Privacy policy

PRIVACY POLICY

Effective Date: 9 September 2026

Last Updated: 9 September 2026

At Haven & Leaf, operated by Noole (Haven and Leaf), we respect your privacy and are committed to handling your personal information responsibly, transparently and securely.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, place an order, communicate with us, use our services, participate in our promotions or otherwise interact with Haven & Leaf.
Haven & Leaf is an Indian personal and home-care brand offering products through online and offline channels.
Our philosophy is:
Modern rituals inspired by Ancient wisdom for a more Conscious way of living.
This Privacy Policy is intended to provide you with a clear understanding of how your information is handled and the choices available to you.

WHO WE ARE

The entity responsible for processing your personal information is:
Noole (Haven and Leaf)
Business Address:
D.No.4-7/9, Unit 3,
West Gandhi Nagar, Nagaram,
Keesara Mandal, Medchal Malkajgiri District,
500083, Telangana, India
Email: info.havenandleaf@gmail.com
Phone: +91 89785 82431

For the purposes of applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 and applicable rules, Noole (Haven and Leaf) may act as the entity determining the purposes and means for processing personal data collected through our website and related business operations.

INFORMATION WE COLLECT

We collect only information that is reasonably necessary for the purposes described in this Privacy Policy.
Depending on how you interact with us, this may include:

A. Information you provide directly

This may include:

Full name
Email address
Mobile or telephone number
Billing address
Shipping or delivery address
City, state, country and postal code
Information provided through contact forms
Customer support communications
Information provided when you communicate with us through WhatsApp
Product reviews, feedback and comments
Information voluntarily provided during surveys, contests or promotions
Information relating to an order or purchase
Information you voluntarily provide when requesting bulk orders, collaborations or other services

B. Order and transaction information

When you purchase from us, we may collect information relating to:

Products purchased
Quantity and order value
Order number
Shipping and delivery information
Payment status
Refund or cancellation information
Transaction-related communications
Information necessary to investigate disputes, fraud or payment issues

C. Payment information

Payments may be processed through third-party payment service providers such as Razorpay.
Depending on the payment method used, payment providers may process information such as payment identifiers, transaction details and other information necessary to process and authenticate a payment.
Haven & Leaf generally does not need to receive or store your complete card number, CVV or payment authentication credentials.
Payment information is handled in accordance with the relevant payment provider's own terms and privacy practices.

D. Device and technical information

When you visit our website, certain information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Approximate location derived from technical information
Pages visited
Referring pages
Date and time of visits
Website interactions
Network information
Cookies and similar technologies
Technical information relating to website performance and security

E. Communications

If you contact us by email, telephone, WhatsApp, social media or other communication channels, we may retain information necessary to respond to your request and maintain appropriate business records.

HOW WE COLLECT INFORMATION

We may collect personal information through:

Our Shopify-powered website
Checkout and order forms
Customer account creation, where enabled
Contact forms
Email
WhatsApp
Telephone calls
Social media interactions
Product reviews
Surveys and feedback forms
Promotions, contests or campaigns
Offline purchases and customer interactions
Delivery and fulfilment processes
Third-party service providers acting on our behalf
Cookies and similar technologies

We may also receive information from service providers when necessary to fulfil an order, process a payment, deliver products, prevent fraud or provide customer support.

WHY WE USE YOUR INFORMATION

We use personal information for legitimate and necessary business purposes, including:

Order fulfilment

To:

Process and confirm your order
Arrange payment
Prepare and dispatch products
Deliver your order
Provide order updates
Handle cancellations, returns, refunds and exchanges
Provide customer support

Customer service

To:

Respond to enquiries
Resolve complaints
Assist with orders
Answer questions about our products
Communicate regarding your requests

Website operation

To:

Operate and maintain our website
Provide website functionality
Improve website performance
Remember relevant preferences
Troubleshoot technical problems
Protect the website against misuse and security threats

Business administration

To:

Maintain appropriate business and transaction records
Maintain accounting records
Comply with tax and legal obligations
Detect and prevent fraud
Resolve disputes
Enforce our terms and policies
Protect our legal rights

Product and service improvement

We may use information such as aggregated or appropriately de-identified information to:

Understand customer preferences
Improve products and services
Improve website usability
Analyse purchasing trends
Improve customer experience

Marketing

Where permitted and where required, we may use your information to send:

Product updates
New product announcements
Offers
Promotions
Brand communications
Educational content
Other marketing communications

You can opt out of promotional communications at any time.

