Viewing policy
This privacy policy (“Policy”) is published in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 ("SPDI Rules").
Who We Are
www.SIX6R.com its associated sub-domains, mobile applications, and digital services ("Website") is owned and operated by Shuddhi Drinks Private Limited ("SDPL", "we", "us", "our", “Company”), a company incorporated under the Companies Act 2013, CIN: U11049MH2025PTC451636, with registered office at B 102, Venus Bldg, Vasant Valley, Film City Rd, Malad East, Behind Aster Tower, Malad East, Mumbai, Maharashtra, India – 400097.
By accessing or using the Website, you (“User”) acknowledge that you have read, understood and agreed to be bound by this Policy, which shall be deemed to create a legal contract between the Company and the User. If you do not agree with this Policy, please refrain from accessing or using the Website or providing any personal data to us.
The User hereby agrees that the User’s consent is free, specific, informed, unconditional and unambiguous and is with a clear affirmative action. Such consent shall be limited to the personal data necessary for the specified purposes set out in this Policy.
If any provision of this Policy is held to be invalid or unenforceable, the remaining provisions shall continue to remain in full force and effect.
The User acknowledges that consent, acceptance, acknowledgements and other actions performed through electronic means, including by clicking, selecting, tapping, submitting information or continuing to use the Website, shall constitute valid electronic records and, where applicable, legally binding electronic acceptance in accordance with the Information Technology Act, 2000.
Scope
This Policy applies to personal data we collect from you when you access or use the Website, place an order, create an account, contact us (including by email or phone number), participate in promotions, or otherwise interact with us. This Policy does not apply to third-party websites or services that we do not control, even if linked from our Website.
Data We Collect
You give us directly: Personal information that the User voluntarily provides when using our Website or services, including but not limited to name, email address, phone number, billing and delivery address, order details, when you place an order, register an account, and/or contact us.
Sensitive personal information: Financial information that the User voluntarily provides when using our Website or services e.g. bank account details and payment card details. We do not intentionally collect sensitive personal data or information ("SPDI") (as defined under the SPDI Rules) unless required for providing our services (for example, payment instrument details processed by our payment processing partners for completing a transaction).
We collect automatically: Information about the User's device/computer hardware and software that may be automatically collected by the Company including but not limited to IP address, browser type, device type, pages visited, session duration, and interaction data, collected via cookies and analytics tools when you use our Website.
Via advertising and analytics platforms: Behavioural data including pages visited, products viewed, and purchase actions collected via Meta Pixel and Google Tags (including Google Analytics and Google Ads) to measure Website performance and deliver relevant advertising.
Via communications: Any messages, queries, or feedback you send us via email, WhatsApp, or any other communication channel.
(Collectively hereinafter be referred to as "Data".)
For the purposes of the SPDI Rules, (i) the agency collecting the Data is Shuddhi Drinks Private Limited, and (ii) the agency that will retain the Data is Shuddhi Drinks Private Limited and/or its service providers engaged for the purposes set out in this Policy.
You may choose not to provide certain personal data, including SPDI, by not submitting such information. However, where such information is necessary for us to provide goods or services, we may not be able to provide such goods or services without it.
How We Use Your Data
Processing, fulfilling, and tracking your orders
Sending transactional communications e.g. order confirmation, dispatch updates, delivery status
Sending promotional communications e.g. only where you have provided explicit consent or where otherwise permitted by applicable law
Running advertising campaigns and retargeting via Meta and Google platforms using anonymised audience signals
Website analytics and user experience improvement
Fraud detection and prevention
Meeting our legal obligations under applicable law including GST, FSSAI regulations, and consumer protection rules
Responding to your enquiries, requests, complaints and grievances
Protecting the security, integrity and functionality of our Website and services
Purpose of Collection of Data
Contractual necessity to fulfil orders you place with us;
Legitimate interests inter alia analytics, security, and fraud prevention;
Consent inter alia marketing communications and non-essential cookies;
Compliance with applicable legal and regulatory obligation;
To administer and operate our Website and business;
To customize our Website based on your preferences, including marketing preferences, cookie preferences and other privacy-related settings;
To send marketing and promotional communications about our products, services, offers, events, campaigns and other promotions, where permitted by applicable law and based on your preferences or consent, as applicable;
Resolve queries raised by you and seek feedback from you;
To provide customer support more effectively; and
To conduct market research to understand trends and customer behaviour.
