Privacy Policy

This Privacy Policy explains how Monvi Naturals OPC Pvt Ltd ("we", "us", "our", "Company"), the company behind LimoZest and the Olir product line, collects, uses, discloses, and protects personal data of visitors to limozest.com (the "Site") and anyone who interacts with us through it. It is drafted to comply with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP Act").

By using the Site or submitting your information to us - for example, through our "Notify Me" sign-up - you agree to the practices described in this Privacy Policy.

Who We Are

Monvi Naturals OPC Pvt Ltd is the Data Fiduciary responsible for the personal data described in this policy.

Personal Data We Collect

We currently collect the following personal data directly from you:

• Email address - when you sign up for launch notifications or early-bird pricing through our "Notify Me" form.
• Any information you send us - if you email us or message us on social media, we hold the content of that correspondence and the contact details you provide in it.

How We Use Your Personal Data

We use the personal data described above only for the following purposes:

• To send you product launch updates, early-bird pricing, and related communications you signed up for.
• To respond to questions or requests you send us.
• To maintain records required for legal, accounting, or regulatory compliance.
• To improve the Site and our future products and communications.

We do not use your personal data for any purpose beyond what is stated here without asking for your consent again.

Legal Basis for Processing

We process your personal data on the basis of your consent - given by the affirmative action of submitting your email address through the sign-up form. We do not use pre-ticked boxes, bundled consent, or dark patterns. You may withdraw consent at any time (see Section 8).

In limited circumstances, the DPDP Act permits processing without consent - for example, to comply with a legal obligation or in response to a lawful government request. We rely on this only where the law specifically allows it.

Sharing and Disclosure of Personal Data

We do not sell your personal data. We may share it only with:

• Service providers who help us operate the Site or send communications - for example, our email/newsletter service provider, website hosting provider (Netlify), and analytics provider (Google LLC) - and only to the extent needed for that service, under confidentiality obligations.
• Legal and regulatory authorities, where required by applicable law, court order, or governmental request.
• A successor entity, if the Company is ever involved in a merger, acquisition, or sale of assets - your data would only transfer subject to this Privacy Policy continuing to apply, or you being given notice of any change.

We do not share your data with third parties for their own independent marketing purposes.

Cookies and Analytics

The Site uses Google Analytics (provided by Google LLC, USA) to collect anonymised data about how visitors interact with the Site - including pages viewed, time spent, and general geographic region. This data is collected through cookies and similar technologies set by Google.

Google Analytics does not collect your name or email address in connection with this analytics data. Google may process this data on servers located outside India. For more information on how Google uses data collected through its analytics tools, see Google's Privacy Policy.

We do not currently use any advertising, retargeting, or marketing pixels. If we introduce any such tools in the future, this section will be updated to name them and describe what they collect, before they go live.

Data Retention

We retain your email address for as long as you remain subscribed to our launch notifications, or until you ask us to delete it, whichever is earlier. We may retain minimal records of correspondence or consent for a reasonable period afterward where needed to demonstrate compliance with the DPDP Act or other legal obligations.

Your Rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is being processed.
• Correct or update inaccurate or incomplete personal data.
• Erase your personal data, once it is no longer needed for the purpose it was collected for, or once you withdraw consent.
• Withdraw consent at any time, as easily as you gave it - by clicking "unsubscribe" in any email from us, or by writing to us directly.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance with us regarding our handling of your personal data (see Section 9), and escalate it to the Data Protection Board of India if unresolved.

To exercise any of these rights, email us at hello@limozest.com. We will respond within 90 days as required under the DPDP Rules - though we aim to respond much sooner.

Grievance Officer

If you have a complaint about how we handle your personal data, please contact our Grievance Officer:

We will acknowledge and work to resolve grievances within the timelines prescribed under the DPDP Rules (currently 90 days).

Data Security

We take reasonable technical and organisational measures to protect the personal data we hold from unauthorised access, loss, misuse, or alteration. Our Site is hosted on Netlify with HTTPS enforced. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the unlikely event of a personal data breach that affects you, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act - including a description of the breach, its likely consequences, and the steps we are taking in response.

Children's Data

The Site and our products are not directed at individuals under 18 years of age, and we do not knowingly collect personal data from minors. Our product recommends that anyone under 18 consult a qualified healthcare professional before use, and is not marketed for purchase by minors.

If we become aware that we hold personal data of a minor without verifiable parental or guardian consent, we will delete it promptly.

Cross-Border Data Transfer

Some of our service providers - including Netlify (hosting, USA) and Google LLC (analytics, USA) - may process data on servers located outside India. Where this occurs, we do so in accordance with Section 16 of the DPDP Act, which permits such transfers except to countries or territories specifically restricted by the Government of India.

Third-Party Links

The Site may link to our social media pages (Instagram, YouTube, LinkedIn) and to third-party research citations. We are not responsible for the privacy practices of these third-party platforms - please review their own privacy policies before interacting with them.

Changes to This Policy

We may update this Privacy Policy from time to time - including as our products, features, and data practices evolve (for example, once online ordering launches). The "Last Updated" date at the top of this page will reflect the most recent revision, and we will notify you of material changes by posting a notice on the Site or, where appropriate, by email.

Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and its Rules. Any disputes arising from this Policy shall be subject to the jurisdiction of courts in Bengaluru, Karnataka.

Contact Us

For any questions about this Privacy Policy or our data practices, contact us at: