Privacy policy

AuraDerm is a brand owned and operated by Shahdhar Innovative Private Limited, which operates this store and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience (the "Services"). AuraDerm is powered by Shopify, which enables us to provide the Services to you.

Shahdhar Innovative Private Limited is the data fiduciary responsible for your personal information under Indian law. Full company details and our Grievance Officer are in Section 14.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By "personal information" we mean information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so it cannot be linked back to you. Depending on how you interact with the Services and where you live, we may collect or process the following — including inferences drawn from them:

Contact details  —  Name, address, billing address, shipping address, phone number, and email address.

Financial information  —  Card and financial account numbers, payment card details, transaction details, form of payment and payment confirmations. Card details are handled by our payment provider and are never stored on our systems. If we refund a Cash-on-Delivery order, we also process the UPI ID you give us.

Account information  —  Username, password, security questions, preferences and settings.

Transaction information  —  Items you view, add to cart or wishlist, purchase, return, exchange or cancel, and your past transactions.

Communications with us  —  Anything you include when you write to us by email or WhatsApp, such as a customer support enquiry.

Device information  —  Details about your device, browser or network connection, your IP address, and other unique identifiers.

Usage information  —  How and when you interact with or navigate the Services.

—  Directly from you, when you create an account, use the Services, communicate with us, or otherwise provide your information.

—  Automatically through the Services, from your device when you visit our website or use our products, and through cookies and similar technologies.

—  From our service providers, when we engage them to enable certain technology or when they process information on our behalf.

—  From our partners or other third parties.

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

Provide, tailor and improve the Services  —  To perform our contract with you, process payments, fulfil orders, arrange shipping, handle returns and exchanges, remember your preferences, manage your account, send account notifications, enable reviews, and recommend products relevant to you.

Marketing and advertising  —  To send promotional communications by email, text message or post, and to show you online advertisements on the Services or other websites, including based on items you previously purchased or added to your cart.

Security and fraud prevention  —  To authenticate your account, provide a secure payment experience, and detect or act on possible fraudulent, illegal or malicious activity.

Communicating with you  —  To provide customer support, respond to you, and maintain our business relationship.

Legal reasons  —  To comply with applicable law, respond to valid legal process including requests from law enforcement, participate in litigation or civil discovery, and enforce or investigate potential violations of our terms or policies.

In certain circumstances we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy:

—  With Shopify, vendors and other third parties who perform services on our behalf — IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.

—  With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising based on your activity across different merchants and websites. These partners use your information in line with their own privacy notices.

—  When you direct, request or consent to disclosure — such as to ship you products, or through your use of social media widgets or login integrations.

—  With our affiliates or otherwise within our corporate group.

—  In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations including subpoenas and search warrants, to enforce our terms, and to protect the Services and the rights of our users or others.

The main partners who process customer information on our behalf are:

Shopify  —  Store hosting, customer accounts and order records.

Shiprocket  —  Powers our checkout. Receives your name, phone number, delivery address and order details so the order can be placed, and may verify your phone number by OTP. If you have already used a Shiprocket-powered checkout on another store, it may recognise your number and offer your saved address so you do not have to type it again.

PayU  —  Processes your payment and handles your card, UPI or netbanking details. Full card numbers never reach us and are never stored on our systems.

Vfulfill  —  Warehousing, packing, dispatch and returns. Receives your name, address and phone number so your parcel can reach you.

Courier partners  —  Delivery and Cash-on-Delivery collection. Receive your delivery address and phone number.

Meta Platforms  —  Advertising measurement and audience targeting. See Section 05 for exactly what is shared.

Omnisend  —  Sends our order updates and marketing emails and text messages. Holds your name, email address and phone number.

Our website uses cookies and similar technologies, including tracking pixels placed by our advertising partners. Here is what each type does:

Essential cookies  —  Keep your cart, checkout and login working. These cannot be switched off without breaking the store.

Analytics cookies  —  Tell us which pages get visited, where people drop off, and how the store is performing overall.

Advertising cookies and pixels  —  Let us measure which ads lead to sales and show you relevant ads on other platforms.

