Last updated: 16 September 2026 · Effective from: 28 August 2026
This notice explains what personal data KK Nutrivet processes, why we process it, who receives it, how long we keep it, and how you can exercise your rights. It is intended to be understandable independently of our Terms of Use.
1. Who is responsible for your data
KK Nutrivet operates kknutrivet.in and is the Data Fiduciary for personal data processed through the store, pet-care tools, veterinary consultations and customer support.
Business address: Bapuji Nagar 5th Lane, Tower Lane, near Radha Krishna Temple, Brahmapur, Odisha 760004. GSTIN: 21BTUPP5889C1Z5.
2. Personal data we collect and the purpose
We limit collection to data reasonably needed for the purpose shown below:
- Account and identity data — name, email, verified phone number, authentication provider and encrypted password credentials; used to create and secure your account, communicate with you and prevent duplicate or fraudulent accounts.
- Delivery and transaction data — recipient, address, pincode, phone number, cart, orders, invoices, refunds, payment status and transaction references; used to fulfil orders, collect payment, deliver products, provide support and meet tax, accounting and consumer-law duties. We do not store full card, CVV or UPI credentials.
- Prescription and animal-care data — uploaded veterinary prescriptions, pet profile, species, breed, age, weight, care reminders, medical records, consultation concerns, messages and veterinarian-issued treatment information; used only to provide the prescription, pet-care or consultation feature requested by you.
- Support and communication data — enquiries, reviews, WhatsApp or email interactions, notification preferences and support history; used to answer requests and maintain a service record.
- Technical and security data — IP address, approximate IP-derived city/region, device/browser characteristics, login and access logs, session identifiers, errors and suspected-abuse signals; used to secure the service, diagnose failures and prevent fraud.
- Optional analytics and marketing data — page and product views, searches, clicks, scroll milestones, cart/checkout journey and campaign attribution; used only after you enable the relevant optional category in Privacy Choices.
- Precise device location — used only after you grant browser permission, to help fill or check a delivery location. You may enter an address or pincode manually instead.
Our interaction analytics are designed not to record passwords, OTPs, payment credentials, prescription contents, consultation messages, copied text, raw form values or individual keystrokes.
3. Why processing is permitted
- Your consent, for optional analytics, advertising measurement, promotional communications, device location, push notifications and other optional features.
- Your voluntary request for a specified service, such as account creation, order fulfilment, prescription review, consultation, pet profile or support.
- Compliance with Indian law, including tax, accounting, consumer-protection, fraud-prevention and lawful government requests.
- Protection of users and the service through proportionate security logging and abuse prevention.
You may withdraw optional consent as easily as you gave it. Withdrawal does not affect earlier lawful processing or processing still required to complete an order or comply with law.
4. Who receives personal data
We do not sell personal data. We disclose only what is necessary to:
- Payment providers such as Cashfree, for payment initiation, verification and refunds.
- Courier and delivery partners, for shipment and delivery using recipient, phone and address details.
- Cloud, hosting, storage and authentication providers, including Firebase/Google services and AWS storage, for operating and securing the service.
- Communications providers for OTP, transactional SMS, email, WhatsApp support and push notifications.
- Google Customer Reviews (Merchant Center), when you complete an order: we may share order ID, delivery country, estimated delivery date and your confirmation email so Google can show an optional review invitation. If you opt in, Google may place or read cookies or use similar technologies for that programme and may email you a post-delivery survey. You can manage cookies through Privacy Choices and your browser settings. See Google’s privacy policy for how Google processes that data.
- Veterinarians and video-consultation infrastructure when you book a consultation.
- AI service providers when you deliberately use Dr. Paw, scan a product/prescription or request AI-assisted matching. Only the submitted content and necessary context are sent; these tools are not a substitute for a veterinarian.
- Professional advisers, auditors, insurers or authorities when reasonably necessary or legally required.
Processors must act on our instructions, protect the data and use it only for the contracted purpose.
5. Retention and deletion
- Account and profile data: while your account is active, then deleted or anonymised after a valid erasure request unless retention is required by law or an unresolved transaction or dispute.
- Orders, invoices, payment and refund records: retained for the period required by tax, accounting, consumer-protection and fraud-prevention laws.
- Prescription and consultation records: retained while needed for review, fulfilment, follow-up, safety and applicable professional or legal record-keeping, then securely deleted or anonymised.
- Optional analytics identifiers: retained only for the configured measurement period and no longer used after you withdraw optional consent.
- Security and processing logs: ordinarily retained for at least one year where required by the DPDP Rules, and longer only when another law, security investigation or dispute requires it.
- Guest accounts and abandoned data: periodically removed when inactive and not connected to an order, consultation, prescription or other required record.
6. Security and personal-data breaches
We use encrypted transport, password hashing, access controls, role-based administration, restricted logs, backups, monitoring and processor safeguards. No system is risk-free, but we review and improve safeguards proportionate to the data involved.
If a personal-data breach is likely to affect you, we will provide a clear notice without undue delay with the known nature and impact, mitigation, safety steps and a contact for questions, and will notify the Data Protection Board as required.
7. Children
KK Nutrivet accounts, purchases and consultations are intended for adults aged 18 or older. We do not knowingly create an account for a child or use children’s data for tracking or targeted advertising. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
8. Your rights and how to exercise them
- Ask for a summary of personal data being processed and the identities of other Data Fiduciaries or Processors with whom it was shared, where applicable.
- Correct inaccurate or misleading data and complete or update incomplete data.
- Request erasure where retention is no longer necessary for the purpose or required by law.
- Withdraw consent and change optional analytics, marketing, SMS, push or location choices.
- Raise a grievance and receive a response within a reasonable period, not exceeding 90 days.
- Nominate another individual to exercise your rights in the event of death or incapacity.
Send the request from your registered email or include your registered phone number so we can verify your identity. We may ask only for information reasonably needed to verify and complete the request. If our grievance process does not resolve the matter, you may approach the Data Protection Board of India in accordance with applicable law.
9. Processing outside India
Some technology providers may process or store data outside India. We use contractual and technical safeguards and comply with any transfer restriction notified by the Central Government. We do not transfer data to a destination prohibited under applicable Indian law.
10. Grievance and privacy contact
Email: kknutrivet@gmail.com (subject: DPDP Privacy Request). Phone: +91 78469 32453. Postal requests may be sent to the business address in section 1.
State whether you are requesting access, correction, erasure, consent withdrawal, nomination or grievance resolution. We will acknowledge and track the request after verifying your identity.
11. Changes to this notice
We may update this notice when our services or legal duties change. Material changes will be presented prominently and, where renewed consent is required, the affected processing will not begin until you make a choice.