TheCeutic Lab

Privacy Policy

Last updated: October 2026

The Ceutic Lab ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian laws.

1. Data We Collect

We collect the following personal data:

  • Email address — when you sign up for our waitlist
  • IP address — for spam prevention and rate limiting (not linked to your identity)
  • Basic analytics data — page views, device type, country (aggregated, non-identifying)

2. Purpose of Processing

We use your personal data for the following purposes:

  • To manage our waitlist and notify you about our launch
  • To send you a confirmation email to verify your email address
  • To prevent spam and abuse of our services
  • To improve our website and user experience through aggregated analytics

3. Lawful Basis (DPDP Act, 2023)

Under the DPDP Act, 2023, we process your personal data based on your consent. By submitting your email to our waitlist, you consent to the processing described in this policy. You may withdraw your consent at any time (see Section 7).

4. Data Storage and Security

  • Your data is stored in a secure PostgreSQL database hosted on servers with encryption at rest and in transit
  • We use industry-standard security measures to protect against unauthorised access, alteration, or destruction
  • We do not sell, rent, or share your personal data with third parties for their marketing purposes

5. Data Sharing

We may share your data with the following categories of service providers, solely for the purposes described above:

  • Email service — to send confirmation and launch notification emails
  • Hosting provider — to serve our website
  • Database provider — to store waitlist entries

These providers are bound by their own privacy policies and applicable data protection obligations.

6. Data Retention

We retain your waitlist data for a maximum of 24 months from the date of collection, or until you request its deletion, whichever comes first. If you do not confirm your email within 30 days, your unconfirmed entry may be automatically deleted.

7. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act, 2023, you have the right to:

  • Access — Request a summary of the personal data we hold about you
  • Correction — Request correction of inaccurate or incomplete data
  • Erasure — Request deletion of your personal data
  • Withdraw consent — Withdraw your consent at any time by emailing us
  • Grievance redressal — Contact our grievance officer (details below)

8. Cookies

Our website uses only essential cookies required for the website to function. We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date.

11. Contact Us

For any questions, concerns, or requests related to your personal data or this Privacy Policy, please contact us at:

Email: hello@theceuticlab.in

Grievance Officer: [To be appointed — details will be updated before commercial launch]