Effective date: 20 July 2026
Purpose of This Notice
This GDPR Privacy Notice explains how IBN Herbals, a unit of Curetech Formulation Pvt. Ltd., handles the personal data of individuals located in the European Economic Area (EEA) and the United Kingdom, in accordance with the General Data Protection Regulation (GDPR). It supplements our main Privacy Policy for visitors and partners covered by these regulations.
Data Controller
For the purposes of the GDPR, the data controller is IBN Herbals (a unit of Curetech Formulation Pvt. Ltd.), [Client to confirm registered address], Baddi, Himachal Pradesh, India. For any data protection queries, please contact us at [Client to confirm email].
Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so under the GDPR. Depending on the situation, this may be your consent (for example, when you submit an enquiry form or accept cookies); our legitimate interests in operating and promoting our business and responding to enquiries; the performance of a contract with you or your organisation; or compliance with a legal obligation.
Your Rights Under the GDPR
If you are located in the EEA or UK, you have the following rights in relation to your personal data:
- Right to access — to obtain confirmation of, and a copy of, the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure — to request deletion of your data in certain circumstances (“right to be forgotten”).
- Right to restrict processing — to limit how we use your data in certain situations.
- Right to data portability — to receive your data in a structured, commonly used format.
- Right to object — to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — at any time, where processing is based on your consent.
International Data Transfers
As we are based in India, any personal data you provide may be transferred to and processed in India. Where we transfer personal data of EEA/UK individuals, we take appropriate safeguards to ensure it is protected to a standard consistent with the GDPR.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, or as required to meet legal, regulatory, or business record-keeping obligations, after which it is securely deleted or anonymised.
How to Exercise Your Rights or Make a Complaint
To exercise any of your rights, please contact us using the details above. We will respond within the timeframes required by the GDPR. If you believe we have not handled your personal data appropriately, you also have the right to lodge a complaint with your local data protection supervisory authority.
Changes to This Notice
We may update this GDPR Privacy Notice from time to time. The current version, with its effective date, will always be available on this page.
Final reminder: Confirm all bracketed details, insert your go-live/effective dates, and have your legal advisor review the Privacy, GDPR, and Terms & Conditions pages before publishing. The Support and Cookie pages are safe to finalise once contact details and the cookie tools in use are confirmed.