Privacy Policy

When you shop with us, browse our website, or reach out for support, we gather small pieces of information to make your experience smoother. Think of it like a friendly shopkeeper remembering your name and your favorite shade of lipstick.

Here is what we collect, and why:

• Your name and contact details — so we can ship your order, send tracking updates, and reach you if something goes wrong.
• Your shipping and billing address — because your Glow box needs to find its way to your doorstep.
• Payment information — we never store your full card details. That is handled securely by our payment partners (Razorpay, PayU, etc.). We only keep a reference token so we can help if there is a dispute.
• Your skin profile and preferences — if you fill out our skin quiz or save favorites, we use this to recommend products that actually suit you. No generic suggestions here.
• Device and browsing data — your IP address, browser type, and how you navigate our site. This helps us fix bugs, improve load times, and understand what content you find useful.
• Order history — so you can reorder your holy-grail products with one click, and so we can offer personalized deals that matter.

We use your data for one simple reason: to serve you better. Every email we send, every recommendation we make, and every improvement we roll out is rooted in making your experience with Glow more delightful.

• To process and deliver your orders — from the moment you click "Place Order" to the second your package arrives.
• To keep you in the loop — order confirmations, shipping updates, delivery notifications, and the occasional "your cart misses you" nudge (only if you have abandoned something lovely).
• To personalize your journey — product recommendations based on your skin type, past purchases, and the concerns you have shared with us.
• To improve our products — aggregated feedback and usage patterns help us understand what is working and what needs a reformulation.
• To keep things secure — detecting fraudulent transactions, protecting your account, and ensuring our platform stays safe for everyone.
• To comply with the law — when required by tax authorities, regulatory bodies, or in response to a valid legal request.

We will never use your data to manipulate you, spam you with irrelevant ads, or sell it to data brokers. That is a promise.

Yes, we use cookies — but not the chocolate-chip kind, unfortunately. These are small text files that sit on your browser and help us remember things like what is in your cart, whether you are logged in, and which products you have been eyeing.

Here is the breakdown:

• Essential cookies — these keep the site running. Without them, you cannot log in, add to cart, or check out. They are non-negotiable.
• Functional cookies — these remember your preferences, like your chosen currency or language, so you do not have to set them every time.
• Analytics cookies — these tell us which pages are popular, where people drop off, and how we can make the site faster. All data is anonymized.
• Marketing cookies — these help us show you relevant ads on Instagram or Google, but only if you have given consent. You can opt out anytime.

You can manage your cookie preferences through the banner that appears when you first visit our site, or adjust your browser settings. Just know that disabling certain cookies might make your experience a little less smooth.

We are picky about who gets access to your data. Really picky. We only share information with partners who are essential to running our business and who meet our strict privacy standards.

• Shipping partners — Delhivery, Blue Dart, and others need your address and phone number to deliver your package. That is it.
• Payment processors — Razorpay, PayU, and your bank handle the money side. We never see your full card number.
• Email and SMS services — we use tools like SendGrid and MSG91 to send you order updates and newsletters (only if you have subscribed).
• Analytics platforms — Google Analytics and Meta Pixel help us understand our audience, but all shared data is aggregated and anonymized where possible.
• Legal authorities — only when compelled by law, court order, or to protect our rights and safety.

We do not sell, rent, or trade your personal information. Ever. If we ever work with a new partner, they go through a rigorous vetting process to ensure they treat your data with the same respect we do.

Your trust is our most valuable asset, and we protect it like one. We have built multiple layers of security to keep your information safe from prying eyes, accidental leaks, and cyber threats.

• SSL encryption — every page on our site uses HTTPS, which means data traveling between your browser and our servers is scrambled and unreadable to outsiders.
• Secure servers — your data lives on cloud infrastructure with enterprise-grade firewalls, intrusion detection, and regular security audits.
• Access control — only authorized team members can access customer data, and only when their job requires it. We log every access attempt.
• Regular audits — we conduct quarterly security reviews and penetration testing to find and fix vulnerabilities before they become problems.
• Employee training — every team member undergoes privacy and security training. We take this seriously.

That said, no system is 100% foolproof. In the unlikely event of a data breach, we will notify affected users and authorities within 72 hours, as required by Indian law.

You are in control of your data. Under the Digital Personal Data Protection Act, 2023, and our own ethical standards, you have several rights when it comes to your personal information:

• Right to access — you can request a copy of all personal data we hold about you. We will provide it within 30 days, free of charge.
• Right to correction — if your address, phone number, or skin profile changes, you can update it anytime from your account dashboard.
• Right to deletion — you can ask us to delete your account and associated data. We will comply within a reasonable timeframe, except where we are legally required to retain certain records.
• Right to object — do not want marketing emails? Click "unsubscribe" in any email, or toggle off marketing preferences in your account. We respect your inbox.
• Right to portability — want to take your data elsewhere? We will export it in a machine-readable format for you.
• Right to withdraw consent — if you previously agreed to something and changed your mind, just let us know. We will honor it immediately.

To exercise any of these rights, simply email us at privacy@glowbeauty.in or use the contact form below. No complicated forms, no runaround.

We do not hold onto your information longer than necessary. Here is our general rule of thumb:

• Active accounts — as long as your account is active, we keep your data so you can access order history, saved addresses, and preferences.
• Inactive accounts — if you have not logged in or made a purchase for 3 years, we will send you a reminder. If there is no response, we anonymize or delete your personal data.
• Order records — we retain transaction details for 7 years to comply with Indian tax and accounting laws.
• Marketing data — if you unsubscribe, we remove you from our mailing lists within 48 hours. We may keep a suppression record so we do not accidentally re-add you.
• Support tickets — kept for 2 years to help us improve customer service and resolve any recurring issues.

Our products and website are designed for adults. We do not knowingly collect personal information from anyone under the age of 18. If we discover that a child has provided us with personal data without parental consent, we delete it immediately.

If you are a parent or guardian and believe your child has shared information with us, please contact us right away at privacy@glowbeauty.in. We will work with you to resolve it.

As we grow and evolve, this policy might need a refresh too. When we make significant changes — like adding a new data processor or changing how we use cookies — we will notify you via email and post a prominent notice on our website.

Minor tweaks, like fixing a typo or clarifying language, may not warrant an announcement, but the "Last Updated" date at the top of this page will always reflect the most recent revision.

By continuing to use our website after changes are posted, you accept the updated policy. If you do not agree, you are free to close your account and request data deletion.