Data Retention
| Data type | Retention period |
|---|---|
| Order and transaction records | For 72 (seventy-two) months from the due date of furnishing the annual return for the financial year to which such accounts and records pertain, or for such longer period as may be required under applicable law, including where records are relevant to an appeal, investigation, audit, or other proceeding. |
| Marketing consent records | For as long as necessary for the stated purpose until consent is withdrawn and thereafter only for as long as necessary to demonstrate compliance, address disputes, or meet applicable legal/regulatory requirements. |
| Analytics and behavioural data | For as long as necessary for the stated purpose, subject to applicable law and the respective platform's retention policy. |
| Account and profile data | Until account deletion/cancellation, and thereafter for 180 days where required under applicable law; thereafter, only for as long as required for legal, regulatory, security, dispute-resolution or other legitimate purposes |
| Cyber Incident & Security Logs (CERT-In Directions / IT Act) | Server, firewall, and system security logs must be maintained within Indian jurisdiction for rolling 180-day periods |
| Consumer grievance records | For the period necessary to resolve the grievance and as otherwise required under applicable law. |
Where retention is required by law, regulation, litigation, audit or enforcement purposes, we may retain Data for such longer period as required under applicable law.
Your Rights
You have the right to:
Access Data we hold about you;
Correct inaccurate or incomplete information;
Request erasure of your Data, subject to our legal retention obligations;
Withdraw consent for SPDI, marketing or non-essential cookies at any time;
Nominate a representative to exercise these rights on your behalf; and
Seek grievance redressal regarding the processing of your Data.
We will acknowledge your request within 48 (forty-eight) hours and respond within the timeframe prescribed by applicable law.
DUTIES OF USER
The User is required to observe the following duties while exercising rights under the applicable data protection laws:
Compliance with Applicable Law: The User shall comply with the provisions of all applicable data protection laws while exercising rights under this Policy. Users agree not to use the Website for any unlawful purpose, including but not limited to transmitting viruses, worms, malware, or code of a destructive nature. Users shall not attempt to gain unauthorized access to any portion of the Website, disrupt infrastructure operations, reverse engineer checkout algorithms, or post false, defamatory, deceptive, or sponsored fake reviews on product listings.
No Impersonation: The User shall not impersonate another person while providing Data for any specified purpose.
No Suppression of Material Information: The User shall not suppress any material information while providing Data for any document, unique identifier, proof of identity, or proof of address issued by the governmental authority.
No False or Frivolous Grievances: The User shall not register a false or frivolous grievance or complaint with the Company.
Furnishing Verifiably Authentic Information: While exercising the right to correction or erasure of Data, the User shall furnish only such Data as is verifiably authentic.
Cross-Border Data Transfers
Our advertising and analytics partners, including Meta Platforms Inc. (USA) and Google LLC (USA), may process your Data outside India. By accepting non-essential cookies, you consent to this transfer. Where your Data is transferred outside India, such transfers shall be carried out in accordance with applicable law and subject to appropriate contractual, technical or organisational safeguards.
These platforms operate under internationally recognised data transfer frameworks and standard contractual safeguards.
Security
We maintain reasonable technical and organisational measures including HTTPS encryption, access controls, and secure hosting to protect your Data. No system is entirely immune to breach. By using the Website, you acknowledge that transmission of information over the internet cannot be guaranteed to be completely secure and that any transmission is at your own risk. If you suspect unauthorised access to your Data, please contact us immediately.
We have adhered to international standard IS/ISO/IEC 27001 on "Information Technology -Security Techniques - Information Security Management System - Requirements" for ensuring security and data protection.
Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently. The Company disclaims all liabilities arising out of any third-party websites.
Children's Data
Our Website is not directed at individuals under 13 (thirteen) years of age. We do not knowingly collect or process Data of children or persons with disabilities where consent of a lawful guardian is required under applicable law. If we become aware that such Data has been collected inadvertently, we may take appropriate steps to delete it.
