Last Updated: [22-07-2026]
STHORN (“STHORN,” “we,” “us,” or “our”) is a wellness beverage brand focused on creating refreshing, naturally inspired functional beverages, operating through our website at [www.sthorn.in] (the “Site”) and any related services (together, the “Services”).
This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our Site, purchase our products, subscribe to our communications, or otherwise interact with us. It is drafted to comply with:
The Digital Personal Data Protection Act, 2023 (“DPDP Act”)
The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”)
The Consumer Protection (E-Commerce) Rules, 2020
STHORN currently operates exclusively within India and serves customers located in India. If we expand to other jurisdictions in the future, this Policy will be updated accordingly, and you will be notified of any material changes.
By accessing or using our Site, you acknowledge that you have read and understood this Privacy Policy, and where required, you provide your free, informed, and specific consent to the processing of your personal data as described herein.
“Personal Data” means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.
“Sensitive Personal Data or Information” (SPDI) has the meaning given to it under the SPDI Rules, and includes information such as passwords, financial information (bank account, card, or payment instrument details), and physical, physiological, or mental health condition, where applicable.
“Data Principal” means the individual to whom the personal data relates — i.e., you.
“Data Fiduciary” means STHORN, as the entity that determines the purpose and means of processing your personal data.
“Processing” means any operation performed on personal data, including collection, storage, use, sharing, or deletion.
STHORN is a wellness beverage brand. For the purposes of the DPDP Act, STHORN acts as the Data Fiduciary responsible for determining the purpose and means of processing your personal data.
Full name, email address, phone number
Shipping and billing address
Company name (if applicable, for B2B orders)
Order history and purchase preferences
Customer service communications
Product reviews and testimonials
Survey responses and contest entries
Marketing preferences
You are not required to provide this information, but certain features of the Site (such as placing an order) may not function without it.
Payments are processed through secure, RBI-authorized third-party payment gateways and processors. We do not store your complete card, UPI, or net banking credentials on our servers. Payment processors may independently collect card details, UPI IDs, wallet information, and payment verification data, governed by their own privacy policies, which we encourage you to review.
When you visit our Site, we automatically collect:
IP address, browser type, device type, operating system
Pages visited, time spent on pages, click behavior
Referring website and session information
Approximate location (derived from IP address, where applicable)
In the limited circumstances where we may collect SPDI as defined under the SPDI Rules (for example, payment-related financial information), we do so only with your explicit consent and use it strictly for the purpose it was collected.
Our Site uses cookies, pixels, and similar tracking technologies, including those from advertising and analytics partners such as Meta, Google, and other platforms we may use from time to time. These technologies help us:
Remember your preferences and maintain your shopping cart
Understand visitor behavior and improve Site functionality
Measure and improve advertising performance
Personalize your browsing experience
You may control or disable cookies through your browser settings. Disabling cookies may limit certain Site features, such as cart persistence. Where legally required, we will present a cookie consent mechanism allowing you to accept or reject non-essential cookies before they are set.
We process your personal data for the following purposes, consistent with the purpose limitation principle under the DPDP Act:
| Purpose | Examples |
| Order fulfilment | Processing orders, arranging delivery, handling returns/refunds |
| Account & customer support | Verifying identity, responding to queries and complaints |
| Communications | Sending order updates, shipping notifications |
| Marketing (with consent) | Product announcements, offers, newsletters |
| Improvement & analytics | Understanding usage patterns, improving the Site and products |
| Fraud & security | Detecting and preventing fraudulent or unauthorized activity |
| Legal compliance | Meeting tax, regulatory, and legal obligations |
We do not use your personal data for any purpose beyond what is disclosed at the time of collection, except where you separately consent or where required by law.
We collect and process your personal data on the basis of your consent, which you provide by:
Creating an account or placing an order
Submitting a form (e.g., newsletter sign-up, contest entry)
Continuing to use the Site after being notified of this Policy, where such implied consent is legally permitted
Where consent is the basis for processing, you have the right to withdraw your consent at any time, with effect equivalent to the ease with which it was given. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and will not affect our ability to retain data where required for legal or contractual obligations (e.g., tax records).
If you subscribe to our mailing list, we may send product announcements, offers, promotions, and wellness content. You may unsubscribe at any time via the link in every marketing email. Opting out of marketing emails does not affect transactional emails related to your orders.
