DRAFT / FOR LEGAL REVIEW / 24 OCTOBER 2026

Your details, handled with intention.

Nishivana is preparing Founding Batch No. 01 — The Forest Edit. A reservation is an expression of interest, not an order. No payment is taken, and neither stock nor allocation is guaranteed. This notice explains the proposed handling of reservation information and the current preview's limitations; it is not a claim that every launch safeguard is already operating.

Unresolved details: publish before public collection

Privacy and grievance contact: [EMAIL]. Location: [CITY], India. Retention: [RETENTION PERIOD]. These are unresolved placeholders, not working contact details or a completed deletion schedule. The operator must verify and publish the responsible business identity, a monitored grievance contact and the retention policy before collecting public reservations. Please do not send personal information to a placeholder or submit real details while these requirements remain unresolved.

What the reservation asks for

The current form requires your name, email, country, state or province, city and address, together with one or more fragrance interests: Chandra, Surya, Shukra, Guru or Shani. A phone number, including its country calling code, is optional. Your preferred contact choice is email or WhatsApp; WhatsApp contact needs an optional number you choose to provide. Email remains available without a phone number. Founder circle participation and a free-text note are optional.

We aim to minimise fields and use information only for the stated release purpose. Name and email support a personal reply; fragrance selections help us understand interest. Location fields describe potential delivery regions, but requiring a full address before an offer needs a necessity review. The current form does require it; that requirement must be justified or reduced before public collection. Please do not include identity documents, payment information, health details or another person's private information in a note.

Separate choices, separate purposes

Reservation contact consent is required to send the request and permits communication about this release. Optional batch-letter consent must remain unchecked by default and must not be a condition of expressing interest. Founder circle interest is not blanket permission for unrelated marketing. Choosing a contact preference does not consent to public disclosure, sale of your details or a purchase. No payment card or banking details are requested.

Transmission and browser storage

The configured reservation flow sends a POST request to a Google Apps Script receiver, intended to write the record into a private Google Sheet. A readable acknowledgement is needed before the interface reports receipt; receipt still does not confirm an order or stock. The operator must verify deployment permissions, restrict Sheet access to authorised people and test deletion and security arrangements. Google may process information outside India; its services and the actual deployment require review before launch.

The interest and gifting forms do not save contact details in browser storage. Draft fields remain in the open page until cleared, submitted or closed. Optional letters are selected inside the interest form; there is no separate newsletter subscription service yet.

Attribution, analytics and cookies

First-visit attribution uses sessionStorage for campaign UTMs (source, medium, campaign, content and term), gclid, referral identifier, referrer, landing page and a session timestamp. Device type, browser language, timezone, submission time and the section where the reservation was opened accompany a submission. These help understand how interest reached the release; they are not contact-field browser storage. URLs can nevertheless contain personal information, so do not place it in campaign links, and the operator must review attribution minimisation before launch.

The Google Analytics tag G-3LZMTJVZD4 currently loads immediately. Google Analytics may use cookies, identifiers and page URLs; Google Fonts also makes external requests. Reservation custom events are designed to exclude contact fields and free-text notes, but that does not make all analytics anonymous. An analytics consent gate is an open launch item, not an implemented protection. Required consent controls and provider disclosures must be reviewed and implemented before public use. Browser blocking controls may limit tracking but are not a substitute for that work.

Retention, withdrawal and requests

[RETENTION PERIOD] remains unresolved. We have not invented a duration. A documented schedule must distinguish reservation responses, optional letters, attribution and necessary legal records, and cover deletion from the Sheet, copies and backups. Information should not be kept indefinitely merely because someone once expressed interest.

Subject to applicable, verified law, you may seek access to information about processing, correction of inaccurate information, erasure, withdrawal of consent, grievance redressal and nomination where available. Withdrawal should be as accessible as giving consent. It may stop further reservation contact or optional letters; it does not undo earlier lawful processing, and legally required retention must be explained rather than presumed. A proportionate identity check may be necessary to avoid disclosing someone else's data. Publish a working request channel and handling procedure before collection; [EMAIL] cannot yet receive these requests.

Adults and legal review

This invitation is for people aged 18 or over. We do not intentionally collect children's data. If child information is discovered, the operator should restrict its use and arrange appropriate deletion and review rather than treating a reservation as parental permission.

This draft follows principles of clear notice, specific consent, purpose limitation, minimisation, safeguards and accountable handling associated with India's Digital Personal Data Protection Act, 2023. See the official MeitY data-protection framework. We do not claim full compliance or that commencement, applicable rules or every right has been legally verified. A qualified Indian legal reviewer must confirm the law in force, operational safeguards and this notice before public collection. Read the pre-launch terms for the limits of the invitation.