PRIVACY POLICY

At Gaffit Performance (operated by Uniwelco Pvt. Ltd.), your privacy is of paramount importance to us. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you visit www.gaffit.in, place an order, or interact with our services.

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, and the Consumer Protection (E-Commerce) Rules, 2020.

For the purpose of this Privacy Policy, "Uniwelco Pvt. Ltd." may be referred to as "Company," "we," "our," or "us," and the user/customer may be referred to as "User," "you," or "your."

By accessing or using our Website, you consent to the collection, use, storage, and disclosure of your personal information as described in this Policy.

1. INFORMATION WE COLLECT

We collect the following categories of information when you interact with our Website:

1.1 Personal Information (provided by you)

• Full name
• Email address
• Mobile number / phone number
• Billing address and shipping address
• Date of birth (optional)
• Gender (optional)
• Login credentials (username, password)

1.2 Transaction & Order Information

• Order history and purchase details
• Payment method used (UPI / Card / Net Banking / COD / Wallet)
• Invoice and billing information
• GST details (for business orders)

1.3 Health & Fitness Information (optional, if voluntarily provided)

• Fitness goals (muscle gain, weight loss, endurance, etc.)
• Dietary preferences (vegetarian, vegan, etc.)
• Allergies or medical conditions (only if voluntarily shared for product recommendations)

1.4 Technical & Device Information

• IP address
• Browser type and version
• Operating system
• Device type and identifiers
• Pages visited, time spent, clickstream data
• Referring website / source of traffic
• Cookies and similar tracking technologies

1.5 Communication Information

• Customer service interactions (emails, calls, chat transcripts)
• Feedback, reviews, ratings, and survey responses
• Marketing preferences

1.6 Sensitive Personal Data

We do not collect or store sensitive financial information such as full credit/debit card numbers, CVV, or banking passwords. All payment transactions are processed securely through PCI-DSS compliant payment gateways (Razorpay / Cashfree / PayU / Shopify Payments).

2. HOW WE COLLECT INFORMATION

We collect information through:

• Direct submission: When you create an account, place an order, subscribe to newsletters, or contact us
• Automated tracking: Through cookies, web beacons, pixels, and analytics tools (Google Analytics, Meta Pixel, etc.)
• Third-party sources: Social media platforms (when you log in via Google/Facebook), payment gateways, and logistics partners
• Customer support interactions: Through phone, email, chat, or WhatsApp Business

3. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

3.1 Order Fulfillment

• Processing and confirming your orders
• Arranging shipping and delivery through logistics partners
• Issuing invoices, refunds, and replacements
• Verifying COD orders through confirmation calls

3.2 Customer Support

• Responding to your queries, complaints, and feedback
• Resolving disputes and grievances
• Providing product recommendations and usage guidance

3.3 Marketing & Communication (with your consent)

• Sending promotional emails, SMS, and WhatsApp messages about offers, new launches, and discounts
• Personalizing your shopping experience based on browsing and purchase behavior
• Sending newsletters, fitness tips, and educational content
• Conducting surveys, contests, and loyalty programs

3.4 Website Improvement & Analytics

• Analyzing user behavior to improve Website functionality and user experience
• Conducting A/B testing and feature optimization
• Detecting and preventing fraud, abuse, and security threats

3.5 Legal & Regulatory Compliance

• Complying with applicable laws, court orders, and regulatory requirements
• Maintaining records as required under the Companies Act, GST laws, FSSAI regulations, and Income Tax Act
• Responding to lawful requests from government authorities

4. SHARING OF INFORMATION

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following entities strictly for legitimate business purposes:

4.1 Service Providers

• Logistics partners (Delhivery, Bluedart, Ekart, DTDC, India Post, Shadowfax, etc.) — for order delivery
• Payment gateways (Razorpay, Cashfree, PayU, Shopify Payments) — for processing transactions
• Cloud hosting providers (Shopify, AWS, Google Cloud) — for data storage
• Marketing & analytics tools (Google Analytics, Meta, Klaviyo, MoEngage) — for campaign management
• Customer support tools (Zoho, Freshdesk, WhatsApp Business) — for query handling
• SMS / Email service providers — for transactional and promotional communications

4.2 Legal Authorities

We may disclose your information when required by law, court order, government regulation, or to:

• Comply with legal obligations
• Protect the rights, property, or safety of Uniwelco Pvt. Ltd., our customers, or others
• Investigate fraud, security breaches, or violations of our policies
• Enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred to the successor entity, subject to confidentiality obligations.

4.4 With Your Consent

We may share your information with third parties when you have explicitly authorized us to do so.

