Here's the content for your "Privacy Policy" page, rewritten in clear and accessible language, tailored for an Indian audience, and compliant with relevant Indian laws like the Information Technology Act, 2000 (and its amendments) and the Consumer Protection (E-Commerce) Rules, 2020. I've focused on clarity, user rights, and the specific references you provided.
Bloom and Shine Privacy Policy
At Bloom and Shine (operated by Bydus Health and Lifestyle Pvt. Ltd., hereinafter "the Company," "we," "our," or "us"), we deeply respect your privacy and are committed to protecting your personal information. This Privacy Policy ("Policy") explains how we collect, use, disclose, and transfer your Personal Information when you visit, browse, or make a purchase from www.bloomshine.in and our mobile sites/applications (collectively, the "Platforms").
By accessing and/or using our Platforms and providing your information as described in this Policy, you consent to the collection and use of your information in accordance with this Policy, including your consent for sharing your information as outlined herein. We encourage you to read this Policy thoroughly. If you are not comfortable with any terms, you may choose to discontinue using our Platforms.
Important Note: This Policy applies to information collected through our Platforms and does not cover information collected offline (unless specified), or on Company websites that do not link to this Policy, or for customers outside India, or on third-party websites linked from our Platforms.
Your Consent to Communications
You agree to receive communications related to our services on the mobile number you provide to us, even if it is registered under the DND/NCPR list (National Do Not Call Registry) as per the Telecom Commercial Communications Customer Preference Regulations, 2018 ("TRAI Regulations"). By providing your number, you express your interest and give informed consent to receive communications (including commercial messages) about the Company's services. You confirm that any communication from or on behalf of the Company will not be considered "Unsolicited Commercial Communication" under TRAI Regulations, as you have specifically opted to receive them on your provided mobile number.
What is Personal Information?
For the purpose of this Policy, "Personal Information" means any information relating to you that, either directly or indirectly, in combination with other information available or likely to be available with the Company, can identify you. This includes information submitted to and/or collected over the Platforms and maintained by us. However, any information that is freely available or accessible in the public domain, or furnished under the Right to Information Act, 2005, or any other law, is not considered Personal Information for this Policy.
How We Collect Your Personal Information
We communicate with you through various channels, including our Platforms, email, phone, or text messages. We collect and receive your Personal Information in the following ways:
1. Information You Provide to Us
We collect and store Personal Information you provide directly when interacting with our Platforms. This includes:
- Voluntary Registration: When you register, place orders, subscribe to newsletters, receive offers, contact customer service, or respond to surveys, you may provide your name, postal address, email address, phone number, and other relevant details.
- Financial Information: For purchases, you may provide financial information such as bank account details, credit card/debit card numbers, or other payment instrument details. Please note, sensitive payment data is primarily processed by secure third-party payment gateways (see "Payment Information" below).
- Preferences & Opinions: In certain circumstances, we may collect your product interests, opinions, and individual preferences.
- Security: We may collect password details if you choose to set one for your account on our Platform.
- Other Sources: We may also collect your Personal Information through sponsored social media platforms, events, etc.
To protect your privacy, please do not provide any information that is not specifically requested or that you do not wish to share. You can choose not to provide certain information, but this might limit your ability to use our Platforms or specific features.
2. Information Collected Automatically (Device Information)
When you visit or browse our Platforms, we automatically collect certain information about your device and how you interact with our Platforms. We refer to this as "Device Information." This includes:
- Device Details: Information about your web browser, IP address, and time zone.
- Cookies: Data files placed on your device, often with an anonymous unique identifier.
- Log Files: Track actions on the Platforms, collecting data like your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- Browse Activity: Information about the individual web pages or products you view, what websites or search terms referred you to our Platforms, and how you interact with the Platforms.
- Location & Device Identifiers: We may receive/store information about your approximate location and unique identifiers for your mobile device.
This automatic collection helps us optimize our Platforms, screen for potential risks or fraud (especially using your IP address), and generally improve your experience by providing better service and customizing content based on user preferences. Some features may not work without these technologies.
3. Information from Other Sources
We may receive information about you from various other sources, such as:
- Third Parties: Updated delivery and address information from third parties, which helps us correct our records and deliver your purchases more easily.
- Promotional Partners: Information from third parties featuring our Products or promotional offers if you opt-in to receive information from us.
- Social Media: If you participate in a third-party application or social media site, you may allow us to collect (or the third party to share) Personal Information about you, including usage information. Your use of social media sites is primarily governed by their privacy policies and terms of service.
