links to third-party websites, including:

• Herbalife International official websites
• Social media platforms (Facebook, Instagram, YouTube)
• Payment processors
• Partner websites and resources

Important: We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing any personal information.

11.2 Social Media Integration

Our website may include social media features (e.g., Facebook Like button, Instagram feed). These features may collect your IP address, track pages you visit, and set cookies. Your interactions with these features are governed by the privacy policies of the respective social media companies.

12. Changes to This Privacy Policy

12.1 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if you have provided your email address)
• Post a prominent notice on our website
• Request your consent if required by applicable law

12.2 Your Responsibility

We encourage you to review this Privacy Policy periodically. Your continued use of our website and services after changes are posted constitutes your acceptance of the updated policy.

13. Compliance and Legal Framework

13.1 Regulatory Compliance

This Privacy Policy complies with the following regulations and standards:

• India: Information Technology Act, 2000; Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• European Union: General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679
• United States: California Consumer Privacy Act (CCPA) where applicable
• Herbalife: Herbalife International Distributor Policies and Procedures
• Google: Google Ads Advertising Policies and User Data Policies

13.2 Independent Distributor Status

As an Independent Herbalife Distributor, I operate independently from Herbalife International, Inc. This privacy policy applies only to information collected through this website and my business operations. For Herbalife International's privacy practices, please visit their official website.

13.3 Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Faridabad, Haryana, India.

15. Additional Rights for Specific Jurisdictions

15.1 For European Union Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to lodge a complaint with a supervisory authority
• Right to receive information about automated decision-making and profiling
• Right to appoint an authorized agent to exercise your rights

EU Representative: For GDPR-related inquiries, please contact Support@wellnessaruna.life

15.2 For California Residents (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

Note: We do NOT sell your personal information to third parties.

15.3 For Indian Residents

Under Indian data protection laws, you have the right to:

• Access your personal information held by us
• Correct or update inaccurate personal information
• Withdraw consent for processing (where consent is the legal basis)
• Lodge a complaint with the relevant authority if you believe your rights have been violated