Privacy policy

The Sun Embrace

www.thesunembrace.com

Last Updated: June [●], 2026

This document is an electronic record in terms of the Information Technology Act, 2000 and rules thereunder as applicable, and the amended provisions pertaining to electronic records in various statutes as amended by the Information Technology Act, 2000. This electronic record is generated by a computer system and does not require any physical or digital signatures.

This Privacy Policy is published in accordance with the provisions of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, and the enabling and other applicable rules, regulations, and guidelines framed thereunder.

1. About Us

1.1 The Platform (www.thesunembrace.com, including its related mobile site and mobile application) is owned, managed, and operated by Naksh Enterprises, being the registered trade name of Akshay Raj Goyal (HUF), a Hindu Undivided Family represented by its Karta, Akshay Raj Goyal, having its principal place of business at 34-B, LIC Colony, Vaishali Nagar, Ajmer, Rajasthan 305004, India (hereinafter referred to as “The Sun Embrace”, “we”, “us”, or “our”).

1.2 The Platform is powered by Shopify, which enables us to provide our services to you.

1.3 This Privacy Policy (“Policy”) describes how we collect, use, store, share, and otherwise process personal data that you provide to us, or that we collect, when you access or use the Platform or purchase any products offered through the Platform.

If there is a conflict between our Terms of Use and this Privacy Policy with respect to the collection, processing, or disclosure of your personal data, this Privacy Policy shall prevail.

2. Legal Framework

This Policy is published in compliance with the following Indian laws, regulations, and frameworks (each as amended, transitioned, or brought into force from time to time):

• The Information Technology Act, 2000 (“IT Act”);

• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);

• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Guidelines”);

• The Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the enabling and other applicable rules, regulations, and guidelines framed thereunder;

• The Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020; and

• The Indian Contract Act, 1872.

3. Scope and Applicability

3.1 This Policy applies to all Users (“User”, “Customer”, “you”, or “your”) who access, browse, register on, or make a purchase through the Platform.

3.2 The Platform is directed exclusively at persons located in India. We do not offer any product or service outside India.

3.3 Your personal data may be processed, stored, or transferred outside India through Shopify and our other authorised service providers. We will comply with applicable Indian laws in respect of such transfers.

By checking the designated opt-in box during account registration, checkout, or via our cookie consent banner, you confirm that:

• You have the legal capacity to enter into a binding contract under the Indian Contract Act, 1872;

• If you are accessing the Platform on behalf of a minor, you are the parent or legal guardian of that minor and you accept this Policy and consent to the processing of data on their behalf; and

• You have read, understood, and agreed to the collection, use, storage, sharing, and disclosure of your personal data as described in this Policy.

If you do not agree with this Policy, you must immediately cease using the Platform and may write to us at thesunembrace@gmail.com.

4. Personal Data We Collect

We collect and store the following categories of personal data:

4.1 Data You Provide Directly

When you register, place an order, or otherwise interact with us through the Platform, you provide us with the following categories of personal data:

• Contact and Account Details: your name, email address, mobile phone number, billing address, and shipping address.

• Account Credentials: username, password, and one-time passwords or verification credentials.

• Order and Transaction Information: products viewed, items added to your shopping cart or wish list, purchased, returned, or exchanged; order history; and promotional or coupon codes used.

• Financial Information: payment method details and transaction confirmation data. Full payment card details are processed and stored by our integrated payment gateway processor and are not retained by us directly.

• Communications: information you provide when you contact our customer support team, submit a grievance, or otherwise communicate with us such as regarding a product query, or grievance, including any interaction logs, text chat histories, verification photographs or videos provided to evaluate product condition or attachments shared during the communication.

• User Content: reviews, ratings, photographs, testimonials, feedback, and comments submitted by you through the Platform.

4.2 Data Appertaining to Children

As a brand specialising in children's nutritional supplements, we may process basic data about your child when you voluntarily provide it to personalise your experience. This includes:

• Child's Profile Attributes: Age, birth month, gender, or nutritional/dietary goals (e.g., picky eating, immunity support) provided via voluntary product recommendation quizzes or calculators.

• Child's Identity in Support/Reviews: Names, age details, or photographs of your child if you choose to include them in customer support interactions, emails, or public product reviews.

4.3 Data Collected Automatically

When you access or use the Platform, we automatically collect certain data about your device and usage. This includes:

• Device and Usage Information: IP address, browser type and version, device type and identifiers, operating system, network connection details, pages visited, time spent on pages, click-stream data, and referring URLs.

• Cookies and Tracking Data: data collected through cookies and similar tracking technologies as described in Clause 9 below.

