Last Updated: October 01, 2025
1. Introduction
A29 Wellbeing & Lifestyle Pvt. Ltd. (including its subsidiaries/affiliates) (hereinafter collectively referred to as “A29”) respects your privacy and is committed to protecting the personal data you share with us and that we collect. This Privacy Policy describes how A29 collects, uses, discloses, transfers, retains, and secures your personal data when you interact with A29 via its websites (including www.a29wellbeing.com), mobile applications, social media pages, blogs, offline services, customer support, e-commerce platforms powered by third-party providers (which acts as our data aggregator for online transactions, order processing, and customer data management), and other communication channels (collectively, “A29 Services”). This Policy is intended to comply with the requirements of all applicable Indian laws, statutes, rules & regulations, including the Information Technology Act, 2000 (as amended) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Notice Before Collection of Personal Data
Before collecting your personal data, we provide this notice as required under the Digital Personal Data Protection Act, 2023 (DPDP Act). This Privacy Policy explains:
• The types of personal data we collect and the purposes for which we collect it, including data aggregated and processed through our Apps, Website & E-commerce partner.
• Your rights as a Data Principal, including the right to access, correct, erase, restrict processing, nominate, and lodge grievances.
• How to contact our Data Protection Officer or file a complaint regarding our data processing practices. By providing your personal data or interacting with A29 Services, you acknowledge that you have been informed of these details and, where applicable, have provided your consent as described in this Policy.
3. What Personal Data We Collect
When you use A29 Services, we may collect Personal Data including, but not limited to:
• Basic identity and contact data (e.g., name, email address, telephone/mobile number)
• Demographic details (age, gender)
• Social media profile information (username, profile photo, etc.)
• Purchase and transaction history (products bought, payment method, billing/shipping address)
• Device/browser data, usage logs, IP address, cookie identifiers, and similar tracking technologies
• Location data (if you choose to share)
• Information about preferences, interests, interaction behaviour with A29 Services
• Sensitive Personal Data or Information (e.g., payment card details, financial information), which will only be collected with your explicit consent and processed under secure and lawful conditions as required by the DPDP Act and SPDI Rules under the IT Act. You may withdraw your consent at any time by contacting us as outlined in Clause 9.
• Financial Data: Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect or that is processed by e-commerce platform or app on our behalf when you purchase, order, return, exchange, or request information about our services from the Site.
• Device Data: Device information, such as your mobile or laptop device ID, model, and manufacturer, and information about the location of your device, if you access the Site from a mobile device or through e-commerce platform.
4. How We Collect Your Personal Data
You can share your personal data with A29 in several ways, including, but not limited to:
• Your communications with A29. These can be product or service-related, and may include the contents of your questions to us, or requests you addressed to us;
• Communicating with one of our A29 Customer Care representatives by email, phone, or in writing.
• Ordering a product.
• Participating in a promotion, game, or competition.
• Participating in a social media activity related to a A29 promotion (for example, clicking like or share).
• Asking to receive messages on your mobile phone/device.
• Subscribing to a A29 newsletter.
• Sending us a completed reply card, included with your A29 product.
• Voluntarily participating in product testing or surveys.
• Social sign-on (using your Facebook or LinkedIn credentials, for example, to create an account or log on);
• When using A29 connected products and/or Apps, you may be asked whether you wish to share data with A29 (e.g., share your usage data or your location data);
• Cookies placed on your computer or mobile device when you visit our websites or interact with e-commerce website or app integrated features.
• Social Listening: A29 may search the Internet for relevant and publicly available content and use it to improve its products or services, resolve consumer issues, and provide targeted marketing. A29 may also obtain your personal data if you are a customer of a A29 partner, including through our data aggregator. Personal data may also be transferred to us in the event of a company restructuring, including but not limited to a merger, acquisition, or joint venture involving an entity with which you are a customer. In such cases, we will ensure that data protection measures equivalent to those of the original entity or as required by applicable laws are maintained. Further, if you do not want A29 to use your personal data that has not been provided by you, you may let us know at any time by contacting us at connect@a29wellbeing.com.
