Privacy Policy
Rudra Enterprises, operating as The Orange Skincare (“we,” “our,” “us”), is committed to protecting your personal data. This Privacy Policy explains what we collect, why we collect it, how long we keep it, who we share it with, and the rights available to you.
This Policy is published in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and rules framed thereunder, and the Consumer Protection (E-Commerce) Rules, 2020.
By using this Website or placing an order, you acknowledge that you have read and understood this Policy.
1. Information we collect
Information you give us
1.1 Name, email address and mobile number
1.2 Billing and delivery addresses
1.3 Order history and the contents of your cart
1.4 Product reviews and ratings you submit
1.5 Any information you send us by email or phone
Information collected automatically
1.6 A session identifier that keeps your cart intact between visits
1.7 An authentication token when you are signed in
1.8 Basic technical information sent by your browser, including IP address, browser type and device type, used for security and to keep the Website working
Information we do not collect
We do not store complete payment card details, UPI credentials, or net-banking credentials at any time. Payment information is entered directly with our payment gateway and never reaches our servers.
2. Why we use it
2.1 To process, fulfil and deliver your orders
2.2 To create and manage your account
2.3 To send transactional messages relating to your orders and your account
2.4 To respond to enquiries and complaints
2.5 To display product reviews you choose to submit
2.6 To detect and prevent fraud and misuse
2.7 To meet obligations under tax, consumer protection and other applicable law
2.8 To send promotional communications, only where you have opted in
3. Consent and marketing
Transactional messages relating to an order you have placed are sent as a necessary part of fulfilling that order.
Promotional and marketing communications are sent only with your prior consent. You may withdraw consent at any time using the unsubscribe link in any marketing email, or by writing to info@theorangeskincare.com. Withdrawing consent does not affect transactional messages about orders you have already placed.
4. Cookies and tracking
We use the cookies and local storage necessary for the Website to function — keeping your cart contents and maintaining your signed-in session. We also use Google Analytics to understand aggregate site traffic and usage patterns; this sets a limited-purpose analytics cookie. We do not use advertising or cross-site tracking cookies.
Should we introduce advertising technologies in future, this Policy will be updated before they are deployed.
5. Who we share it with
We share personal data only to the extent necessary, with:
| Recipient | Purpose |
|---|---|
| Razorpay | Payment processing |
| Google Firebase | Account authentication, including OTP delivery |
| Amazon Web Services (Mumbai region) | Application hosting and database storage |
| Vercel | Website delivery |
| Shipway, and courier partners including Delhivery, Bluedart, Shadowfax, Ecom Express and India Post | Order delivery and tracking |
| Zoho | Business email |
| Resend | Transactional and, where consented, marketing email delivery |
| Sentry | Error monitoring and diagnostics |
| Google Analytics (Google LLC) | Aggregate usage/traffic analytics |
We may also disclose personal data where required by law, court order, or a lawful request from a government authority.
We do not sell your personal data, and we do not share it with any third party for that party’s own marketing purposes.
6. Where your data is stored
Primarily on servers located in India (AWS Mumbai region). Some service providers listed above may process limited data outside India in the course of providing their services; where this occurs, it is subject to contractual safeguards.
7. How long we keep it
7.1 Order, invoice and transaction records: 8 years, to meet tax and statutory record-keeping obligations
7.2 Account information: for as long as your account remains active, and for 8 years thereafter where linked to an order
7.3 Marketing consent records: until you withdraw consent, plus a record of the withdrawal
7.4 Enquiries and complaints: 3 years from resolution
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
8.1 Access a summary of the personal data we hold about you and how it is processed
8.2 Correct inaccurate or incomplete data, and complete or update it
8.3 Erasure of your personal data, except where we are required by law to retain it
8.4 Withdraw consent to any processing based on consent
8.5 Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
8.6 Grievance redressal — to complain to us first, and to the Data Protection Board of India if unsatisfied
To exercise any right, write to grievance@theorangeskincare.com. We respond within 21 days.
9. Security
We use access controls, encrypted connections (HTTPS), restricted database access and authentication managed by an established provider. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
10. Children
The Website is not intended for anyone under 18. We do not knowingly collect personal data from children. If we become aware that we have, we will delete it.
11. Changes
We may update this Policy from time to time. The Effective Date above will be revised, and material changes will be notified on the Website.
