Privacy policy

Privacy Policy

Three65®

Last Updated: January 2026

1. Introduction

This Privacy Policy governs the collection, use, processing, storage, disclosure, and protection of Personal Data by Syemco Lifesciences Pvt. Ltd. (“Company”, “we”, “our”, or “us”) through the Three65 website, mobile site, and related services (collectively, the “Platform”).

“Personal Data” means any information that identifies or relates to an identifiable individual.

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Company acts as a Data Fiduciary with respect to your Personal Data.

By accessing, registering, transacting, or otherwise using the Platform, you provide free, specific, informed, and unambiguous consent to the collection and processing of your Personal Data in accordance with this Privacy Policy and applicable law. If you do not agree with this Policy, you must discontinue use of the Platform.

2. Information We Collect

We collect only such Personal Data as is reasonably necessary, proportionate, and relevant for providing our services. Personal Data is processed solely for specified, lawful purposes and not in a manner incompatible with those purposes. When you create an account, place an order, or subscribe to our services, we may collect your full name, email address, mobile number, shipping and billing address, date of birth (where voluntarily provided), and account login credentials, where applicable. You are responsible for ensuring that the information you provide is accurate, complete, and kept up to date.

We do not store or process your debit or credit card details. All payment transactions are securely processed through Razorpay, a PCI-DSS compliant payment gateway acting as an independent Data Processor. We receive only limited transaction information, including transaction ID, payment status, and mode of payment.

We may automatically collect certain technical and usage-related information, including IP address, device and browser details, pages visited, session analytics, purchase behavior, and interaction data. This information may be collected through cookies, analytics tools, and advertising technologies, including Meta and Google Ads. Such processing enables us to improve platform functionality, detect fraudulent activity, optimize marketing performance, and enhance user experience. We do not knowingly collect sensitive personal data unless voluntarily provided and legally permissible.

3. Lawful Basis for Processing

We process Personal Data based on explicit consent (including for marketing communications and non-essential cookies), performance of a contract (such as order fulfillment, delivery, and account services), compliance with legal obligations (including taxation, accounting, and regulatory reporting), and legitimate business purposes such as fraud prevention, analytics, risk monitoring, and operational improvement.

You may withdraw your consent at any time by contacting us at care@three65.in. Withdrawal of consent does not affect prior lawful processing and may limit access to services where such processing is essential for contract performance.

4. How We Use Your Information

Your Personal Data may be used to process payments, generate invoices, and coordinate delivery through logistics partners such as Shiprocket and affiliated courier services. We use your information to send order confirmations, shipping updates, OTP authentication messages, and customer support communications.

Where you provide consent, we may send promotional emails, SMS or WhatsApp campaigns, and personalized digital advertisements. You may opt out of such communications at any time.

Personal Data may also be used for fraud detection, prevention of chargeback abuse, enforcement of promotional policies, and protection of business interests.

5. Sharing of Information

We do not sell, rent, or trade Personal Data. Personal Data may be shared with trusted third-party service providers for legitimate business purposes, including logistics and delivery services, payment processing, IT infrastructure and hosting, analytics, and marketing support. Such service providers act under contractual obligations requiring confidentiality, security safeguards, and compliance with applicable data protection laws. Payment transactions are securely handled by Razorpay. Personal Data may also be disclosed where required by applicable law, judicial order, regulatory authority, or governmental directive.

6. Business Transfers

In the event of a merger, acquisition, restructuring, investment transaction, or sale of assets, Personal Data may be transferred as part of such transaction, subject to confidentiality obligations and compliance with applicable law.

7. Cross-Border Data Transfers

Certain service providers, including cloud hosting, analytics, and advertising partners, may process Personal Data outside India. By using the Platform, you acknowledge and consent to such transfers, subject to appropriate safeguards and compliance with applicable data protection laws.

8. Cookies & Advertising Controls

The Platform uses essential cookies required for website functionality, analytics cookies to measure and improve performance, and marketing cookies to deliver personalized advertisements. You may manage cookie preferences through browser settings or consent mechanisms provided on the Platform. Disabling cookies may limit certain functionalities.

9. Data Security & Breach Response

We implement reasonable technical and organizational safeguards, including SSL encryption, secured hosting infrastructure, restricted internal access controls, and periodic security assessments. While we strive to protect Personal Data, no digital system can guarantee absolute security. In the event of a data breach likely to impact your rights or freedoms, we will notify affected users and relevant authorities in accordance with applicable law. We do not engage in automated decision-making that produces legal or similarly significant effects on users.

10. Data Retention

Personal Data is retained only for as long as necessary to fulfill contractual obligations, comply with legal and tax requirements, resolve disputes, enforce agreements, and prevent fraud. Order-related and financial records may be retained for up to eight years in accordance with applicable financial regulations. Upon expiry of retention requirements, Personal Data will be securely deleted or irreversibly anonymized.

11. Your Rights

Subject to applicable law, you may request access to your Personal Data, request correction of inaccurate information, request erasure (subject to legal retention requirements), withdraw consent, nominate another individual to exercise rights on your behalf, or request grievance redressal. We may require identity verification prior to processing such requests. If you are dissatisfied with our response, you may approach the Data Protection Board of India under the DPDP Act. Requests may be submitted to: care@three65.in

12. Children’s Privacy

The Platform and products are intended for individuals aged 18 years and above. We do not knowingly collect Personal Data from minors. If such data is identified, it will be deleted in accordance with applicable law.

13. Limitation of Liability

To the extent permitted by law, Three65 shall not be liable for unauthorized access, alteration, disclosure, or destruction of Personal Data arising from circumstances beyond our reasonable control, including cyber intrusions, force majeure events, third-party system failures, or events not attributable to our negligence. Nothing in this Policy limits liability where prohibited under applicable law.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect operational, technological, or legal changes. Continued use of the Platform after such updates constitutes acceptance of the revised Policy.

15. Governing Law & Jurisdiction

This Privacy Policy shall be governed by the laws of India. All disputes shall be subject to the exclusive jurisdiction of the competent courts in Indore, Madhya Pradesh, India.

16. Grievance Officer

In accordance with applicable law, the Grievance Officer of Three65 may be contacted at: care@three65.in

For complete company and registered office details, please refer to the “Contact Us” section of the Platform. Grievances will be acknowledged within 48 hours and resolved within 15 working days.