- Marketing & Demographics: Information like marketing-related or demographic data from third parties to enhance our ability to tailor content and offer Products that may interest you. Please note that we are not responsible for the privacy practices of third-party websites that we do not own, manage, or control.
What Personal Information Do We Collect?
We limit our collection of Personal Information to what is necessary to provide accurate services, process your orders/refunds, and continuously improve our Products and services. The categories of Personal Information we collect and process may include:
- Date of birth, language preference, location.
- Open data and public records (information freely available on the Internet).
- Names, addresses, and phone numbers of people to whom purchases have been shipped.
- IP addresses.
- Product interest information, and in certain circumstances, your opinions and individual preferences.
- Financial information such as bank account, credit card, debit card, or other payment instrument details (as further explained below).
- Passwords for accessing our Platforms (if you set one).
- Records of your Product interests and information from our future affiliates.
- Phone numbers used to call our customer service.
- Technical data and related information about your device, system, application software, and peripherals, collected periodically to facilitate software updates, product support, and other services related to the Platforms.
How We Use Your Personal Information (Purpose of Collection)
We use your Personal Information for various purposes, primarily to fulfill orders, communicate with you, and improve our services. Our legal basis for processing your Personal Information includes:
1. Performance of a Contract
We process certain Personal Information because it's necessary to fulfill our agreement with you. For example, processing your Personal Information to deliver Products you ordered on our Platform.
2. Legitimate Interests
We process some Personal Information for our legitimate business interests, such as sending you marketing information about our Products or communicating with you to provide better service.
3. Compliance with a Legal Obligation
We may process Personal Information when it's necessary to comply with a legal obligation, such as retaining business records for specific periods to meet local legal requirements.
4. Consent
In certain limited situations, we rely on your explicit consent to process your Personal Information. Where consent is required, we seek it at the time of provision, and processing only occurs with your consent. You can withdraw your consent, where applicable, by emailing info@bloomshine.in.
Specifically, we may use your Personal Information to:
- Verify your identity.
- Fulfill Product purchases and transactions (including processing payments, arranging shipping, providing invoices/order confirmations).
- Communicate with you about your account and activities on the Platforms.
- Allow you to sign up for newsletters, respond to surveys, or engage in marketing communications.
- Better serve you by responding to your requests, reviews, comments, or feedback.
- Administer contests, promotions, surveys, or other site features.
- Request ratings and reviews of the Products.
- Follow up with you after correspondence (e.g., live chat, email, phone inquiries).
- Allow you to log in with social media accounts and share activities on your social media pages.
- Comply with our legal obligations, internal policies, and procedures, including industry standards and enforcement of our terms and conditions.
- Learn more about your shopping preferences and conduct marketing and performance research to improve customer service, benchmark performance, and enhance your shopping experiences and Product offerings.
- Send order updates and offers via email, SMS, and social media channels.
- Conduct internal research on customer demographics, interests, and behavior to better understand and serve you.
- Provide exclusive offers on the Platforms, tailor content and advertisements, and improve the Platforms for internal business purposes.
- Analyze trends, track webpage movements, help identify you and your shopping cart for aggregated use.
- Determine nearby store locations, provide promotional offers, and offer Products.
- Prevent, detect, investigate, and take action against crimes (including fraud), illegal activities, or violations of Company terms and conditions.
- Establish, exercise, or defend legal rights in connection with legal proceedings and seek professional or legal advice.
- Comply with any applicable law, regulation, legal process, or enforceable governmental request.
Anonymized and Aggregated Information: We may also collect and/or generate anonymized and aggregated information from your use of the Platforms. This information is not Personal Information as it cannot identify you. We use it to identify and fix bugs, improve Platform performance, and for internal analysis, analytics, and research. We may share this anonymized/aggregated information with third parties for our or their purposes, ensuring it prevents identification.
Social Media Interaction: We maintain a social media presence (e.g., Facebook, Instagram, LinkedIn, Twitter). When you interact with us through social media (e.g., contests, posting content, sharing material, using plug-ins), we may receive information like your user ID, profile picture, and posts, as determined by your privacy settings on those sites. We may use this information for purposes described in this Policy. Your social media use is primarily governed by the site operators' privacy policies and terms of service.
Payment Information: When you purchase Products, you provide payment information (e.g., credit card numbers, billing information) directly to third-party PCI-DSS compliant service providers. The Company does not directly process or store this payment information, except as necessary to facilitate payment processing on our behalf. These intermediaries are not permitted to store, retain, or use your billing information for any other purpose.