5. Why We Ask You to Share Your Personal Data
We ask you to share your personal data with us for purposes including, but not limited to:
• Buying A29 products online.
• Activating or registering certain products or enhancing functionality.
• Receiving information about A29 products and services.
• Participating in A29 online communities, including our social media channels/pages and blogs.
• Storing your preferences for future interactions and communications from A29.
• Helping us to develop products and create campaigns that are designed around you, optimize customer services, and continuously improve our websites.
• Helping us to improve products and services, and allowing A29 to keep you informed of, or involve you in testing of, new products and services.
• Resolving consumer and/or product issues.
• Receiving personalized messages, special offers, and advertisements that are relevant to your personal interests, based on the information you have shared with us and on the information, we have collected through cookies or similar techniques regarding your use of the A29 websites/social media/blogs;
• Facilitating e-commerce transactions, order fulfilment, and data aggregation. We process your personal data only for the specific, lawful purposes communicated to you at the time of collection, as required by the Digital Personal Data Protection Act, 2023 (DPDP Act). If we intend to process your personal data for any other purpose, we will obtain your fresh consent unless such processing is permitted under applicable law.
6. Use of Information
We use the information for the following: a) To provide and improve the Services on the Platform that you request; b) For internal business purposes and services, including without limitation, warehousing services, delivery services, IT support services, and data analysis services; c) To resolve disputes, administer our service, and diagnose/troubleshoot technical problems; d) To help promote a safe service on the Platform and protect the security and integrity of the Platform, the Services, and the users; e) To design and improve the products and Services and customer relationship management processes; f) To collect money from you in relation to the Services; g) To inform you about online and offline offers, products, services, and updates; h) To customize your experience on the Platform or share marketing material with you; i) To detect, prevent, and protect us from any errors, fraud, and other criminal or prohibited activity on the Platform; j) To enforce and inform about our Terms; k) To process and fulfil your request for Services or respond to your comments and queries on the Platform; l) To contact you through email, SMS, WhatsApp, telephone, and any other mode of communication in relation to the Services; m) To allow our service providers, business partners, and/or associates to present customized messages to you; n) To communicate important notices or changes in the Services, use of the Platform, and the Terms/policies which govern the relationship between you and the Company; o) To conform to the legal requirements, compliance/reporting to regulatory authorities, as may be required, and to comply with applicable laws; p) To carry out our obligations and enforce our rights arising from any contract entered into between you and us; q) To carry out research with relevant partners; r) To enable aggregate and process data for e-commerce operations, including inventory management and analytics, in compliance with the DPDP Act and IT Act. A29 may occasionally ask you to complete optional online surveys. These surveys may ask you for your contact information and demographic information (like pin code or age). We use this information to tailor your experience on the Platform, providing you with content that we think you might be interested in and to display content according to your preferences. We use your information to send you promotional emails; however, we will provide you the ability to opt out of receiving such emails from us any time by clicking the ‘unsubscribe’ link or contacting us. However, you will not be able to opt out of receiving administrative messages, customer service responses, or other transactional communications. We will not share your Personal Information with another user of the Platform and vice versa without your express consent.
A29 may use anonymized, aggregated, or de-identified data for research, analytics, product improvement, or statistical purposes. Such data does not identify any individual.
A29 is not responsible for the privacy practices, policies, or content of third-party websites, apps, or services that may be linked to or integrated with A29 Services. Accessing such sites is at your sole risk.
7. Disclosure and Sharing of Personal Data
We may share your Personal Data with:
• Service providers, partners, or contractors who help us provide the Services (e.g., payment processors, delivery services, IT providers, and our e-commerce data aggregator, for order processing, payment handling, and customer data management);
• Affiliates or subsidiaries of A29.
• Third parties in response to legal processes (court order, government authority) or to comply with legal obligations.
