Privacy Policy

Information you provide directly:

• Name, email address, phone number when you create an account
• Delivery address when you place an order
• Payment information (processed securely by Razorpay — we never store card details)
• Fragrance preferences from the scent quiz
• Reviews, ratings, and forum posts you submit

Information collected automatically:

• Device type, browser, operating system
• IP address and approximate location
• Pages visited, time spent, clicks (via analytics)
• Referral source (how you found us)

• To process and fulfil your orders
• To send order confirmations, shipping updates, and support communications
• To personalise fragrance recommendations based on your quiz results and purchase history
• To send marketing emails (only with your consent — you can unsubscribe anytime)
• To improve our platform, detect fraud, and ensure security
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

We share your data only with:

• Courier partners (Delhivery, Shiprocket) — name, address, phone for delivery
• Razorpay — payment processing
• Supabase — database and authentication infrastructure
• Resend / 2factor.in — email and SMS delivery
• Law enforcement — when required by law or court order

All third-party processors are bound by data processing agreements and are required to protect your data.

We use cookies and similar technologies to:

• Keep you logged in
• Remember your cart and preferences
• Analyse site usage (via privacy-respecting analytics)

You can disable cookies in your browser settings, but some features may not work correctly.

We retain your personal data for as long as your account is active or as needed to provide services. Order data is retained for 7 years for accounting and legal compliance. You may request deletion of your account and associated data at any time (see Section 7).

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data
• Access controls limiting who can view your data
• Regular security reviews

No system is 100% secure. If you suspect unauthorised access to your account, contact us immediately at [YOUR_EMAIL].

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Grievance redressal — raise a complaint with our Data Protection Officer
• Withdraw consent — for marketing communications at any time

To exercise any of these rights, email [YOUR_EMAIL] with the subject "Data Rights Request". We will respond within 30 days.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Continued use of ScentRev after changes constitutes acceptance of the updated policy.

For privacy-related queries or to exercise your rights:

Data Protection / Grievance Officer
ScentRev
Email: [YOUR_EMAIL]
Address: [YOUR_ADDRESS]

You may also file a complaint with the Data Protection Board of India once it is constituted under the DPDPA 2023.