Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when registering an account, completing orders, subscribing to the newsletter, or interacting with our concierge support. This details:

• Contact details such as name, email address, phone number.
• Delivery and shipping address snapshots.
• Authentication and token credentials (stored securely using bcrypt hashing algorithms).
• Payment references processed securely via Axis Bank Payment Gateway or Cash on Delivery logs.

2. How We Use Your Information

Your data is processed strictly under secure conditions to:

• Manage registrations and verify active customer accounts via stateless OTPs.
• Process shopping cart transactions, fulfill packages, and record orders in your account history.
• Improve site search functionalities, custom routine calculations, and skin concern layouts.
• Send email receipts or support updates via Nodemailer SMTP.

3. Data Security and Cookie Policies

We do not sell your personal data. We utilize secure cookies for otp token to monitor active user sessions. These are configured as HTTPOnly, Secure cookies to prevent cross-site scripting (XSS) exposures. We safeguard transactional information utilizing Supabase's PostgreSQL infrastructure behind Row Level Security (RLS) protections.

4. Direct Integrations and No Third-Party Trackers

We are committed to maintaining the highest privacy standard. We do not use any third-party analytics trackers, marketing pixels, advertising networks, or social profiling scripts. All your data is kept strictly inside our database storage.

For core system infrastructure, transactions are handled as follows:

• Payment Gateway: Digital payments are processed directly with Axis Bank Payment Gateway. Your payment credentials go directly to Axis Bank’s secure banking infrastructure and are never stored or seen by our servers.
• Transactional Updates: Communication for account activation OTPs and order status reports are dispatched internally using secure SMTP services without external telemetry tracking.

5. Your Rights and Access

You have the right to request access to the personal data we hold about you, request corrections to your address listings, change passwords within security settings, or request account suspension. You can manage these parameters directly inside your account's dashboard page.