• In the event of business transfers, mergers, acquisitions, or asset sales (only to the extent permitted by law and subject to confidentiality obligations). We require all third parties and data processors to protect your Personal Data in accordance with applicable law and A29’s policies. We remain responsible for their compliance. The agreements with these Business Partners will limit the purposes for which your personal data can be used and disclosed and will require your personal data to be adequately safeguarded in line with the SPDI Rules under the IT Act. A29 will disclose personal data only in conformance with this Privacy Policy and/or when required by law. If we are required by law to obtain your consent or otherwise believe that your consent is appropriate in the circumstances, we will obtain your consent before we share your personal data. From time to time, A29 may sell a business or a part of a business to another company. Such a transfer of ownership could include the transfer of your personal data directly related to that business to the purchasing company, and it shall be the responsibility of the resultant company or acquiring company to maintain data protection as per applicable laws.
Third-Party Services and Integrations
• A29 uses third-party services like e-commerce platform and data aggregator to facilitate online sales, payment processing, order fulfilment, and customer analytics.
• E-commerce platform or App may collect and process your Personal Data (e.g., contact details, payment information, browsing behaviour) on our behalf.
• We ensure our e-commerce platforms and apps complies with the DPDP Act and IT Act through Dual obligations, including data processing agreements that mandate security measures, purpose limitations, and your rights enforcement.
• By using our e-commerce site, you consent to this sharing, as required under Section 6 of the DPDP Act. You can withdraw consent via the mechanisms in Clause 9, but this may limit your ability to complete transactions.
Exemptions
Notwithstanding anything to the contrary in this Privacy Policy, we may collect, use, disclose, or retain personal data without your knowledge or consent in the following circumstances, where permitted or required by applicable law:
i. Legal Obligations & Law Enforcement
We may disclose your personal data if required to do so by law, regulation, legal process, or governmental request, including to meet national security or law enforcement requirements.
ii. Prevention of Fraud or Harm
We may process or disclose personal data if reasonably necessary to:
▪ Detect, prevent, or address fraud, security, or technical issues.
▪ Protect the rights, property, or safety of our users, employees, or others.
▪ Enforce our terms, policies, or contracts.
iii. Publicly Available Information
We may collect and process personal data that is publicly available or has been made public by you without any confidentiality obligations.
iv. Consent Not Required by Law
In jurisdictions where consent is not required for certain types of processing, we may rely on other lawful bases such as legitimate interest, performance of a contract, or legal obligation.
8. Cross-Border Data Transfers
When transferring your Personal Data outside India:
• By accessing our services, submitting your personal data through our platform, or interacting with us, you provide your free, specific, informed, unconditional, and unambiguous consent for the collection, processing, storage, and transfer (including cross-border transfer) of your personal data in accordance with this Privacy Policy and applicable laws.
• Where required by applicable law, we will obtain your express consent.
• We ensure that such transfers comply with the Digital Personal Data Protection Act, 2023 (DPDP Act), and are made only to jurisdictions notified by the Central Government of India as having adequate data protection standards or under legal mechanisms (e.g., contracts, standard data protection clauses) that ensure the required level of protection.
• Where Indian law requires local storage or localization (for particular categories of data), we comply with those requirements under the IT Act and DPDP Act.
• If you are located outside India, your Personal Data may be processed in India or other jurisdictions where our service providers operate. By using A29 Services, you acknowledge that your information may be transferred to such jurisdictions.
9. Data Retention
• We retain Personal Data only for the period necessary to fulfil the purposes for which it was collected, as required under the Digital Personal Data Protection Act, 2023 (DPDP Act), or as mandated by other applicable laws. Unless required by law, we will not retain your personal data beyond the purpose for which it was collected.
• You may request deletion of your Personal Data in accordance with applicable law (see Clause 10).
• We may require reasonable verification of your identity before acting on any request related to access, correction, deletion, or withdrawal of consent, including requiring government-issued identification or authentication mechanisms.
• Upon fulfilment of the purpose or upon your request for deletion, we will securely delete, anonymize, or aggregate your Personal Data within a reasonable timeframe, typically within 30 days, unless a longer retention period is required or permitted by law.
• Notwithstanding Clause 9, A29 may retain certain Personal Data for longer periods where required for compliance with tax laws, regulatory filings, legal claims, accounting, fraud prevention, or security investigations.
