Data Protection Declaration

CrysTell Hub by Izna Wellness Pvt. Ltd. (hereinafter referred to as the “Company”, “we”, “us”, or “our”) is committed to protecting the privacy of your personal data. This Data Protection Declaration outlines our practices concerning the collection, use, and disclosure of your information in compliance with the applicable laws of India, including the Digital Personal Data Protection Act, 2023.

1. COLLECTION OF PERSONAL DATA

We collect personal data that you voluntarily provide to us when you interact with our advertisements, fill out forms on our website, register for our services, or otherwise communicate with us. The provision of such data constitutes your consent for its collection and processing for the purposes outlined herein. The data collected may include:

  • Contact Information: Full name, email address, telephone number, and country of residence.
    Transactional Information: Billing and shipping addresses, details of products purchased or classes/sessions attended, and transaction history.
  • Statutory Information: For compliance with taxation laws, such as the Goods and Services Tax (GST), we may collect your tax identification number (e.g., GSTIN) and other data necessary for issuing correct invoices.
  • Service-Related Information: Records of your certifications, class prerequisites, and attendance to facilitate your participation in advanced programs and to maintain our service relationship with you.

2. PURPOSE OF PROCESSING PERSONAL DATA

Your personal data is processed solely for lawful purposes connected with our business functions and activities. These purposes include:

  • To provide and deliver the products, services, and information you have requested from us.
  • To fulfill our contractual obligations to you, including registering you for classes, healing sessions, and training programs.
  • To manage our relationship with you, including sending communications regarding your transactions, upcoming classes, and other service-related information.
  • To comply with our legal and regulatory obligations, including but not limited to, tax, accounting, and record-keeping requirements under applicable Indian laws.
  • To verify your eligibility and prerequisites for advanced classes, certifications, and training programs offered by the Company.
  • To protect the legitimate interests of the Company, including the prevention of fraud and the security of our systems.
  • For internal administrative purposes, record-keeping, and to improve our service offerings.

We affirm that your personal data shall not be sold or leased to any third party.

3. DISCLOSURE OF PERSONAL DATA

Access to your personal data within the Company is restricted to employees, contractors, and agents who have a legitimate need to know the information to perform their duties and to provide services to you.

We may disclose your personal data to third-party service providers who perform functions on our behalf, such as website hosting and maintenance, payment processing, logistics and delivery, information technology support, and professional advisory services (e.g., accountants, lawyers). Such third parties are contractually or legally obligated to maintain the confidentiality and security of the data and are restricted to processing it only for the specific purposes for which it was disclosed.

We may also disclose your data where required by law, regulation, or a valid order from a court or governmental authority.

4. DATA RETENTION

We shall retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required to comply with our legal obligations. The retention period will be determined by factors including:

  • The duration of our relationship with you.
  • Our legal obligations under applicable laws, such as the requirement to maintain financial and tax records for a prescribed statutory period.
  • The necessity of the data for the establishment, exercise, or defence of legal claims.

Upon the expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal policies.

5. YOUR RIGHTS AS A DATA PRINCIPAL

Subject to the provisions of applicable law, you have the right to:

  • Request access to and review the personal data we hold about you.
  • Request the correction of any inaccurate or incomplete personal data.
  • Withdraw your consent to the processing of your personal data at any time.
  • Request the erasure of your personal data.

To exercise any of these rights, you may submit a written request to us through the contact details provided on our official website. We will process your request in a timely manner, subject to proper verification of your identity.

Please be advised that the right to erasure is not absolute. We may be legally required or entitled to retain your data despite your request, for instance, to comply with statutory obligations or for the establishment of legal claims. Furthermore, the withdrawal of consent or a request for erasure of data essential for the provision of our services may result in our inability to continue providing such services to you, and we shall not be liable for any such cessation of services.

6. DATA SECURITY

We implement reasonable technical, administrative, and physical security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. To the fullest extent permitted by law, the Company shall not be liable for any unauthorized access or security breach that is beyond our reasonable control.

7. AMENDMENTS TO THIS DECLARATION

We reserve the right to amend this Data Protection Declaration at any time to reflect changes in our practices or in the law. Any updates will be posted on our website, and we encourage you to review this Declaration periodically.

8. GRIEVANCE REDRESSAL

For any queries, concerns, or grievances related to the processing of your personal data, or to exercise your rights, please contact us at:

CrysTell Hub by Izna Wellness Pvt. Ltd.

Website: www.crystellhub.com
Email: orders@ crystellhub.com
Address: 127, Qutub Plaza, DLF Phase 1, Gurgaon – 122002, Haryana.