Privacy Policy

Thoughtful skincare created with purpose, for real skin and real life.

Who We Are

Vanha Enterprises operating as About You Beauty (“we”, “us”, “our”) is the Data Fiduciary responsible for your personal data collected through our Platform. Our registered address is Noida Sector-90, Uttar Pradesh, India. You may reach us at support@aboutyoubeautyin.com for any privacy-related queries. About You Beauty is a science-first, community-driven, and inclusivity-centred beauty brand. We are committed to handling your personal data with the same care we apply to our formulations — transparently, purposefully, and with your consent.

Data We Collect

2.1 Information You Provide to Us
We collect the following categories of personal data that you voluntarily provide:

Identity & Contact: Full name, email address, phone number, shipping and billing address, PIN code.
Account Data: Username, password (stored in encrypted form), purchase history.
Payment Data: Transaction identifiers (we do not store full card details — these are processed by our payment gateway partners).
Communication Data: Messages, feedback, and product reviews you submit to us.

2.2 Information Collected Automatically
When you visit the Platform, we may automatically collect:

Device and browser information (browser type, operating system, device ID).
IP address and approximate geographic location.
Pages visited, time spent on the Platform, clickstream data, and referral URLs.
Cookie and tracking data (see Section 8).

2.3 Information from Third Parties
If you connect to our Platform via a social media account (e.g., Google, Instagram), we may receive your name, email, and profile picture as permitted by that platform. We may also receive data from advertising and analytics partners, strictly within the scope of their respective privacy policies and your consent settings.

Purposes of Processing

We process your personal data for the following specific purposes:

To process and fulfil your orders, manage payments, and arrange delivery.
To create and manage your customer account.
To provide customer support and respond to your queries and complaints.
To send you order confirmations, updates, and transactional communications.
To personalise product recommendations based on your purchase history and preferences.
To send you promotional communications and newsletters (with your explicit consent and with an easy opt-out mechanism).
To improve our products and Platform through analytics, surveys, and community feedback.
To comply with our legal obligations under Indian law.
To detect and prevent fraud, abuse, and security breaches.

We process your data only for the purposes listed above, and will not use it for any other purpose without your prior consent.

Legal Basis for Processing

Under the DPDP Act, 2023, we rely on the following legal bases:

Consent: For marketing communications, community participation, and non-essential cookies. You may withdraw consent at any time.
Contractual necessity: For processing orders, managing accounts, and delivering products.
Legal obligation: Where required by applicable Indian law (e.g., GST record-keeping, statutory reporting).
Legitimate use: As defined under Section 7 of the DPDP Act, including purposes for which you have voluntarily provided your data and have not objected.

Sharing of Your Data

We do not sell your personal data to third parties. We may share your data with:

Logistics & Delivery Partners: To fulfil and ship your orders.
Payment Processors: To securely process your transactions (these partners are PCI-DSS compliant).
Cloud & IT Service Providers: For Platform hosting, data storage, and security services.
Marketing & Analytics Tools: For understanding Platform usage and improving our communications — only in anonymised or aggregated form where possible.
Legal & Regulatory Authorities: Where required by law, court order, or government directive.
Business Successors: In the event of a merger, acquisition, or sale of our business, your data may be transferred to the successor entity, subject to the same privacy commitments.

Any third party with whom we share your data is contractually required to maintain its confidentiality and security and to process it only for the stated purpose.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Specifically:

Order and transactional data: Retained for a minimum of 7 years as required for GST compliance and accounting purposes.
Account data: Retained until account deletion, plus a reasonable period to resolve any pending disputes.
Marketing data: Retained until you withdraw your consent or unsubscribe.
Marketing data: Retained until you withdraw your consent or unsubscribe.

Upon expiry of the applicable retention period, we will securely delete or anonymise your data.

Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights with respect to your personal data:

Right to Access: To obtain a summary of the personal data we hold about you and the purposes for which it is being processed.
Right to Correction: To request correction of inaccurate or incomplete personal data.
Right to Erasure: To request deletion of your personal data, subject to legal retention requirements.
Right to Withdraw Consent: To withdraw consent for marketing, profiling, or non-essential data processing at any time, without affecting the lawfulness of prior processing.
Right to Grievance Redressal: To file a complaint with our support team at support@aboutyoubeautyin.com and, if unresolved, with the Data Protection Board of India.
Right to Nominate: Under Section 14 of the DPDP Act, you may nominate a person to exercise your data rights in the event of death or incapacity.

To exercise any of these rights, please write to support@aboutyoubeautyin.com. We will respond within a reasonable time and in any event within 30 days.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies on the Platform to enhance your experience. These include:

Essential Cookies: Necessary for the Platform to function (e.g., session management, cart functionality). These cannot be disabled.
Analytics Cookies: Help us understand how users interact with the Platform. We use this data in aggregate form.
Marketing Cookies: Used to deliver personalised advertisements and track the effectiveness of our campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect some features of the Platform. We will seek your explicit consent for non-essential cookies upon your first visit, in compliance with applicable law.

Children's Data

Our Platform and products are not directed at children under the age of 18. In accordance with the DPDP Act, 2023, we do not knowingly collect personal data from children without verifiable parental consent, and we do not engage in behavioural tracking or targeted advertising directed at children. If you believe we have inadvertently collected data from a child, please contact us at support@aboutyoubeautyin.com and we will delete such data promptly.

Data Security

We implement reasonable technical and organisational security measures to protect your personal data, including:

SSL/TLS encryption for all data transmitted through the Platform.
Encryption and masking of sensitive data at rest.
Access controls and access logging to limit who can access personal data internally.
Regular security reviews and vulnerability assessments.

However, no method of electronic transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Rules, 2025 (within 72 hours of becoming aware of the breach).

Cross-Border Data Transfers

We primarily process your data within India. Some of our service providers and technology platforms may process data outside India. Where such transfers occur, we take steps to ensure appropriate safeguards are in place in accordance with applicable law. You may contact us for further information about our data transfer practices.

Third-Party Links

Our Platform may contain links to third-party websites, social media pages, or partner platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for their privacy practices.

Privacy Queries & Grievance Redressal

For any privacy-related concerns, complaints, or requests to exercise your rights under the DPDP Act, please contact our support team:

Email: support@aboutyoubeautyin.com
Postal Address: Noida Sector-90, Uttar Pradesh, India
Available: Monday to Friday, 10:00 AM – 6:00 PM IST

If your grievance is not resolved to your satisfaction within 30 days, you may approach the Data Protection Board of India once it is fully operational.

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, Platform features, or legal requirements. We will notify you of material changes through email or a prominent notice on the Platform. The updated policy will take effect on the date specified. Your continued use of the Platform after such date constitutes acceptance of the updated policy. We recommend reviewing this Privacy Policy each time you visit. The current version will always be accessible on our Platform.