If you opt in to SMS or WhatsApp marketing, we will only send such communications in accordance with TRAI’s regulations on Unsolicited Commercial Communications and applicable consent-based frameworks. You may opt out at any time by replying STOP, contacting us, or using the applicable opt-out mechanism. Registering on the National Customer Preference Register (NCPR/DND) may also limit certain commercial communications, subject to your specific consent to STHORN.
We do not sell your personal information. We may share your information only where necessary, with:
Payment gateway providers and processors
Shipping and logistics partners
Cloud hosting and technology vendors (e.g., Shopify)
Email/SMS/WhatsApp service providers
Analytics and advertising platforms (in aggregated or pseudonymized form where possible)
Legal, tax, or regulatory advisors
Government or regulatory authorities, where legally required
A successor entity in the event of a merger, acquisition, or business restructuring, subject to the successor honoring the commitments made in this Policy
All third parties handling your data on our behalf are contractually bound to implement reasonable security safeguards and to use your data solely for the purpose for which it was shared — not for their own independent marketing purposes.
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Policy, specifically:
Order and transaction records: up to 8 years from the date of transaction, in line with statutory requirements under Indian tax and accounting law.
Account information: for the duration of your account’s existence, and up to 24 months after account closure or last activity, whichever is later, unless a longer period is required by law or to resolve disputes.
Marketing preference data: until you withdraw consent or unsubscribe, after which we retain a minimal record solely to honor your opt-out.
Once the applicable retention period lapses and there is no legitimate business or legal need, your data will be securely deleted or anonymized.
We implement reasonable security practices and procedures as required under the SPDI Rules, including encryption of payment data in transit, access controls, and secure server infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
In the event of a personal data breach that is likely to affect you, we will notify you and, where required, the Data Protection Board of India, in accordance with the timelines and manner prescribed under the DPDP Act.
Under the DPDP Act, you have the right to:
Access a summary of the personal data we hold about you and the processing activities carried out
Correct, complete, or update inaccurate or outdated personal data
Erase personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements
Withdraw consent at any time, as described in Section 7
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
Grievance redressal — you may raise a grievance with our Grievance Officer (Section 14) and, if unresolved, escalate it to the Data Protection Board of India
To exercise any of these rights, please contact us using the details in Section 14. We will verify your identity before processing your request and will respond within the timelines prescribed under applicable law.
In accordance with the DPDP Act, a “child” is any individual under the age of 18. We do not knowingly collect personal data from children without verifiable parental or guardian consent. Our Services are not directed at children, and if we become aware that we have inadvertently collected a child’s personal data without such consent, we will take reasonable steps to delete it promptly.
In accordance with the IT Act, 2000 and DPDP Act, we have appointed a Grievance Officer to address your questions, concerns, or complaints regarding this Policy or our data practices.
Grievance Officer
STHORN
Email: privacy@sthorn.in
Phone: +91 85299 22214
Postal Address: Ananta Svastha Pvt. Ltd., 9th Floor, Pride Gateway, Veerbhadra Nagar, Baner, Pune, Maharashtra 411045
Customer Support: support@sthorn.in
We will acknowledge grievances promptly and aim to resolve them within the timelines prescribed under applicable law.
STHORN products are beverages and are not intended to diagnose, treat, cure, or prevent any disease. Any wellness-related information provided on our Site is for general informational purposes only and does not constitute medical advice. Please consult a qualified healthcare professional regarding any medical condition, allergy, or dietary restriction before consuming our products.
If you submit reviews, testimonials, photos, or videos via our Site or social media, you grant STHORN a non-exclusive, worldwide, royalty-free license to use, reproduce, publish, and display such content for marketing and promotional purposes, unless otherwise agreed in writing. Please do not include sensitive personal information (e.g., health conditions, financial details) in any public-facing content you submit.
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites, and we encourage you to review their privacy policies independently.
Some browsers support “Do Not Track” signals. As there is no consistent industry standard for interpreting these signals, our Site does not currently respond to them.
STHORN currently operates and stores data exclusively within India. We do not presently transfer personal data outside India. If this changes in the future — for example, through the use of a cloud service provider with servers outside India — we will update this Policy and implement safeguards consistent with the DPDP Act’s requirements for cross-border data transfer.
This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at [Insert City, e.g., New Delhi / Gurugram], India.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised “Last Updated” date. For material changes affecting how we use your personal data, we will provide additional notice (such as an email or Site banner) where required by law.
If you have questions regarding this Privacy Policy or how we handle your personal data, please contact us at:
STHORN
Email: privacy@sthorn.in
Customer Support: support@sthorn.in
Website: www.sthorn.in
