गोपनीयता नीति
SCN™ INDIA — PRIVACY POLICY
s-c-nutrition.in | SprintFlow Nutrition, India & UAE Distributor
Effective Date: April 2026 | Governed by: IT Act 2000 + DPDPA 2023 + DPDP Rules 2025
1. Introduction
SprintFlow Nutrition, the exclusive authorised distributor of SCN™ (Strength & Conditioning Nutrition UK Ltd) for India and the UAE, operates the website www.s-c-nutrition.in (the “Website”). We are committed to protecting the privacy and personal data of all visitors, customers, and users of this Website.
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we retain it, and what rights you have over your personal data.
This Policy is compliant with the Information Technology Act, 2000 (IT Act), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), the Digital Personal Data Protection Act, 2023 (DPDPA), and the Digital Personal Data Protection Rules, 2025 (DPDP Rules).
By using this Website or placing an order, you acknowledge that you have read, understood, and consent to this Privacy Policy.
2. Who We Are (Data Fiduciary)
Under the DPDPA 2023, SprintFlow Nutrition acts as the Data Fiduciary — meaning we determine the purpose and means of processing your personal data collected through this Website.
Business Name: SprintFlow Nutrition
Role: Exclusive Authorised Distributor — SCN™ India & UAE
Website: www.s-c-nutrition.in
Registered Office: India
Email: support@s-c-nutrition.in
Grievance Response Time: Within 30 days of receipt of complaint (as per IT Act 2011 Rules)
3. What Personal Data We Collect
We collect the following categories of personal data when you interact with our Website:
3.1 Data You Provide Directly
- Full name
- मेल पता
- Phone number / WhatsApp number
- Billing address and delivery address
- Payment information (processed securely via Razorpay / UPI — we do not store card details on our servers)
- Account login credentials (email and password — stored in encrypted form)
- Order history and product preferences
- Messages or queries submitted via contact forms or WhatsApp
3.2 Data Collected Automatically
- IP address and approximate location
- Browser type and device information
- Pages visited, time spent, and navigation patterns (via Google Analytics)
- Cookie identifiers (see Section 9 — Cookies)
3.3 Data We Do Not Collect
We do not collect government-issued ID numbers (Aadhaar, PAN), biometric data, financial account numbers, or any sensitive personal data beyond what is necessary for order processing and account management.
4. How We Use Your Personal Data
We process your personal data only for specific, lawful purposes. The following table explains each purpose and the legal basis under DPDPA 2023:
| Purpose | Legal Basis (DPDPA 2023) |
|---|---|
| Processing and fulfilling orders | Contractual necessity |
| Creating and managing your account | Consent + Contractual necessity |
| Sending order confirmations and delivery updates | Contractual necessity |
| Processing payments via Razorpay / UPI / COD | Contractual necessity |
| Responding to customer queries and complaints | Contractual necessity / Legitimate purpose |
| Sending promotional emails and WhatsApp messages | Explicit consent (opt-in only) |
| Improving website performance and user experience | Legitimate purpose |
| Complying with legal and regulatory obligations | Legal obligation |
| Detecting and preventing fraud | Legitimate purpose / Legal obligation |
5. Who We Share Your Data With
We do not sell, rent, or trade your personal data to any third party. We share your data only with the following service providers, strictly for the purposes described above:
- Razorpay / UPI Payment Gateways — to securely process payments. They are governed by their own privacy policies and PCI-DSS compliance standards.
- BlueDart / Shipping Partners — to fulfil delivery of orders. Only your name, delivery address, and phone number are shared.
- Google Analytics — for website traffic analysis. No personally identifiable information is shared with Google for advertising purposes.
- SCN™ UK (Strength & Conditioning Nutrition UK Ltd) — your order data may be shared with SCN for inventory, order tracking, and distributor reporting purposes only.
- Legal authorities — we may disclose your data to law enforcement, courts, or government bodies if required by Indian law or a valid legal process.
All third-party service providers are contractually required to handle your data securely and only for the specified purposes.
