Privacy Policy

PRIVACY POLICY

Last updated: 21 August 2026

  1. ABOUT THIS POLICY

This Privacy Policy explains how Nesta Botanicals (“Nesta,” “we,” “us” or “our”) collects, uses, stores and shares personal data when you:

• visit www.nestabotanicals.com;
• submit a manufacturing or product-development enquiry;
• complete our Start Your Project brief;
• book or attend a consultation;
• purchase a service through our website;
• communicate with us by email, telephone, video call or another channel; or
• otherwise interact with Nesta Botanicals.

Nesta Botanicals is a proprietorship established under the laws of India, with its principal place of business at Unit 39, Industrial Area Nagri, Phase 2, Tehsil Palampur, District Kangra, Himachal Pradesh 176059, India.

  1. PERSONAL DATA WE COLLECT

Depending on how you interact with Nesta, we may collect:

a. Identity and contact information

Your name, business name, designation, postal address, country, email address and telephone number.

b. Project and business information

Information submitted through the Start Your Project brief or otherwise shared with us, including:

• proposed products and product categories;
• target customer and intended market;
• formulation preferences and reference products;
• ingredients, claims and performance expectations;
• anticipated quantities, budget and launch timeline;
• packaging and regulatory requirements;
• company-registration and export information; and
• presentations, reference images, briefs or other documents you choose to provide.

Project information may constitute personal data when it identifies or relates to an individual.

c. Consultation and appointment information

Selected appointment date and time, time zone, booking status, rescheduling history and information discussed during the consultation.

We do not ordinarily record consultations. A consultation will be recorded only with the prior knowledge and agreement of the participants.

d. Transaction information

Services purchased, invoices, payment status, applicable taxes, billing address and transaction references.

Complete card, bank-account or payment credentials are processed by the applicable payment provider and are not ordinarily stored by Nesta.

e. Communications

Emails, support requests, feedback and other correspondence exchanged with Nesta.

f. Technical and usage information

IP address, browser and device information, cookie identifiers, pages visited, referring pages, approximate location derived from technical data and information concerning your interaction with the website.

  1. HOW WE COLLECT PERSONAL DATA

We collect personal data:

• directly from you when you submit a form, book a service, make a payment or contact us;
• automatically through cookies and similar website technologies;
• from service providers that support our website, forms, booking, payment and communication systems; and
• from a colleague, employer, business partner or authorised representative who provides your details in connection with a project.

If you submit another person’s personal data, you confirm that you are authorised to provide it for the stated purpose.

  1. HOW WE USE PERSONAL DATA

We may process personal data to:

• review and respond to enquiries;
• assess whether a proposed project is technically, commercially or regulatorily feasible;
• prepare for and conduct consultations;
• schedule appointments and send reminders;
• process payments and issue invoices or refunds;
• prepare proposals, quotations and project documentation;
• provide formulation, manufacturing, testing, packaging and regulatory-support services;
• communicate about an active or prospective project;
• provide customer support and resolve complaints;
• operate, secure and improve our website and services;
• prevent fraud, misuse and security incidents;
• maintain business, tax, accounting and compliance records;
• establish, exercise or defend legal rights;
• comply with applicable laws and directions of competent authorities; and
• send marketing communications where you have consented or where otherwise permitted by law.

Recommendations made through a consultation may be informed by the business and project information supplied by you.

  1. BASIS FOR PROCESSING

Depending on the circumstances and applicable law, we process personal data:

• with your consent;
• to take steps requested by you before entering into a contract;
• to perform a contract or provide a purchased service;
• because you voluntarily provided the data for a specified business purpose;
• to comply with a legal obligation;
• to protect our systems, business and legal rights; or
• for legitimate business interests, where recognised by applicable law and not overridden by your rights.

Where processing is based on consent, you may withdraw that consent. Withdrawal does not affect processing already carried out lawfully and may prevent us from continuing a service that requires the relevant information.