MARKETING COMMUNICATIONS

We may communicate with you through email, WhatsApp, SMS or other communication channels.
Transactional communications may include:

Order confirmations
Payment confirmations
Shipping notifications
Delivery updates
Refund notifications
Customer-service responses
Important account or service notices

These communications are necessary for providing our services and may continue even if you opt out of promotional communications.
Promotional communications will be handled in accordance with applicable law and your preferences.
You may request to stop receiving promotional communications by:

Using an unsubscribe mechanism where available;
Contacting us at info.havenandleaf@gmail.com; or
Contacting us through another method we provide.

Withdrawal of marketing consent will not affect processing necessary to fulfil an existing order or provide services you have requested.

WHATSAPP COMMUNICATIONS

We may use WhatsApp to communicate with customers for purposes such as:

Customer support
Order-related communication
Delivery-related communication
Product enquiries
Business enquiries
Promotional communications where permitted

If you choose to communicate with us through WhatsApp, your interaction may also be subject to WhatsApp's own terms, privacy policy and data-processing practices.
WhatsApp publishes separate legal resources for its Business services, including Business App and Business Platform terms and data-processing terms.
We do not ask you to provide passwords, card PINs, CVVs, authentication codes or other highly sensitive payment credentials through WhatsApp.

SHOPIFY AND OUR WEBSITE

Our online store is powered by Shopify.
Shopify provides the technology that enables us to operate our online store, including functions such as checkout, customer information management, order processing and website functionality.
When you purchase from a Shopify-powered store, Shopify may process customer information on behalf of the merchant. Shopify's own documentation states that the merchant determines how and why customer information is used, while Shopify acts as a processor in that context.
Information processed through Shopify may include information such as:

Name
Email address
Telephone number
Billing address
Shipping address
Order information
Device and technical information
Website activity
Cookie-related information

Shopify also provides merchants with privacy and customer-data controls that can be configured through the Shopify administration system.
You can review Shopify's privacy practices through Shopify's own privacy documentation.

PAYMENT PROCESSING

We may use Razorpay and other authorised payment providers to process payments.
Depending on the payment method, the payment provider may process information necessary to complete the transaction.
This may include:

Name
Contact information
Transaction information
Payment identifiers
Payment method information
Device and technical information
Fraud-prevention information

Razorpay's current privacy documentation states that its processing may include personal identifiers, transaction data, device and technical information and other information necessary for payment services.
Haven & Leaf does not request or intentionally store your complete card PIN, CVV, UPI PIN or other payment authentication credentials.
Please do not send such information to us through email, WhatsApp, telephone or social media.

SHIPPING AND DELIVERY PARTNERS

To deliver your order, we may share information necessary for fulfilment with courier companies, logistics providers and delivery partners.
This may include:

Recipient name
Delivery address
Mobile number
Order details necessary for delivery
Tracking information

We only intend to share information reasonably necessary to fulfil the delivery or related service. Delivery partners may process your information under their own privacy policies and applicable contractual and legal obligations.

COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, tags, local storage and similar technologies.
These technologies may help us:

Keep the website functioning
Maintain shopping-cart functionality
Remember preferences
Understand website usage
Measure website performance
Improve customer experience
Detect fraud and security issues
Measure marketing campaigns
Provide relevant advertising, where applicable

Some cookies may be necessary for the operation of the website, while others may be used for analytics, functionality or marketing. Where applicable, cookie controls or consent mechanisms may be provided through our website or Shopify's available privacy tools. Disabling certain cookies may affect website functionality.

ANALYTICS

We may use analytics technologies to understand how visitors interact with our website.
Analytics may help us understand:

Which pages are visited
How visitors navigate our website
Which products receive interest
Website performance
Technical problems
General customer behaviour and trends

Where third-party analytics services are used, those providers may process information according to their own privacy policies and our applicable arrangements with them.
We aim to use analytics information responsibly and, where practical, in aggregated or de-identified form.

ADVERTISING AND REMARKETING

If we use advertising platforms such as Meta, Google or other advertising providers, we may use cookies, pixels or similar technologies to:

Measure advertising performance
Understand campaign effectiveness
Show relevant advertisements
Build or use audiences
Understand interactions with our website
Prevent advertising fraud

Where applicable, such processing will be subject to the relevant platform's terms and privacy practices.
We will not state that a particular advertising service is used unless that service is actually enabled on our website or marketing systems.