6. How Long We Retain Your Data
We retain your personal data only for as long as necessary for the purpose it was collected, or as required by Indian law:
- Order data: 7 years (as required by the Companies Act, 2013 and GST Act for financial records)
- Account data: Until you delete your account or request deletion
- Marketing consent records: Until you withdraw consent
- Website analytics data: 26 months (Google Analytics default)
- Customer support communications: 3 years
Once data is no longer required, it is securely deleted or anonymised.
7. Your Rights as a Data Principal
Under the DPDPA 2023, you have the following rights over your personal data:
7.1 Right to Access
You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
7.2 Right to Correction and Erasure
You may request correction of inaccurate or incomplete personal data, or request erasure of your personal data where it is no longer necessary for the purpose it was collected.
7.3 Right to Withdraw Consent
Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal of consent does not affect the legality of processing carried out before
withdrawal.
7.4 Right to Grievance Redressal
You have the right to have your grievances addressed by our Grievance Officer within 30 days. If unresolved, you may escalate to the Data Protection Board of India.
7.5 Right of Nomination
You may nominate another individual to exercise your data rights in the event of death or incapacity.
How to Exercise Your Rights
To exercise any of the above rights, contact our Grievance Officer:
Email: support@s-c-nutrition.in
Response Time: Within 30 days of receiving your request
We may ask you to verify your identity before processing your request.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
-
- SSL/TLS encryption for all data transmission on the Website
- Encrypted storage of passwords — we never store plain-text passwords
- Payment data processed via PCI-DSS compliant payment gateways — card details are never stored on our servers
- Access to customer data restricted to authorised personnel only on a need-to-know basis
- Regular security assessments of the Website
In the event of a personal data breach that may cause harm to you, we will notify the Data Protection Board of India and affected individuals as required under DPDPA 2023 and DPDP Rules 2025.
9. Cookies
Our Website uses cookies to improve your browsing experience and to analyse website traffic. Cookies are small text files stored on your device.
Types of Cookies We Use
-
-
- Essential cookies: Required for the Website to function (e.g., shopping cart, login session). Cannot be disabled.
- Analytics cookies: Google Analytics to understand how visitors use the Website. You may opt out via https://tools.google.com/dlpage/gaoptout
- Preference cookies: To remember your settings and preferences.
-
You can control cookie settings through your browser at any time. Disabling certain cookies may affect the functionality of the Website. By continuing to use this Website, you consent to our use of cookies as described above.
10. Children’s Privacy
This Website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us at support@s-c-nutrition.in and we will promptly delete such data.
In accordance with DPDPA 2023, we do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.
11. Cross-Border Data Transfers
As the authorised India distributor of SCN™ UK, certain data (such as order information) may be transferred to Strength & Conditioning Nutrition UK Ltd, based in the United Kingdom (63/66 Hatton Garden, London EC1N 8LE, Company No. 12107720).
The United Kingdom has a data protection framework (UK GDPR) considered adequate for data protection purposes. All such transfers are covered by appropriate safeguards including contractual protections.
We comply with any restrictions on cross-border data transfers that may be notified by the Government of India under DPDPA 2023.
12. Third-Party Links
Our Website may contain links to third-party websites such as Razorpay, courier tracking portals, or social media platforms. We are not responsible for the privacy practices of these third-party websites. We recommend you review their respective privacy policies before providing any personal data.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our business operations, or data processing practices. When we make material changes, we will update the Effective Date at the top of this Policy and, where appropriate, notify registered users by email.
Your continued use of the Website after any changes constitutes your acceptance of the updated Policy.
14. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000 and the DPDPA 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding your personal data:
Grievance Officer: SprintFlow Nutrition
Email: support@s-c-nutrition.in
Website: www.s-c-nutrition.in
Response Time: Within 30 days of receiving your complaint
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is operational, in accordance with DPDPA 2023.
15. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of India.
Applicable laws include: Information Technology Act, 2000 | IT (SPDI) Rules, 2011 | Digital Personal Data Protection Act, 2023 | Digital Personal Data Protection Rules, 2025 | Consumer Protection Act, 2019.
SCN™ India — s-c-nutrition.in — Exclusively Distributed by SprintFlow Nutrition — support@s-c-nutrition.in
Authorised Distributor: India & UAE | Strength & Conditioning Nutrition UK Ltd | Company No. 12107720 | 63/66 Hatton Garden, London EC1N 8LE