  1. SERVICE PROVIDERS AND DISCLOSURES

We may share personal data only where reasonably necessary with service providers such as:

• Shopify, which hosts and supports our online store;
• Primy or another provider supporting our project-enquiry forms;
• BookX/Bookeasy, which supports consultation scheduling;
• payment gateways and financial-service providers;
• Google Calendar, Google Meet or another meeting provider;
• email, cloud-storage and business-communication providers;
• analytics, website-security and technical-support providers;
• laboratories, consultants, logistics providers or regulatory specialists involved in a project, where appropriate; and
• professional advisers, auditors, insurers or government authorities where legally required.

These providers may process data under their own privacy notices and contractual responsibilities.

We may also disclose information where necessary to comply with law, respond to a lawful request, protect rights or safety, investigate fraud, or in connection with a lawful restructuring or transfer of the business.

Nesta Botanicals does not sell or rent personal data.

We do not disclose a prospective client’s project brief to unrelated brands for their independent marketing.

  1. INTERNATIONAL PROCESSING

Some service providers may process or store data outside India or outside the country in which you are located.

Where required, we use legally recognised safeguards and contractual arrangements for international transfers. International users should be aware that their information may be processed in India and in countries where our technology providers operate.

  1. COOKIES

Our website uses essential cookies required for functions such as navigation, security, appointment booking and payment processing.

Subject to your selections and applicable law, the website may also use analytics, preference or marketing cookies.

You may manage cookies through the cookie banner, where available, or through your browser settings. Blocking essential cookies may prevent certain website, booking or checkout functions from working correctly.

  1. MARKETING COMMUNICATIONS

We may send newsletters, service updates or promotional communications where you have requested them or where otherwise permitted by applicable law.

You may unsubscribe through the link provided in a marketing email or contact support@nestabotanicals.com.

Unsubscribing from marketing does not prevent us from sending transactional or project-related communications.

  1. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting, contractual and dispute-resolution requirements.

As a general practice:

• enquiry and project-brief information may be retained for up to three years after the last meaningful interaction, unless a project proceeds or a longer period is reasonably required;
• active-project records are retained for the project duration and any subsequent legal or quality-documentation period;
• transaction, invoice and tax records are retained for the period required by applicable law; and
• marketing information is retained until consent is withdrawn, the communication is no longer relevant or deletion is otherwise appropriate.

Data may be retained for longer where necessary to establish, exercise or defend legal claims or comply with regulatory requirements.

  1. SECURITY

Nesta uses reasonable administrative, organisational and technical safeguards designed to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.

No method of electronic transmission or storage is completely secure. Please do not submit passwords, complete payment credentials, unnecessary identity documents, trade secrets belonging to another party or highly sensitive information through an unsecured channel.

Where required by law, affected individuals and competent authorities will be informed of a qualifying personal-data breach.

  1. YOUR RIGHTS

Depending on the law applicable to you, you may have the right to:

• obtain information about personal data being processed;
• request access to or a summary of your personal data;
• correct inaccurate or misleading data;
• complete or update incomplete data;
• request erasure where retention is no longer necessary or legally required;
• withdraw consent;
• object to or restrict certain processing;
• opt out of marketing;
• request portability of eligible data;
• nominate another individual to exercise applicable rights in the event of death or incapacity; and
• raise a grievance or complain to the competent data-protection authority.

Rights are subject to applicable legal limitations. We may request reasonable information to verify your identity before acting on a request.

To exercise a right, email support@nestabotanicals.com with the subject “Privacy Request.”

  1. CHILDREN

The website and Nesta’s B2B services are not intended for persons under 18 years of age.

We do not knowingly solicit personal data from children. If you believe a child has submitted personal data, please contact us so that appropriate action can be taken.

  1. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services. Their privacy and security practices are governed by their own policies. Nesta is not responsible for the content or practices of independently operated third-party platforms.

  1. CHANGES TO THIS POLICY

We may revise this Privacy Policy to reflect changes in our practices, service providers or legal requirements.

The updated policy will be published on the website with a revised “Last updated” date. Where required by law, we will provide additional notice or request renewed consent.

  1. PRIVACY AND GRIEVANCE CONTACT

Email: support@nestabotanicals.com

We aim to acknowledge privacy grievances within 48 hours and provide an appropriate response within 30 days, subject to the nature and complexity of the request.