REVIEWS, PHOTOS AND USER-GENERATED CONTENT

We may allow customers to submit:

Product reviews
Ratings
Comments
Photographs
Videos
Testimonials
Other feedback or content

If you voluntarily submit content for publication or marketing purposes, you should avoid including unnecessary personal information about yourself or other individuals.
Where we intend to use your identifiable photograph, testimonial or other personal content for promotional purposes beyond the original purpose for which it was submitted, we will seek appropriate permission where required.
We may moderate, remove or decline to publish content that violates our policies or applicable law.

INFLUENCER, CREATOR AND COLLABORATION COMMUNICATIONS

If you contact Haven & Leaf regarding influencer collaborations, creator partnerships, bulk orders, wholesale enquiries or other business opportunities, we may process information such as:

Name
Contact information
Social media profile information
Business information
Collaboration details
Communication history
Payment or invoicing information where applicable

We use this information to evaluate, manage and communicate regarding the relevant business relationship.

HOW WE SHARE PERSONAL INFORMATION

We do not sell your personal information as a standalone product.
We may share information with appropriate third parties where necessary for legitimate business purposes, including:

Service providers

Such as:

Shopify
Razorpay
Courier and logistics providers
Customer-support providers
Communication providers
Analytics providers
Advertising platforms, where used
Accounting and professional service providers

Legal and regulatory authorities

We may disclose information where reasonably necessary to:

Comply with applicable law
Respond to lawful requests
Comply with court orders
Protect our rights
Prevent fraud or illegal activity
Protect the safety of individuals
Investigate suspected misuse of our services

Business transactions

If Haven & Leaf undergoes a merger, acquisition, restructuring, sale of assets, investment, financing or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

DATA PROCESSORS AND SERVICE PROVIDERS

Some third parties process personal information on our behalf.
Examples may include payment processors, technology providers, hosting providers, courier companies, communication providers and analytics providers.
We seek to work with service providers that are appropriate for the relevant purpose and expect them to handle information in accordance with applicable contractual and legal requirements. The exact third-party providers used may change as our business develops.

INTERNATIONAL DATA PROCESSING

Some service providers we use may process or store information outside India.
For example, technology platforms and international service providers may operate infrastructure or processing facilities in different countries.
Where personal information is transferred or made accessible outside India, we will seek to do so in accordance with applicable Indian law and any applicable contractual or regulatory requirements.

DATA SECURITY

We take reasonable measures designed to protect personal information against:

Unauthorised access
Unauthorised disclosure
Loss
Misuse
Alteration
Destruction

Security measures may include:

Access controls
Password protection
Restricted employee access
Platform security controls
Secure payment processing through authorised providers
Administrative safeguards
Technical safeguards
Monitoring and review of security practices

However, no method of transmitting or storing information over the internet can be guaranteed to be completely secure.
You should also take reasonable steps to protect your own accounts, passwords and devices.

DATA BREACHES AND SECURITY INCIDENTS

If we become aware of a personal-data security incident, we will assess the incident and take appropriate steps in accordance with applicable law.
Depending on the nature and severity of an incident, this may include:

Containing the incident
Investigating the cause
Taking corrective measures
Working with relevant service providers
Notifying appropriate authorities where legally required
Communicating with affected individuals where required by applicable law

HOW LONG WE RETAIN INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

Completing transactions
Providing customer support
Maintaining business and accounting records
Complying with tax and legal obligations
Resolving disputes
Preventing fraud
Enforcing agreements
Protecting our legal rights

Different types of information may therefore be retained for different periods.
When information is no longer reasonably required and there is no legal or legitimate reason to retain it, we may delete, anonymise or securely dispose of it.

YOUR PRIVACY RIGHTS

Subject to applicable law and any limitations that may apply, you may have rights concerning your personal information.
These may include the right to:

Access

Request information about personal data processed by us.

Correction

Request correction of inaccurate or incomplete personal information.

Erasure

Request deletion of personal information where applicable.

Withdrawal of consent

Where processing is based on consent, you may withdraw that consent.
Withdrawal will not affect processing that was lawfully carried out before withdrawal and may not affect processing that we are legally permitted or required to continue.

Grievance redressal

You may contact us regarding concerns about the handling of your personal information.

Nomination

Where applicable under Indian data-protection law, you may exercise rights concerning nomination through the mechanisms prescribed by law.
The availability and scope of these rights may depend on the applicable law and the circumstances of the processing.

HOW TO MAKE A PRIVACY REQUEST

To make a request regarding your personal information, contact:
Email: info.havenandleaf@gmail.com
Phone: +91 89785 82431

Please clearly explain the nature of your request.
For security reasons, we may need to verify your identity or confirm that the request relates to the individual concerned before taking action.
We will not request your password, UPI PIN, card PIN, CVV or other payment authentication credentials to process a privacy request.
We may retain information necessary to document the request and our response where required or reasonably necessary.