Account Security: If you use the Platforms, you are responsible for maintaining the confidentiality of your access information and password. You are responsible for restricting access to your computer/mobile device and accept responsibility for all activities under your password. We cannot secure any information you release on your own, request us to release, or that is released through a third party to whom you've given access.
Customer Care Calls: For quality and training purposes, we may record calls with our customer care support.
How We Share Your Personal Information
Only authorized personnel have access to your Personal Information. We may share your Personal Information only with the following parties, who are either subject to this Policy or follow practices at least as protective:
- Our Affiliates and Service Providers: We share information with our affiliates and third-party service providers who perform services on our behalf based on our instructions. This includes beauty partners providing services to customers. These service providers are not authorized to use or disclose your information except as necessary to perform services for us or comply with legal requirements.
- No Selling/Renting: We do not rent or sell your Personal Information to any third party.
- Business Transfers: If we plan to merge, sell, or transfer all or substantially all of our business to another entity, or are required by that entity, we may transfer or disclose your Personal Information to them for evaluating the transaction, operating the acquired business, or other purposes outlined in this Policy.
- Corporate Entities: We may share Personal Information with our other corporate entities, who may use it in accordance with this Policy to help detect and prevent identity theft, fraud, and other illegal acts, and to prevent abuse of our Platforms by correlating related accounts. If you object to such sharing, please do not provide us with any information.
- External Service Providers: We may engage other companies and individuals to perform functions on our behalf consistent with this Policy (e.g., order processing, courier services, data analysis, customer support, email vendors, web-hosting, fulfillment companies). These third parties may access Personal Information only as needed to perform their functions and must use it only on our behalf and in accordance with this Policy.
- Consent for Third-Party Sharing: In some cases, you may be offered the opportunity to consent to share your information with a third party (e.g., an event co-sponsor). If you consent, we will share your information with that third party, and they may use it for their own purposes and according to their own policies.
- Legal Compliance: We may disclose Personal Information if required by law, court order, or other legal processes, or if we believe in good faith that such disclosure is reasonably necessary to respond to lawful requests for information, enforce our Terms and Conditions or Policy, respond to claims that content violates third-party rights, or protect the rights, property, or personal safety of our customers or the public.
Retention of Personal Information
We will retain your Personal Information only for as long as reasonably required or otherwise permitted or required by applicable law or regulatory requirements. We may also retain your Personal Information as long as necessary to fulfill the purposes for which it was collected (including for meeting any legal, administrative, accounting, or other reporting requirements). Your Personal Information is safeguarded against inappropriate access and disclosure, as per this Policy.
We maintain appropriate and adequate administrative, technical, and physical safeguards designed to protect your Personal Information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.
Your Rights and Choices (Opting Out & Withdrawal of Consent)
We provide options for you to manage your Personal Information and communications.
1. Opt-Out Options:
- Updating Account Information: You can update or correct your name, email address, security questions, and other preferences by logging into your account, visiting the "My Account" page, or contacting customer care.
- Newsletters and Promotional Emails: You can click the "unsubscribe" link at the bottom of any promotional email you receive. Alternatively, you may edit your email preferences on your "My Account" page or contact customer care to discontinue receiving promotional materials.
- Removing Public Content: You can request to remove content you posted in public spaces (e.g., customer reviews) by emailing details to info@bloomshine.in. While we will endeavor to honor your request, please note that removal from our Platforms does not completely erase that information from the internet (e.g., historical copies or caches may remain).
2. Withdrawal of Consent:
If you have provided consent for the collection, use, and/or disclosure of your Personal Information as outlined in this Policy, you have the right to withdraw this consent at any time by writing to us at info@bloomshine.in. For location information provided via a mobile app, you can turn off location services on your device at any time. Please note that any processing carried out before the withdrawal of your consent remains lawful. Even after withdrawal, certain information may be retained to comply with legal obligations, resolve disputes, and enforce our agreements.
How We Store Your Personal Information
We may store Personal Information on our own secure on-site servers or using other internally hosted technology. Your Personal Information may also be stored by third parties, via cloud services or other technology, with whom the Company has contracted to support its business operations. These third parties do not use or have access to your Personal Information except for cloud storage and retrieval purposes, and we require them to employ at least the same level of security we use to protect your Personal Information.
Disposal of Personal Information
We will only use your Personal Information for the stated purposes and will ensure your privacy is protected. We will take reasonable steps to delete or permanently de-identify Personal Information that is no longer needed.
