Privacy Policy

Overview

Welcome to Gist Beauty, a brand of Serelux Gemora Private Limited. We are committed to protecting the privacy and personal information of every customer who visits our store, places an order, or engages with our brand online.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices you have regarding your information. By accessing gistbeauty.com and making a purchase, you agree to the practices described in this policy.

Information We Collect

We collect information you provide directly to us, as well as data collected automatically when you browse or purchase.

Information you provide:

• Full name, email address, phone number, and shipping/billing address when you create an account or place an order
• Payment information (processed securely through our payment gateway; we do not store card numbers)
• Communications you send us via email, contact forms, or customer service enquiries
• Preferences, reviews, or feedback you submit voluntarily

Information collected automatically:

• Browser type, device type, operating system, and IP address
• Pages visited, time spent on site, referral URLs, and click-through behaviour
• Session data, cart contents, and browsing history within the store
• Cookie identifiers and similar tracking technologies (see Section 05)

How We Use Your Data

We use the information we collect solely for legitimate business purposes and to deliver the best possible experience to you.

• Processing and fulfilling your orders, including shipping notifications and delivery updates
• Managing your account and providing customer support
• Sending order confirmations, invoices, and transactional emails
• Sending promotional emails and new product announcements — only if you have opted in
• Improving our website, product offerings, and overall user experience
• Complying with applicable legal obligations under Indian law (GST, consumer protection)
• Detecting and preventing fraudulent transactions or security breaches
• Analysing aggregate, anonymised data to understand customer trends

We will never sell your personal data to third parties for their own marketing purposes.

Sharing of Information

We share your personal data only where necessary to operate our business or comply with the law.

• Logistics & Shipping Partners — We share your name, address, and phone number with our courier partners solely for the purpose of delivering your order.
• Payment Processors — Your payment information is handled directly by our certified payment gateway. We do not store raw card or UPI data on our servers.
• Zoho Corporation — Our store is powered by Zoho Commerce (Zoho Corporation Pvt. Ltd.). Zoho processes data on our behalf and is bound by strict data processing agreements.
• Legal Authorities — We may disclose information if required to do so by law, regulation, court order, or to protect the rights and safety of our company or customers.

All third-party service providers are contractually obligated to process your data only on our instructions and in compliance with applicable privacy laws.

Cookies & Tracking

Our website uses cookies and similar technologies to ensure the site functions correctly and to improve your experience.

• Essential Cookies — Required for the store to function, including maintaining your cart and session.
• Analytics Cookies — Help us understand how visitors interact with our site (e.g., pages viewed, time on site). We use anonymised data only.
• Marketing Cookies — Used to show you relevant content or advertisements, only if you have consented.

You may control or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to browse or purchase from our store.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Indian laws.

• Order and transaction records are retained for a minimum of 7 years for tax and accounting compliance under the Income Tax Act and GST regulations.
• Account information is retained for the duration your account is active, and for a reasonable period thereafter.
• Marketing preferences and email opt-ins are maintained until you withdraw consent.

Upon request, we will securely delete or anonymise your personal data to the extent permitted by law.

Your Rights

As a customer, you have meaningful rights regarding your personal data. You may exercise any of these rights by contacting us at the details provided in Section 11.

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal data, subject to legal retention obligations.
• Opt-Out — Unsubscribe from marketing emails at any time using the link in any email, or by contacting us directly.
• Data Portability — Request your data in a structured, machine-readable format.
• Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

We will respond to all verified requests within 30 days.

Data Security

We take the security of your personal information seriously and employ industry-standard measures to protect it.

• Our website uses SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Payment processing is handled via PCI-DSS compliant payment gateways.
• Access to customer data is restricted to authorised personnel only, on a need-to-know basis.
• Our platform (Zoho Commerce) maintains regular security audits and compliance certifications.

While we take every reasonable precaution, no method of internet transmission is 100% secure. In the event of a data breach that affects your rights, we will notify you promptly in accordance with applicable regulations.

Children's Privacy

Gist Beauty's products and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from children under the age of 18.

If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete such data from our records.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. When we do, we will revise the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of gistbeauty.com after any changes constitutes your acceptance of the updated policy. For significant changes, we will notify registered customers via email.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us directly. We are committed to addressing your enquiry promptly and transparently.