We advertise on Meta (Facebook and Instagram) and use the Meta Pixel together with server-side event sharing (the Conversions API). When you view a product, add to cart, begin checkout or complete a purchase, we share that event with Meta. Where available this includes a hashed, scrambled version of your email address or phone number, which lets Meta match the event to an account without us handing over the plain details.

Meta processes this information under its own data policy and may use it to measure our ads, build audiences, and show you advertising. We do not receive your Meta profile or anything you do on Meta outside our store.

We contact you in two different ways, and you have different choices over each:

Service messages  —  Order confirmations, dispatch and tracking updates, delivery attempts, and replies to your support queries. These are part of fulfilling your order, so they are sent to every customer.

Promotional messages  —  Offers, launches and reminders about items left in your cart. You can stop these at any time without affecting your orders.

To opt out of promotional messages, use the unsubscribe link at the bottom of any marketing email, reply STOP to a promotional SMS, or simply reply asking us to stop on WhatsApp. You can also email hello@auraderm.in and we will remove you from every marketing list we run.

If you message us on WhatsApp, your phone number and the contents of your messages are processed by us and by WhatsApp under its own privacy terms. We use these conversations only to answer you and to keep a record of what was agreed on your order.

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside.

To help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data from your interactions with our store, other merchants, and Shopify itself. In these circumstances Shopify is responsible for that processing, including for responding to your requests to exercise your rights over it.

The Services may link to websites or platforms operated by third parties. If you follow a link to a site we do not control, review its privacy and security policies and terms. We do not guarantee and are not responsible for the privacy or security of such sites, or the accuracy of information found there.

Information you post in public or semi-public venues, including third-party social networks, may be viewable by others without limitation as to its use. Our inclusion of a link does not by itself imply endorsement.

The Services are not intended for use by children. In India a child is anyone under the age of 18, and we do not knowingly collect personal information from children or from anyone under the age of majority in their jurisdiction.

We do not knowingly use children's personal information for tracking or behavioural advertising. If you are the parent or guardian of a child who has given us their information, contact us using the details in Section 14 and we will delete it.

As of the effective date of this policy, we do not have actual knowledge that we "share" or "sell" (as defined in applicable law) the personal information of individuals under 16 years of age.

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security". Information sent to us may not be secure while in transit, so we recommend you do not use unsecure channels to send us sensitive or confidential information.

How long we keep your information depends on what it is for:

—  Order and transaction records are kept for as long as Indian tax and company law requires us to hold them.

—  Account and marketing information is kept until you ask us to delete it or withdraw your consent.

—  Support conversations are kept while they are useful for resolving disputes and honouring guarantees.

Depending on where you live, you may have some or all of the rights below. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline a request as permitted by law.

Right to access / know  —  Request access to the personal information we hold about you.

Right to delete  —  Request that we delete the personal information we maintain about you.

Right to correct  —  Request that we correct inaccurate personal information we hold.

Right of portability  —  Receive a copy of your information and, in certain circumstances and with certain exceptions, ask us to transfer it to a third party.

Communication preferences  —  Opt out of promotional emails at any time using the unsubscribe link. We may still send non-promotional emails about your account or orders.

Exercise any of these rights where indicated on the Services or by contacting us using the details in Section 14. We will not discriminate against you for exercising them.

Most of our customers are in India, where the Digital Personal Data Protection Act, 2023 applies. Under it, Shahdhar Innovative Private Limited is the Data Fiduciary for your personal data, and you have these additional rights:

Withdraw your consent  —  Wherever we rely on your consent, you can take it back as easily as you gave it. Withdrawing consent does not undo anything we lawfully did beforehand, and we may still need to keep records the law requires.

Nominate someone  —  You can nominate another person to exercise your rights on your behalf if you die or become incapacitated.

Grievance redressal  —  Raise any privacy complaint with our Grievance Officer, whose details are in Section 14.

We may transfer, store and process your personal information outside the country you live in. Several of our providers, including Shopify and Meta, operate globally, so your information may be processed on servers outside India.

If we transfer your information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant UK authority — unless the transfer is to a country determined to provide an adequate level of protection.

If you have a complaint about how we process your personal information, contact us using the details below. Depending on where you live, you may also have the right to appeal our decision by writing to us again, or to lodge a complaint with your local data protection authority.

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date, and provide notice as required by applicable law.