• App Device Permissions: where you use our mobile application, and subject to your consent, we may collect data through device permissions such as:

(a) Camera: to enable you to upload photographs in reviews or feedback;

(b) Photo Gallery / Storage: to enable you to select and upload images from your device;

(d) Push Notifications: to send you order updates, delivery alerts, and, where separately consented, promotional communications; and

(e) Device Identifiers: for analytics, fraud prevention, and security purposes.

4.4 Data Received from Third Parties

In addition to data you provide directly, we may receive personal data about you from the following third-party sources:

• Data received from Shopify and other service providers engaged to operate the Platform and process transactions;

• Data received from logistics and delivery partners in connection with the fulfilment and delivery of your orders; and

• Data from business partners or other third parties where permitted by applicable law.

5. How We Collect Your Personal Data

We collect personal data through the following means:

• Directly from you when you create an account, place an order, contact us, submit a review or feedback, or otherwise provide us with information through the Platform;

• Automatically through our Platform from your device when you browse, interact with, or make a purchase, including through cookies and similar technologies;

• From Shopify and other service providers engaged to operate our Platform, process transactions, and deliver orders; and

• From business partners or other third parties where permitted by applicable law.

6. Purposes for Which We Use Your Personal Data

We use your personal data only for the following specific, lawful purposes:

6.1 Order Fulfilment and Account Management

• To process, confirm, fulfil, and deliver your orders and manage returns, exchanges, and replacements in accordance with our Shipping Policy – The Sun Embrace;

• To manage your account, verify your identity, and maintain our relationship with you;

• To communicate with you regarding your orders, account activity, delivery updates, security alerts, and customer support matters;

• To process payments and refunds through authorised payment service providers; and

• To provide product suggestions and nutritional information based on the child's profile attributes you provide.

6.2 Communications and Marketing

• To send you transactional, service-related, and account-related communications electronically by email, SMS, WhatsApp, push notification, or by other authorised electronic means, as consented to under our Terms of Use;

• To send you promotional offers, discounts, newsletters, and marketing communications where you have separately consented to receive them; and

• To send you reminders, surveys, or feedback requests relating to your orders or experience on the Platform.

• To serve you relevant product advertisements on third-party platforms and websites, where you have consented or where permitted by applicable law.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing communication, adjusting your notification preferences in the mobile application settings, or by writing to us at thesunembrace@gmail.com. Opting out of marketing communications will not affect our ability to send you transactional or service-related communications. For the avoidance of doubt, choosing to opt out of promotional communications or marketing updates will not limit or restrict our ability to send you operational, transactional, or safety alerts (such as payment confirmations, shipping status, updates to account security, or structural adjustments to our terms).

6.3 Personalisation and Platform Improvement

• To personalise and improve your shopping experience on the Platform;

• To analyse usage patterns and improve the Platform’s features, content, and functionality; and

• To conduct internal research, analytics, and product development.

6.4 Security, Fraud Prevention, and Compliance

We use your personal data to protect the Platform and comply with applicable law, including:

• To detect, prevent, and investigate fraud, unauthorised transactions, suspicious activity, identity misuse, payment abuse, and other illegal or prohibited activities;

• To verify your identity and the legitimacy of your payment method or transaction;

• To comply with applicable Indian laws, regulations, court orders, and directions of governmental or regulatory authorities; and

• To enforce our Terms of Use and protect our rights, property, and legitimate business interests.

6.5 Children’s Data

Given the nature of our products, we apply the following principles to the processing of children's data:

• We do not knowingly collect or process personal data of individuals under 18 years of age without the consent of their parent or legal guardian. By entering details regarding a minor through our Platform, you confirm that you are that child's parent or legal guardian and that you consent to the collection and processing of such data in accordance with this Policy.

• We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

7. Sharing and Disclosure of Your Personal Data

We do not sell your personal data to third parties for their independent commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

7.1 Service Providers and Technology Partners

• Shopify: Our Platform is hosted and powered by Shopify. Information you submit through the Platform is transmitted to and processed by Shopify in accordance with its Consumer Privacy Policy (https://www.shopify.com/legal/privacy) and its data sub-processors. Shopify may use certain enhanced features that incorporate data from your interactions with our store and with other merchants; in such circumstances, Shopify is independently responsible for the processing of your data for those purposes.

• Payment Processors: Authorised payment gateways, banks, card networks, UPI platforms, and wallet providers engaged to process your payments securely.

• Logistics and Delivery Partners: Third-party logistics and delivery providers engaged to fulfil, dispatch, and deliver your orders.

• Analytics and Marketing Technology Providers: Providers such as Google Analytics and similar platforms engaged to help us understand usage of the Platform and serve relevant communications. Such providers process data in accordance with their own privacy policies

7.2 Business Transfers: In the event of a merger, acquisition, restructuring, reorganisation, business transfer, or sale of assets, your personal data may be transferred to the relevant acquiring or successor entity, provided that such entity is bound by obligations no less protective than those set out in this Policy.

