Privacy and Data Deletion Requests

You can request access, correction, deletion or withdrawal of permission. A request starts a verified review; this page does not itself delete data. We explain any information that must be retained and why.

1. What a request covers

Tell us whether you want to close an account, delete optional wellness information, stop promotions, remove linked identifiers or make a broader request. Relevant records may include account/address details, quiz answers, results and diet plans, reservations, support or WhatsApp history, marketing records and linked visitor/device identifiers. The scope is assessed across systems and relevant processors.

2. Records that may need retention

Some order, invoice, payment, security or dispute records may need retention for a specific legal obligation or active claim. Retention is category-specific; “up to eight years” is not a universal deletion rule. We will explain the categories retained and their reason and retention period or criterion. Retained records are restricted to the permitted purpose. Minimal opt-out records can be kept to prevent unwanted promotional contact. Backups follow their retention cycle and applicable legal holds; we explain relevant limitations in the response.

3. Send a request

Email privacy@truwe.in with the subject “Privacy Request”, your requested action, and a registered email, phone number or order reference if available. You do not need to have an email-based account. If you cannot access the registered contact, say so and we will arrange proportionate verification through a suitable channel. You can also contact hello@truwe.in for routing assistance.

We verify that the request concerns your information before disclosure or deletion. Do not send passwords, OTPs, PINs, full card details or an identity document unless a justified, secure verification process specifically requires it. We do not require you to waive a right in order to request deletion.

4. Response times

Our service target is acknowledgment within 48 hours and completion of a straightforward verified request within 30 days. These are service targets, not a claim that the DPDP Act prescribes a universal 30-day deletion deadline. If verification, a legal retention requirement or processor handling affects completion, we explain the reason and next steps. Applicable statutory deadlines take priority; consumer complaints are addressed within one month.

5. Marketing and linked services

Use Privacy settings for optional browser tracking and the relevant unsubscribe or STOP option for promotions. A promotional opt-out does not prevent necessary order or security communications. A broader deletion request includes review of relevant processor-held records; an independent provider may also hold data under its own policy. For information held directly by WhatsApp or Facebook, use the provider's account controls.

6. Outcome and escalation

We respond through an agreed verified contact with the action taken, any lawful retention, unresolved processor steps and the route for raising a concern. Business and grievance contacts appear below.