Privacy policy
HERBISTA PRIVACY POLICY
This Privacy Policy explains how Herbista Cosmetics (“Herbista”, “We”, “Us”, “Our”) collects, uses, stores, shares and protects your personal information when you visit or use our website, mobile site, applications, online store, skin analysis tool, customer support channels, advertisements, social media pages, or purchase our products.
By using our website or services, you agree to this Privacy Policy. If you do not agree, please do not use our website or submit your personal information.
This Privacy Policy is published in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable data protection laws.
1. Information We Collect
We may collect the following information:
a. Name, mobile number, email address, billing address, shipping address and PIN code.
b. Login details such as username and password, where applicable.
c. Order details, product preferences, purchase history, reviews, feedback and customer support queries.
d. Payment-related details processed through secure third-party payment gateways. We do not store full card details.
e. Device information, browser type, IP address, location information, cookies, website usage data and analytics information.
f. Information submitted through forms, contests, surveys, promotional campaigns, social media advertisements or customer care interactions.
g. Skin-related information submitted by you for product recommendation or skin analysis.
2. Face, Camera and Skin Analysis Data
If you use our skin analysis or skin recommendation feature, we may request access to your device camera or uploaded image.
We may collect facial images or skin images only for the purpose of analysing visible skin concerns and providing personalised skincare recommendations. Such data is used only for the stated purpose and is not sold to any third party.
The images may be stored securely on cloud servers such as AWS S3 or any other secure service provider used by Herbista. We take reasonable security measures to protect this data from unauthorised access, misuse, alteration or disclosure.
You may request deletion of your skin analysis data by contacting us at the email mentioned in this Policy.
3. How We Collect Information
We collect information when:
a. You visit or browse our website.
b. You register, create an account or log in.
c. You place an order or make a purchase.
d. You subscribe to newsletters, offers or promotional updates.
e. You contact our customer support team.
f. You submit reviews, feedback, queries, forms or survey responses.
g. You use our skin analysis or recommendation feature.
h. You interact with our advertisements, social media pages or sponsored content.
We may also collect certain information automatically through cookies, web beacons, pixels, analytics tools and similar technologies.
4. Purpose of Using Your Information
We may use your information for the following purposes:
a. To process, confirm, deliver and manage your orders.
b. To provide refunds, replacements or customer support.
c. To create and manage your account.
d. To recommend suitable products based on your skin type, concerns or preferences.
e. To improve our website, products, services and customer experience.
f. To send order updates, delivery updates and service-related messages.
g. To send offers, newsletters, promotional messages and marketing communication, where permitted by law.
h. To respond to queries, complaints, reviews and feedback.
i. To prevent fraud, misuse, unauthorised transactions or illegal activities.
j. To comply with legal, regulatory, accounting and tax obligations.
k. To protect our rights, property, business interests and customers.
5. Cookies
We use cookies and similar technologies to improve website performance, remember user preferences, analyse traffic, improve user experience and show relevant advertisements.
You may disable cookies through your browser settings. However, some features of the website may not work properly if cookies are disabled.
Third-party service providers such as analytics, advertising, payment, logistics or marketing platforms may also use cookies or similar technologies as per their own privacy policies.
6. Payment Information
Payments made on our website are processed through secure third-party payment gateways. We do not store complete credit card, debit card, UPI or net banking details on our servers.
Payment gateways may collect and process your payment information according to their own terms and privacy policies.
7. Marketing Communication
If you provide your email address or mobile number, we may send you product updates, offers, skincare tips, newsletters, promotional messages, WhatsApp messages, SMS or calls.
You may opt out of promotional communication by using the unsubscribe option, changing your preferences, or contacting us at the email mentioned below. However, you may still receive order-related, delivery-related, account-related or legal communication from us.
8. Sharing of Information
We do not sell your personal information.
We may share your information with:
a. Delivery partners, courier companies and logistics providers.
b. Payment gateways and fraud prevention service providers.
c. Website hosting, cloud storage, analytics, marketing and technology service providers.
d. Customer support and communication service providers.
e. Professional advisers such as auditors, accountants, lawyers and consultants.
f. Government authorities, courts, regulators or law enforcement agencies, where required by law.
g. Group entities, affiliates, business partners or successors in case of merger, restructuring, acquisition, sale of business or transfer of assets.
Such sharing will be limited to the purpose for which it is required and subject to reasonable confidentiality and security obligations wherever applicable.
9. Third-Party Websites
Our website may contain links to third-party websites, payment gateways, social media platforms, marketplaces or advertisements.
We are not responsible for the privacy practices, content, terms or policies of such third-party websites. You should review their privacy policies before sharing any information with them.
10. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes mentioned in this Policy, including order processing, customer support, legal compliance, accounting, tax, dispute resolution, fraud prevention and business record requirements.
We may retain certain information for a longer period if required by law or if we reasonably believe it may be needed for legal claims, complaints, audits or regulatory purposes.
When information is no longer required, we may delete, anonymise or securely archive it.
11. Information Security
We take reasonable security measures to protect your personal information from unauthorised access, misuse, loss, alteration, disclosure or destruction.
These measures may include encryption, access controls, secure servers, internal review of data practices, restricted employee access and use of trusted service providers.
However, no method of data transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security of information shared online.
12. Your Rights and Choices
Subject to applicable law, you may request:
a. Access to your personal information.
b. Correction or updating of inaccurate information.
c. Deletion of your personal information, where legally permissible.
d. Withdrawal of consent for certain processing activities.
e. Opt-out from promotional communication.
To exercise these rights, please contact us at the email mentioned below.
Withdrawal of consent will not affect any processing already carried out before such withdrawal and may affect your ability to use certain features of our website or services.
13. Children’s Privacy
Our website is intended for users who are 18 years and above.
We do not knowingly collect personal information from minors. If a minor uses the website or submits personal information, the parent or guardian shall be responsible for such use. If we become aware that we have collected personal information from a minor without proper consent, we may delete such information.
14. User Content, Reviews and Public Posts
If you post reviews, comments, photos, feedback or other content on our website, social media pages or public platforms, such information may be visible to other users.
We are not responsible for any misuse of information voluntarily posted by you in public areas.
15. Business Transfer
In case of merger, acquisition, restructuring, sale of business, transfer of assets or change in ownership, your personal information may be transferred to the new entity or successor, subject to applicable law.
16. Updates to this Privacy Policy
We may update this Privacy Policy from time to time due to legal, technical, business or operational changes.
The updated Privacy Policy will be posted on our website with the revised date. Your continued use of the website after any update means that you accept the revised Privacy Policy.
17. Grievance Officer / Contact Details
For any privacy-related query, complaint, correction, deletion request, withdrawal of consent or grievance, you may contact:
Grievance Cell
Business Name: Herbista Cosmetics
Address: : 30, Sushma Valencia, Zirakpur, SAS Nagar, Punjab- 140201
Email: care@herbista.in
Phone: +919501233838
Working: Monday to Saturday, 10:00 AM to 6:00 PM
We will try to resolve your concern within a reasonable time as required under applicable law.
18. Consent
By using our website, submitting your information, placing an order, using our skin analysis feature or interacting with our services, you consent to the collection, use, storage, processing and sharing of your information as described in this Privacy Policy.