7.3 Legal and Regulatory Disclosure: We may disclose your personal data to law enforcement agencies, government authorities, regulatory bodies, courts, or other legally authorised persons where required by applicable law, court order, or governmental direction, or where we believe such disclosure is necessary to protect our rights, the rights of any User, or the safety of any person.

7.4 Affiliates: We may share your personal data with our affiliates and related companies for legitimate business purposes, subject to the same level of protection as described in this Policy.

8. Our Relationship with Shopify

Our Platform is hosted and powered by Shopify. Information you submit through the Platform will be transmitted to and shared with Shopify, as well as third parties engaged by Shopify, who may be located in countries other than India. To learn more about how Shopify uses your personal data and to exercise any rights you may have in relation to data processed by Shopify, please visit https://privacy.shopify.com/en.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on the Platform to analyse traffic, measure promotional effectiveness, and improve your shopping experience. Cookies are small text files placed on your device that help us provide our services. Cookies do not, by themselves, contain your name or other directly identifiable personal data.

We use the following types of cookies:

• Essential Cookies: Strictly necessary for the Platform to function, including your shopping cart and account session. These cannot be disabled without affecting core Platform functionality.

• Preference Cookies: Remember your settings and choices to enhance your experience.

• Analytics Cookies: Tools such as Google Analytics that help us understand how visitors interact with and navigate the Platform. You can learn more about how Google uses your data at https://policies.google.com/privacy and opt out at https://tools.google.com/dlpage/gaoptout.

• Marketing Cookies: Enable us to show you relevant advertisements and promotions on the Platform and on third-party platforms, where you have consented.

You can manage, adjust, control, or withdraw your preferences for non-essential cookies at any time directly through your web browser settings or our interactive cookie dashboard. Declining certain cookies may affect the functionality of the Platform or your shopping experience.

10. Security of Your Personal Data

We maintain appropriate physical, electronic, and administrative safeguards to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

• Restricting access to your personal data to staff and authorised service providers who require it for legitimate business purposes;

· Imposing confidentiality obligations on all such staff and service providers;

· Using secure encrypted connections (SSL/TLS) for payment processing and account access through Shopify; and

· Regularly reviewing our data collection, storage, access controls, and processing practices.

Whenever you access your account or make a payment, we use secure server connections. However, you acknowledge that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring you log out at the end of each session. If you suspect any unauthorised access to or use of your account, you must notify us immediately at thesunembrace@gmail.com.

11. Retention of Your Personal Data

We retain your personal data for no longer than is necessary for the purposes for which it was collected, or as required or permitted under applicable Indian law, whichever is longer. In determining the appropriate retention period, we consider:

· The purposes for which the data was collected and whether those purposes have been fulfilled;

· Our legal obligations to retain records under applicable law (including tax, accounting, and consumer protection laws);

· The need to retain data to prevent fraud, exercise our legal rights, resolve disputes, or comply with court orders or regulatory directions; and

· Any applicable statute of limitations.

After the applicable retention period, we will securely delete or anonymise your personal data. We may continue to retain data in anonymised and aggregated form for analytical and research purposes after the original retention period has expired.

To request deletion of your personal data, please write to us at thesunembrace@gmail.com with the subject line “Deletion Request”. We will respond within the timeframe required under applicable law. Please note that we may be required to retain certain information under applicable law, and that deletion of your personal data may affect our ability to provide services to you.

12. Your Rights in Relation to Your Personal Data

Subject to applicable Indian law and any lawful restrictions, you have the following rights in relation to your personal data:

· Right of Access: You may request access to the personal data we hold about you.

· Right to Correction: You may request that we correct inaccurate or incomplete personal data we hold about you. You are responsible for ensuring that the personal data you provide to us is accurate, complete, and up to date at all times.

· Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations and legitimate interests.

· Right to Withdraw Consent: You may withdraw your consent to processing at any time without affecting the lawfulness of processing carried out prior to withdrawal. Please write to us at thesunembrace@gmail.com with the subject line “Withdrawal of Consent”. Withdrawal of consent may affect our ability to provide services to you.

· Right to Lodge a Complaint: If you have any concerns or grievances regarding the processing of your personal data, we request that you first contact our Grievance Officer at thesunembrace@gmail.com. If your grievance is not resolved to your satisfaction, you may approach the appropriate statutory forum under applicable law.

You may exercise many of these rights directly through your account settings on the Platform or through the mobile application settings. For requests that cannot be completed through account settings, please write to us at thesunembrace@gmail.com or contact our Grievance Officer (see Clause 16 below). We will verify your identity before acting on any request.