CHILDREN'S PRIVACY

Our website and services are intended for general consumers and are not specifically directed toward children.
We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.
If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at:
info.havenandleaf@gmail.com
We will assess the request and take appropriate action in accordance with applicable law.

THIRD-PARTY WEBSITES AND SERVICES

Our website or communications may contain links to third-party websites, applications or services.

Examples may include:

Social-media platforms
Payment services
Delivery tracking services
External websites
Partner websites

This Privacy Policy applies only to information handled by Haven & Leaf.
We are not responsible for the privacy practices, content or security practices of third-party websites or services.
We encourage you to review the privacy policies of third parties before providing them with personal information.

SOCIAL MEDIA

We may maintain accounts or profiles on social-media platforms.
If you interact with us through social media, information may be processed by both Haven & Leaf and the relevant social-media platform.
Your interactions with those platforms are also governed by their own privacy policies and terms.
Please avoid publicly posting personal information that you do not wish others to see.

FRAUD PREVENTION AND SECURITY

We may process information to identify and prevent:

Fraudulent transactions
Payment abuse
Account misuse
Fake or unauthorised orders
Website attacks
Unauthorised access
Other unlawful or harmful activities

This may involve sharing relevant information with payment providers, technology providers, delivery partners or authorities where reasonably necessary and permitted by law.

LEGAL AND REGULATORY COMPLIANCE

We may process and disclose information where necessary to comply with:

Applicable Indian laws
Tax requirements
Accounting requirements
Consumer-protection requirements
Court orders
Government or regulatory requirements
Law-enforcement requests
Other applicable legal obligations

We may also process information where necessary to establish, exercise or defend legal claims.BUSINESS RECORDS
Certain personal information may form part of our legitimate business records.

For example:

Invoices
Order records
Payment records
Refund records
Accounting records
Customer-service records
Tax records
Legal correspondence

Such information may need to be retained for periods required by applicable laws or reasonably necessary for legitimate business purposes.

AGGREGATED AND DE-IDENTIFIED INFORMATION

We may create aggregated or de-identified information from personal information.

Such information may be used for purposes such as:

Business analysis
Product development
Website improvement
Understanding general customer trends
Measuring business performance

Where information has been properly de-identified so that it cannot reasonably identify an individual, it may no longer be treated as personal information to the extent permitted by applicable law.

CONSENT AND WITHDRAWAL

Where we rely on consent for processing personal information, we will seek consent in an appropriate manner.
You may withdraw consent where applicable by contacting us or using the relevant mechanism provided by us.
Withdrawal of consent should be as easy and reasonably comparable to the process used to provide consent.
However, withdrawing consent does not necessarily require us to delete information that we are legally permitted or required to retain or process for other lawful purposes.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.
Changes may be made to reflect:

Changes in our business
New products or services
Changes in technology
Changes in service providers
Changes in applicable law
Changes in privacy practices

The updated policy will be posted on our website with a revised "Last Updated" date.

GRIEVANCE REDRESSAL

If you have a question, concern, complaint or grievance regarding the processing of your personal information, please contact us first.

Grievance Officer / Privacy Contact

Noole (Haven and Leaf)
Email: info.havenandleaf@gmail.com
Phone: +91 89785 82431
Address:
D.No.4-7/9, Unit 3,
West Gandhi Nagar, Nagaram,
Keesara Mandal, Medchal Malkajgiri District,
500083, Telangana, India

We will review and address privacy-related grievances in accordance with applicable law and our internal procedures.
Where applicable law provides a right to approach a regulatory authority or the Data Protection Board, nothing in this Privacy Policy is intended to restrict that right.

CONTACT US

If you have questions about this Privacy Policy or our privacy practices, you can contact us at:
Noole (Haven and Leaf)
D.No.4-7/9, Unit 3,
West Gandhi Nagar, Nagaram,
Keesara Mandal, Medchal Malkajgiri District,
500083, Telangana, India
Email: info.havenandleaf@gmail.com
Phone: +91 89785 82431

IMPORTANT NOTICE

This Privacy Policy describes Haven & Leaf's intended privacy practices and should be read together with our Terms & Conditions, Shipping Policy, Cancellation/Refund Policy, and other applicable website policies.
Where a specific law, regulation, contractual obligation or third-party service requirement imposes a different obligation, the applicable requirement will prevail.
This Privacy Policy is intended to be transparent and practical for customers and does not exclude any rights or protections that cannot lawfully be excluded.