Root & Bloom is the nutrition practice of Monali Jain, a registered nutritionist based in Jaipur, India. This notice explains what information this website collects, why we collect it, who processes it, and the choices you have. It is written with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) in mind.
What we collect
- If you join the mailing list or take the quiz: your email address, an optional name, and — if you took the quiz — the resulting category. Your individual quiz answers are processed in your browser and are not sent to us.
- If you have a client portal account: your email address and a password. Passwords are stored only as a one-way hash; we cannot read them.
- If you buy something: which product you bought, the amount, and any payment reference you share with us so we can confirm it.
- Automatically:aggregate usage information (pages viewed, general region, device type) to understand what is useful. See “Cookies and analytics” below.
What we never collect
We do not receive or store your card numbers, bank credentials, or UPI PIN. Payments happen inside your own UPI app; this website only displays a payment link or QR code. Consultations and day-to-day conversations happen on WhatsApp, which is governed by its own privacy terms.
Why we use it
- To send the recipes and notes you asked for, and to reply when you contact us.
- To give you access to the resources you have purchased.
- To keep our own records of orders and consultations.
- To understand which pages are useful so we can improve them.
We do not sell your information, and we do not use it for advertising.
Consent and withdrawing it
We only email you if you opted in, using an unticked box — that is what makes it consent. You can withdraw at any time by replying to any email or messaging us; we will stop marketing emails and, on request, delete your details.
Who processes your information
We keep the number of third parties small. Information is handled by the services that run this website:
- Vercel — website hosting, file storage, and privacy-friendly analytics.
- Neon — the database where mailing-list and account records live.
- Brevo — the email service used to send the mailing list, if you opted in.
These providers process data on our behalf, and some may store it outside India.
Cookies and analytics
The site uses privacy-friendly, cookieless analytics to count visits. If Google Analytics is enabled, it may set cookies to measure usage; you can block cookies in your browser settings without losing access to the site. Signing into the client portal sets a necessary session cookie so you stay logged in.
How long we keep it
Mailing-list details are kept until you unsubscribe or ask us to delete them. Account and order records are kept while you are a client and for as long as we need them for legitimate business and legal records.
Your rights
Under the DPDP Act you can ask us to:
- confirm what personal information we hold about you, and access it;
- correct anything inaccurate or out of date;
- delete your information, where we are not required to keep it;
- withdraw consent you previously gave.
To make a request, or to raise a concern, contact us using the details below. We will respond within a reasonable period. If you are not satisfied, you may escalate to the Data Protection Board of India.
Children
This site is intended for adults. We do not knowingly collect information from children, and we ask that under-18s use the site with a parent or guardian.
Changes to this notice
If this notice changes materially, we will update the date at the top of this page.
Contact
For any privacy question or request, write to jainaastha44@gmail.com or message us on WhatsApp. Please also read our health disclaimer.