5. COOKIES & TRACKING TECHNOLOGIES

Our Website uses cookies and similar technologies to enhance your browsing experience.

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic Website functionality (login, cart, checkout)
• Performance Cookies: Help us analyze how users interact with the Website
• Functional Cookies: Remember your preferences (language, region, currency)
• Marketing Cookies: Used for retargeting and personalized advertising on platforms like Google, Facebook, and Instagram

5.2 Managing Cookies

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect Website functionality and your shopping experience.

5.3 Third-Party Tracking

We use the following third-party tools for analytics and marketing:

• Google Analytics
• Meta (Facebook) Pixel
• Google Ads
• Shopify Analytics
• Hotjar / Clarity (for heatmaps, where applicable)

6. DATA SECURITY

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• PCI-DSS compliant payment processing
• Firewall and intrusion detection systems
• Restricted access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• Secure password policies for employee and admin accounts

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. DATA RETENTION

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal, tax, and regulatory obligations (typically 7 years for financial records under Indian law)
• Resolve disputes and enforce agreements
• Maintain transaction history for warranty, returns, and customer support

Once data is no longer required, it will be securely deleted or anonymized.

8. YOUR RIGHTS

Under the Digital Personal Data Protection Act, 2023 and applicable Indian laws, you have the following rights:

8.1 Right to Access

You may request a copy of the personal information we hold about you.

8.2 Right to Correction

You may request corrections to any inaccurate or incomplete personal information.

8.3 Right to Erasure

You may request deletion of your personal information, subject to legal and regulatory retention requirements.

8.4 Right to Withdraw Consent

You may withdraw consent for marketing communications at any time by:

• Clicking the "Unsubscribe" link in marketing emails
• Replying "STOP" to promotional SMS
• Emailing support@uniwelco.in

8.5 Right to Data Portability

You may request a copy of your data in a machine-readable format.

8.6 Right to Grievance Redressal

You may file a complaint with our Grievance Officer (details in Section 13).

To exercise any of these rights, email us at support@uniwelco.in with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

9. CHILDREN'S PRIVACY

Our Website and products are not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a minor, we will delete it immediately. Parents or legal guardians who believe their child has provided personal information to us should contact support@uniwelco.in.

10. THIRD-PARTY LINKS

Our Website may contain links to third-party websites, payment gateways, or social media platforms. This Privacy Policy applies only to Uniwelco Pvt. Ltd. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. MARKETING COMMUNICATIONS

By providing your email address and phone number, you consent to receive:

• Transactional messages (order confirmations, shipping updates, delivery notifications) — these are essential and cannot be opted out of
• Promotional messages (offers, new launches, newsletters) — you can opt out anytime

Opt-out methods:

• Email: Click "Unsubscribe" at the bottom of any marketing email
• SMS: Reply "STOP" to opt out
• WhatsApp: Reply "STOP" or block the business number
• Account Settings: Manage preferences under "My Account" on www.gaffit.in

12. INTERNATIONAL DATA TRANSFERS

Your data is primarily stored on servers located in India. However, some of our service providers (cloud hosting, analytics, marketing tools) may store data on servers located outside India. In such cases, we ensure that adequate data protection measures are in place, in compliance with applicable Indian data protection laws.

13. GRIEVANCE REDRESSAL OFFICER

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the following officer has been appointed to address data privacy concerns and complaints:

Name: Shivam Joshi Designation: Grievance Redressal Officer & Data Protection Officer Email: support@uniwelco.in Phone: +91 90220 60634 Address: Uniwelco Pvt. Ltd., 404, Konark Apartment, Sambhaji Nagar, Wagle Industrial Estate, Thane – 400604, Maharashtra, India

All privacy-related complaints are acknowledged within 48 hours and resolved within 30 days from the date of receipt.

14. UPDATES TO THIS POLICY

We reserve the right to update, modify, or amend this Privacy Policy at any time without prior notice. The updated Policy will be posted on this page with the revised "Last Updated" date. We encourage you to review this Policy periodically.

Material changes affecting your rights will be communicated via email or a prominent notice on the Website. Continued use of the Website after such changes constitutes acceptance of the updated Policy.

15. CONSENT

By using our Website, creating an account, or placing an order, you acknowledge that you have read, understood, and agreed to this Privacy Policy and consent to the collection, use, storage, and sharing of your personal information as described herein.

16. COMPANY DETAILS

17. CONTACT US

For any questions, concerns, or requests regarding this Privacy Policy or your personal information:

📧 Email: support@uniwelco.in 📞 Phone: +91 90220 60634 🕐 Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST

© 2026 Uniwelco Pvt. Ltd. All rights reserved. FSSAI Central License No: 11525996001023