Privacy Notice
Last updated 28 Sep 2026 · Document reference: GLC-LEG-PRIVACY
1. What We Collect and Why
We collect only the minimum personal data necessary to provide personalized shade recommendations and fulfill deliveries: name, phone number, delivery address, order history, and skin profile coordinates (skin type, tone family, concerns).
We never collect, store, or sell biometric facial templates or sensitive identifiers.
2. Your Rights & Consent Withdrawal
Under the DPDP Act, you retain full rights to access, rectify, or erase your customer data. You may withdraw your consent for profile storage at any time via App Settings → Privacy → Delete Profile.
Upon request, all stored skin coordinates and order histories are permanently scrubbed within 7 business days.
3. Data Security & Storage
All customer data is encrypted in transit using TLS 1.3 and at rest with AES-256 encryption hosted exclusively within Indian data centers (MeitY empaneled).