Privacy policy

PRIVACY POLICY  
Effective Date: 30-09-2025  
Last Updated: 30-09-2025  

This Privacy Policy (“Policy”) governs the manner in which REVELLON LIFESTYLE PRIVATE LIMITED, a company incorporated under the Companies Act, 2013, having its registered office at D No 21, Near Pinto Garden, Hoige Bazar, Mangalore, Dakshina Kannada, Karnataka, India – 575001 (“Company”, “we”, “us”, or “our”), collects, processes, uses, shares, and protects your personal information when you access or use our websites, mobile applications, physical retail stores, or any associated services, including those relating to the marketing and sale of perfumes (collectively referred to as the “Services”).

By using our Services or providing your personal information to us, you expressly consent to the terms and conditions of this Policy.

1. SCOPE AND APPLICABILITY  
This Privacy Policy applies to:  
• Visitors to our websites (e.g., [www.rareduft.com])  
• Customers who purchase our products online or in-store  
• Individuals who interact with us via customer service, marketing campaigns, or social media  
• Users who create an account or subscribe to our newsletters  

This Policy does not apply to any third-party websites or platforms that may be linked from our Services.

2. INFORMATION WE COLLECT  
We collect personal and non-personal information through various channels including websites, order forms, user registrations, cookies, and customer communications.

A. Personal Information  
Personal data refers to any information that identifies, relates to, describes, or could reasonably be linked to a natural person. We may collect the following categories:  
• Full name, salutation, and gender  
• Email address and phone number  
• Billing and shipping addresses  
• Payment information (processed securely through PCI-DSS-compliant third-party gateways)  
• Date of birth (if provided)  
• Account credentials (username, encrypted password)  
• Profile preferences and user-generated content (e.g., reviews)  
• Communication and marketing preferences  

B. Non-Personal Information  
We also collect data that does not directly identify you:  
• Device and browser information  
• IP address and geolocation (based on IP)  
• Referral URLs and session duration  
• Clickstream data, time stamps, and heat maps  
• Site usage statistics for analytics purposes  

C. Sensitive Personal Data (If Applicable)  
We generally do not collect sensitive personal data (such as biometric, health, or financial information) unless explicitly required and with your informed consent.

3. LAWFUL BASES FOR PROCESSING (WHERE APPLICABLE)  
We process personal data under the following lawful bases, as recognized under applicable data protection laws such as the GDPR (where applicable):  
• Consent: Where you have given explicit consent for specific purposes (e.g., marketing emails)  
• Contractual necessity: To fulfil our contractual obligations when you purchase a product or create an account  
• Legal obligation: To comply with applicable laws, such as tax regulations  
• Legitimate interests: For fraud prevention, analytics, improving our offerings, and ensuring network security  

4. USE OF YOUR INFORMATION  
We use the data we collect for the following purposes:

1) To Provide Products and Services:  
   - Process, fulfil, and ship your orders  
   - Facilitate payment processing  
   - Respond to customer inquiries and support requests  

2) For Personalization:  
   - Understand your preferences and browsing behaviour  
   - Offer fragrance recommendations based on previous purchases  

3) Marketing and Communications:  
   - Send promotional emails, newsletters, or SMS campaigns  
   - Serve personalized advertisements (with your consent)  
   - Allow opt-in participation in giveaways or contests  

4) Service Improvement and Analytics:  
   - Analyse customer behaviour to enhance user experience  
   - Conduct internal audits, quality checks, and A/B testing  

5) Legal and Regulatory Compliance:  
   - Maintain transaction records  
   - Respond to subpoenas, legal proceedings, or government requests  

6) Security and Fraud Prevention:  
   - Prevent, detect, and investigate unauthorized access or misuse  
   - Monitor activity for suspicious behaviour  

5. DATA SHARING AND DISCLOSURE  
We do not sell or rent your personal information. However, we may share it under the following circumstances:

A. With Service Providers:  
We may disclose data to trusted third parties under contract with us who perform operational functions, including:  
• Payment processors (e.g., Razor pay, Stripe)  
• Logistics and shipping partners (e.g., Blue Dart, Delivery)  
• IT infrastructure and hosting service providers  
• Email/SMS marketing vendors (e.g., Mail chimp, Sendinblue)  
• Website analytics platforms (e.g., Google Analytics)  

These service providers are contractually obligated to maintain the confidentiality and security of your data and process it only for specified purposes.