Use of "Cookies"
We may track your preferences and activities on the Platforms using "Cookies." Cookies are small data files transferred to your computer's hard drive by a website (if your browser settings allow). They record your activities, making your subsequent visits more efficient. Cookies may store information like the number of times you access the Platform, registration information, and how many times you view a particular page. Most browsers are set to accept cookies, but you can modify them to block cookies.
By continuing to use the Platforms, you are agreeing to our use of cookies. If you do not agree, you can block them in your browser settings, but you may lose some functionality on the Platforms. Even if you turn cookies off, you will still be able to place orders.
We use cookies to:
- Understand and save customer preferences for future visits.
- Keep track of advertisements.
- Compile aggregated data about site traffic and interactions to offer better site experiences and tools in the future. We may also use trusted third-party services for this purpose. You can set your browser to warn you each time a cookie is being sent or turn off all cookies. Refer to your browser's help menu for instructions on modifying cookie settings.
Customer Comments and Content
If you post any comments or content on our Platforms, please be aware that any information you choose to provide there may be read, collected, or used by third parties. We are not responsible for the information you choose to submit, and we cannot guarantee that third parties will not copy or use such information in any way.
Links to Third-Party Advertisements or Sites
Our Platforms may display links to websites owned or operated by third parties. Please understand that these websites are independent from the Company, and we have no control over their content, even if we provide information or Products to their owners. We do not endorse, make representations about, or accept responsibility for the content or use of such websites. We are not responsible or liable for any damage or loss related to the use of any third-party website. Always read the terms and conditions and privacy policy of a third-party website before accessing or using it.
Third-Party Analytics
We utilize third-party analytics services (e.g., Google Analytics) to evaluate your use of the Platforms, compile activity reports, collect demographic data, analyze performance metrics, and gather other information related to Platform usage and mobile/internet activity. These third parties use cookies and other technologies to help analyze and provide us with this information. In some cases, they may connect such information with other data they hold. By using our Platforms, you consent to the processing of information about you by these analytics providers in the manner and for the purposes outlined in this Policy.
Currently, we work with analytics partners such as Google. Google's advertising requirements are summarized by Google's Advertising Principles, aimed at providing a positive user experience. We use Google AdSense Advertising on our Platforms. Google, as a third-party vendor, uses cookies to serve ads. Google's use of the DART cookie enables it to serve ads based on your visits to our Platforms and other sites. You can opt-out of the DART cookie by visiting the Google Ad and Content Network privacy policy.
We have implemented:
- Remarketing with Google AdSense
- Google Display Network Impression Reporting
- Demographics and Interests Reporting
- DoubleClick Platform Integration
We, along with third-party vendors like Google, use first-party cookies (e.g., Google Analytics cookies) and third-party cookies (e.g., DoubleClick cookie) or other third-party identifiers to compile data regarding user interactions with ad impressions and other ad service functions related to our Platforms.
You can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt-Out page or by using the Google Analytics Opt-Out Browser Add-on.
Employment Opportunities
We provide a means for you to submit your resume or other information through our Platforms for consideration for employment opportunities at the Company. Information received through resume submissions will be kept confidential. We may contact you for additional information and may use your information internally or keep it on file for future use as part of our hiring decisions.
Minors
Our Platforms are not designed for individuals under the age of eighteen (18), and we do not knowingly collect Personal Information from anyone under eighteen (18). If you are under eighteen (18) years of age, you may browse our Platforms, but please do not provide your Personal Information to us (e.g., you cannot register or make purchases). If we become aware that we have inadvertently received Personal Information from a visitor under the age of eighteen (18) on the Platforms, we will delete that information from our records.
Security Measures
We strive to protect Personal Information against loss, theft, and unauthorized access, disclosure, copying, use, or modification with security safeguards appropriate to the sensitivity of the Personal Information, regardless of its format. Our security measures include:
- Physical measures: Locked filing cabinets, restricted access to offices, and alarm systems.
- Technical tools: [You can specify technical tools here, e.g., encryption, firewalls, secure servers, regular security audits, access controls, etc. if you wish to add more detail. Otherwise, keep it general as in your reference.]
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. Any changes will be posted on this page. We encourage you to review this Policy periodically.
Questions & Contact Us
If you have any questions, require more information, or wish to exercise your rights regarding your Personal Information, please do not hesitate to contact us.
Customer Service Desk:
Email: info@bloomshine.in
Contact Days: Monday - Friday (9:00 AM to 6:00 PM IST)