10. Cookies and Tracking Technologies
• We use cookies and similar technologies (e.g., web beacons, tracking pixels) to operate our website, analyse traffic, personalise content, and for marketing, including those deployed by e-commerce platform for functionality such as cart management and checkout.
• We may use automated tools, algorithms, and profiling techniques to personalize your experience, improve services, or deliver targeted marketing. You have the right to request human intervention, express your point of view, or contest automated decisions that significantly affect you.
• We classify cookies as essential, performance, analytics, and advertising.
• A29 uses cookies, pixels, and similar tracking technologies to enhance user experience, analyse usage patterns, and deliver personalized content. You can manage or disable cookies via your browser settings; however, some features may not function properly without them.
a. Do Not Track Signals
A29 takes privacy and security very seriously and strives to put our website users first in all aspects of our business. A29 utilizes cookies to help you get the most out of the A29 Pages. Please be aware that A29 currently does not make use of a technical solution that would enable us to respond to your browser’s ‘Do Not Track’ signals. In order to manage your cookie preferences, however, you may alter the cookie settings in your browser settings at any time. You may accept all, or certain, cookies. If you do disable our cookies in your browser settings, you may find that certain sections of our website(s) will not work. For example, you may have difficulties logging in or making online purchases.
b. Flash Cookies
On the A29 pages, Flash cookies are also used. Flash cookies may be removed by managing your Flash Player settings. Depending on the version of Browser you are using and media player you use, you may be able to manage Flash cookies with your browser. You may manage Flash Cookies by visiting the Adobe website. Please be aware that restricting the use of Flash Cookies may affect the features available to you.
c. Social Media
When you participate in various social media forums like Facebook, Twitter, Instagram, etc., you should be familiar with and understand the tools provided by those sites that allow you to make choices about how you share the personal data in your social media profile(s). A29 is bound by the privacy practices or policies of these third parties, as well as our own Privacy Policy, so we encourage you to read the applicable privacy policy, terms of use, and related information about how your personal data is used in these social media environments. Also, depending on the choices you have made regarding your settings on various social media sites (and/or in combination with your settings on the A29 pages), certain personal data may be shared with A29 about your online activities and social media profiles (e.g., interests, marital status, gender, user name, photo, comments, and content you have posted/shared, etc.).
d. Linking to Other Websites
During your online journey across A29 websites, you may encounter links to other websites for your convenience and information. These websites may operate independently from A29 and may have their own privacy policy, statements, or policies. We strongly suggest that you review them to understand how your personal data may be processed in connection with those sites, as we are not responsible for the content of non-A29-owned or -managed sites, or the use or privacy practices of those sites.
e. Cloud
A29 may store your personal data in A29’s Private Cloud. A29 may also use cloud services for data storage, with equivalent safeguards. This means that your personal data may be processed by A29. A29 makes use of organizational and contractual measures to protect your personal data and to impose similar, but in no way less restrictive, requirements on our cloud services providers, including requirements that your personal data be processed exclusively for the purposes mentioned above.
11. Your Rights
As a Data Principal under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights:
• Access: Request access to your Personal Data held by us, including a summary of the data and how it is processed.
• Correction: Correct or update inaccurate or incomplete Personal Data.
• Erasure: Request deletion or erasure of your Personal Data, subject to legal or contractual obligations.
• Restriction of Processing: Request restriction of processing of your Personal Data in certain circumstances.
• Nomination: Nominate an individual to exercise your rights in the event of your death or incapacity, as permitted by the DPDP Act.
• Withdraw Consent: Withdraw your consent at any time where processing is based on your consent, without affecting the lawfulness of processing prior to withdrawal.
• Opt-Out of Marketing: opt out of receiving marketing communications at any time.
• Grievance Redressal: Lodge a grievance or complaint with our Data Protection Officer regarding our data processing practices (see Clause 13). To exercise these rights, please contact our Data Protection Officer using the details provided in Clause 13.