B. With Affiliates and Partners:  
We may share information within our corporate family, and with authorized business partners, strictly on a need-to-know basis and in accordance with this Policy.

C. Legal and Regulatory Authorities:  
We may disclose personal information if required to:  
• Comply with a legal obligation  
• Enforce our terms and conditions  
• Respond to legal claims or court orders  
• Prevent fraud, cybercrime, or other prohibited activities  

D. Business Transfers:  
In the event of a merger, acquisition, corporate restructuring, or sale of assets, user data may be transferred as part of the business transaction.

6. COOKIES AND SIMILAR TECHNOLOGIES  
We use cookies, tags, pixels, and similar tracking technologies for various purposes:  
• Maintain session integrity  
• Store user preferences  
• Monitor site performance  
• Conduct behavioural advertising  
• Analyze traffic trends  

You may adjust your browser settings to refuse cookies or notify you when a cookie is being placed. However, some features of our Services may not function properly without them.

We honour “Do Not Track” signals where required by law.

7. DATA RETENTION  
We retain personal information for as long as:  
• It is necessary to provide our Services and fulfill the purposes stated herein;  
• Required by law or contractual obligations;  
• Needed to resolve disputes, enforce agreements, or protect our legal rights.  

Upon request, and subject to legal or regulatory constraints, we will securely delete or anonymize your data.

8. YOUR RIGHTS AND CHOICES  
Depending on your jurisdiction, you may have the following rights regarding your personal data:  
• Right to Access – You may request a copy of the personal data we hold about you.  
• Right to Rectification – You can request that we correct any incomplete or inaccurate data.  
• Right to Erasure – You may ask us to delete your personal information under certain conditions.  
• Right to Restrict Processing – You may restrict how we process your data.  
• Right to Data Portability – Where applicable, you may request your data in a machine-readable format.  
• Right to Object – You can object to our processing based on legitimate interest or direct marketing.  
• Right to Withdraw Consent – You may withdraw consent for marketing communications at any time.  

To exercise your rights, please contact us at Care@rareduft.com with the subject line: "Data Rights Request".

9. MARKETING COMMUNICATIONS  
We may use your contact details to send promotional messages. You may opt out of marketing communications at any time by:  
• Clicking the “unsubscribe” link in an email  
• Adjusting your account preferences  
• Contacting us directly  

Please note: Even if you opt out of marketing, we may still send you service-related notifications (e.g., order confirmations, account updates).

10. DATA SECURITY MEASURES  
We have implemented appropriate administrative, technical, and physical safeguards to protect your personal information, including:  
• HTTPS encryption  
• Two-factor authentication (where applicable)  
• Access control and role-based restrictions  
• Routine security audits and monitoring  

However, no electronic transmission or digital storage system is fully secure. We cannot guarantee absolute security, and you acknowledge the risks involved in transmitting data online.

11. CHILDREN’S PRIVACY  
Our Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

12. THIRD-PARTY WEBSITES  
Our Services may contain links to third-party websites or services. This Privacy Policy does not apply to those external platforms. We recommend reviewing the privacy policies of any third-party websites you visit.

13. GRIEVANCE OFFICER / DATA PROTECTION CONTACT  
Pursuant to applicable laws, including the Information Technology Act, 2000 (as amended), the name and contact details of the designated Grievance Officer are:

Grievance Officer / DPO  
REVELLON LIFESTYLE PRIVATE LIMITED  
Mr. Abdul Shamseer  
Mob – +91 9113853296  
Email- Care@rareduft.com