13. Children and Minors

13.1 Our Platform and products are designed for purchase by adults on behalf of children.

13.2 We do not knowingly collect personal data from children under the age of 18 without parental or guardian consent. If you are a parent or legal guardian and believe that a child under 18 has provided us with personal data without your consent, please contact us immediately at thesunembrace@gmail.com and we will take steps to delete such data promptly.

13.3 Where a parent or legal guardian places an order or creates an account on behalf of a minor, any personal data provided relates to the account holder and the transaction and is processed in accordance with this Policy. We do not knowingly share or sell personal data of individuals under 18 years of age.

14. Electronic Communications and Consent

By registering your mobile phone number and/or email address with us, or by otherwise using the Platform, you consent to receive communications from us electronically, including by email, SMS, WhatsApp, push notification through the mobile application, or by other authorised electronic means. Such communications include order confirmations, delivery updates, account notifications, security alerts, and, where separately consented, promotional and marketing communications.

You agree that all agreements, notices, disclosures, updates, and other communications provided to you electronically satisfy any legal requirement that such communications be in writing.

You may opt out of promotional or marketing communications at any time by following the unsubscribe instructions in the relevant communication, adjusting your notification preferences in the mobile application settings, or by writing to us at thesunembrace@gmail.com. Opting out of promotional or marketing communications shall not affect our ability to send you transactional, service-related, account-related, security, or order-related communications.

15. Third-Party Websites and Links

The Platform may contain links to third-party websites, tools, or services that are not owned or controlled by us. We are not responsible for the content, privacy practices, or policies of any third-party websites. Your use of third-party websites is at your own risk and is governed by their own terms and privacy policies. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal data.

16. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the following person has been designated as the Grievance Officer for The Sun Embrace:

Name: Anshul Agarwal

Designation: Grievance Officer

Organisation: Naksh Enterprises (Akshay Raj Goyal HUF)

Email: thesunembrace@gmail.com

Address: 34-B, LIC Colony, Vaishali Nagar, Ajmer, Rajasthan 305004, India

Working Hours: Monday to Saturday, 9:00 AM to 6:00 PM IST

All grievances may be directed to the Grievance Officer at the contact details above. If you are not satisfied with the resolution of your grievance, you may approach the appropriate statutory forum under applicable law.

17. Your Consent

By accessing or using the Platform, providing us with your personal data, or placing an order, you consent to the collection, use, storage, sharing, and disclosure of your personal data in accordance with this Policy. By registering your mobile phone number, email address, or other contact details with us, you also consent to us contacting you by SMS, email, WhatsApp, push notification, and other authorised electronic means for the purposes described in this Policy.

Where we are required under applicable law to obtain your explicit consent for any specific processing activity, including access to device permissions on the mobile application, we will obtain such consent separately before undertaking that activity.

18. Amendments to This Privacy Policy

We reserve the right to update, change, or modify this Policy at any time to reflect changes in our practices, applicable law, or regulatory requirements. The “Last Updated” date at the top of this Policy will indicate when the revised Policy becomes effective.

We will alert you to significant changes by updating the date at the top of this Policy, displaying a notice on the Platform or within the mobile application, or, where required by applicable law, by sending you a notification by email, SMS, or push notification. Your continued access to or use of the Platform following the publication of any revised Policy shall constitute your acceptance of the revised Policy. If you do not agree with the revised Policy, you must immediately cease using the Platform.

19. Indemnity

You agree to indemnify and hold harmless The Sun Embrace, its affiliates, directors, officers, employees, representatives, agents, and service providers from and against any claim, loss, damage, cost, liability, or expense (including reasonable legal fees) arising from:

· Your disclosure of your personal data to third parties whether through the Platform or otherwise;

· Your access to and use of any third-party websites or services linked from the Platform; or

· Your breach of this Policy or applicable law.

20. Disclaimer

While we are committed to protecting your privacy and maintaining appropriate security measures, no security system or method of data transmission over the internet is completely secure. We cannot guarantee that your personal data will never be disclosed in a manner not described in this Policy, or that it will always remain entirely private. By using the Platform, you acknowledge and accept these inherent risks.

21. Severability

Each provision of this Policy is independent and severable from the others. If any provision is found to be invalid or unenforceable by a court of competent jurisdiction, it will be modified to the minimum extent necessary to make it valid and enforceable, and the remaining provisions will continue in full force and effect.

22. Governing Law and Jurisdiction

This Privacy Policy and all matters relating to the collection, use, storage, and disclosure of your personal data are governed by and shall be construed in accordance with the laws of India. Any disputes arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the courts located at Ajmer, Rajasthan, India.

The sun embrace

Item added to your cart

Privacy policy

Privacy policy

Search