12. Your Choice
We want to know you better so we can serve you better while at the same time respecting your choices about how we use your personal data. Your personal data may be transferred from your home country to other A29 companies, in different locations around the world, which may communicate with you about A29 products, services, or special offers that you may be interested in. If local law requires it, we will ask for prior consent to transfer your personal data outside of your geographic region. If you do not want us to send you personalized offers or information, you can let us know by checking the appropriate box on the registration form or reply card, or by selecting opt-out on emails you receive. Where local law requires it, we will ask you to opt-in or affirmatively consent to the processing of your personal data. For example, where local law so requires, we will only send you newsletters if you have subscribed to them. Similarly, where local law so requires, we will ask you to opt-in before using sophisticated profiling techniques. Because A29 sells its products worldwide, you may have previously provided us with your personal data through reply to cards, via our call centres, or in some other manner. Your decision not to register now will not affect the personal data you have already provided to A29. Of course, you will always have the option to unsubscribe from any targeted communication from A29 or change your personal profile information.
13. Data Security
We adopt reasonable stringent security practices and procedures, including organizational, technical, and administrative measures, to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. This includes the use of encryption, access controls, secure servers, monitoring, and vulnerability assessments. We review and update our security measures regularly in light ofevolving threats and best practices.
To the maximum extent permitted by law, A29 shall not be liable for any indirect, incidental, consequential, or punitive damages arising out of or related to the processing of your Personal Data.
In the event of a data breach likely to cause harm to you, A29 shall notify the Data Protection Board of India and, where required, you as the Data Principal, within the timelines prescribed under applicable law.
14. Children’s Data
• A29 Services are not intended for persons below the age of 18, as per the Digital Personal Data Protection Act, 2023 (DPDP Act).
• If you are under 18, please do not provide us with Personal Data without verifiable parental or guardian consent. We do not engage in tracking, behavioural monitoring, or targeted advertising directed at individuals under 18.
• A29 does not knowingly collect Personal Data from children under the age of 18 without parental/guardian consent.
• If we learn that Personal Data of a minor under 18 has been collected without verifiable parental consent, we will take steps to delete the data immediately, as required by law.
15. Governing Law, Grievance Redressal Mechanism & Data Protection Officer
• This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts in Mumbai, Maharashtra, India.
• A29 has appointed a Data Protection Officer (DPO) as required by the Digital Personal Data Protection Act, 2023 (DPDP Act), to address data protection inquiries, consent withdrawal, complaints, or requests to exercise your rights.
Contact Details: Email: connect@a29wellbeing.com Contact No.: +91-91-5209-2929 Address: A29 Wellbeing & Lifestyle Pvt. Ltd., 501, Shalimar Morya Park, Andheri West, Mumbai, India 400053
We aim to acknowledge and resolve all valid requests and complaints within 30 days, as mandated by the DPDP Act. If you are not satisfied with our response, you may approach the Data Protection Board of India for further redressal.
16. Audit & Compliance
A29 periodically audits its data protection practices, including vendor assessments and technical safeguards, to ensure continued compliance with the Digital Personal Data Protection Act, 2023 and other applicable laws.
17. Force Majeure Disclaimer
A29 shall not be liable for any loss, damage, or unauthorized access to Personal Data arising due to circumstances beyond its reasonable control, including but not limited to natural disasters, cyber-attacks, internet disruptions, or acts of government.
18. Changes to this Privacy Policy
• We may update this Policy from time to time to reflect changes in law, business practices, or technology.
• Material changes will be notified clearly on our website (with “Last Updated” date), and where required, your consent will be sought.
• Continued use of A29 Services after any changes constitutes your acceptance of the updated policy.
Acknowledgement of Consent
As required by the Digital Personal Data Protection Act, 2023 (DPDP Act), we obtain your consent for processing your Personal Data through a clear affirmative action (e.g., ticking a consent box, clicking an "I Agree" button, or similar action). By providing your Personal Data or interacting with A29 Services, you confirm that you have read this Privacy Policy, understand its contents, and provide your free, specific, informed, unconditional, and unambiguous consent to our processing of your Personal Data in accordance with this Policy. You may withdraw your consent at any time as outlined in Clause 9.
