Secret Beauty
Privacy Policy
Last updated: 26 October 2026
This page explains what information Secret Beauty collects when you shop with us, why we need it, who we share it with, and the choices you have. We have kept it as short and plain as we can.
The short version
- We only collect what we need to run your account, deliver your orders and keep the website safe.
- We never sell your data, and we don’t show you ads from other companies.
- Online payments go through Razorpay. We never see your full card or UPI details.
- You can download your data or delete your account yourself, any time, from My account → Privacy & settings.
- Questions? Email secretbeautywebsite@gmail.com. We reply within 48 hours.
1Who we are
Secret Beauty is a beauty store at Shop No 4-8, Plot No 255, Swaraj Imperial, Sector 10, Kharghar, Navi Mumbai, Maharashtra 410210. We sell makeup, skincare, haircare, professional salon products and imitation jewellery in our shop and on secret-beauty.in.
Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the data fiduciary for your information. In simple words: we decide how it is used, and we are responsible for looking after it.
2What we collect
| What | For example | When |
|---|---|---|
| Account details | Name, email, mobile number, password (stored encrypted, never readable by us) | When you create an account |
| Delivery details | Address, PIN code, landmark | When you order or save an address |
| Orders | Products, prices, payment method (not card numbers), invoices | When you shop |
| Wallet and rewards | Wallet balance and history, reward points, gift card codes | When you use them |
| Gift card recipients | Their name, email and your message | When you send a gift card |
| Reviews and messages | Reviews you post, messages and photos you send us | When you write to us |
| Seller applications | Business name, GSTIN, PAN, bank details, documents | Only if you apply to sell with us |
| Device and security | IP address, browser type, sign-in attempts | Automatically, to keep the site safe |
| Anonymous visit counts | Which pages were viewed, what was added to the bag, where the visit came from (such as Google or Instagram) and phone or computer. No cookies, no IP address stored, and it can’t identify you. Deleted after 120 days. | Automatically, to improve the shop |
We don’t ask for sensitive information such as health records. If you mention your skin type or a skin concern in a review or a message, we use it only to help you.
3Why we use it
- To create your account and let you sign in.
- To process, pack and deliver your orders, and send you order updates by email or SMS, and on WhatsApp if you have chosen that.
- To handle cancellations, returns, refunds and wallet credits.
- To answer your questions and sort out complaints.
- To send you offers and news about new products, only if you said yes. You can switch this off any time.
- To stop fraud, fake orders and misuse of the website.
- To keep the records the law asks us to keep, such as GST invoices.
We use your data because you agreed to it when you created your account or placed an order, or where the law allows or requires it (for example, keeping tax records). You can withdraw your agreement for optional things, like offers, whenever you like.
4Who we share it with
We share only what each company needs to do its job for us, and nothing more.
| Who | Why |
|---|---|
| Razorpay | To take online payments (UPI, cards, netbanking, wallets). They handle your payment details, not us. |
| Courier partners (for example through Shiprocket) | To deliver your parcel. They receive your name, delivery address and mobile number. |
| Google Firebase | To run sign-in: verification emails, OTP text messages, and “Continue with Google” or “Continue with Apple”. |
| Hostinger, our website host | To store the website and its data securely. |
| Email, SMS and WhatsApp services | To send you the messages you have asked for, such as order updates. |
| Verified sellers on Secret Beauty | Only the order details needed to supply a product they sell. |
| Meta (Facebook and Instagram) | Only if you choose “Accept all”: the pages and products you view, what you add to your bag and what you buy (with the order value), so we can measure our ads and show them to people likely to be interested. Your email or mobile number may be sent in scrambled (hashed) form so Meta can match the visit. See Meta’s Privacy Policy. |
| Google Analytics and Microsoft Clarity | Only if you choose “Accept all”: how the website is used, so we can improve it. |
| Government, police or courts | Only when the law requires it. |
We never sell your personal data. Ad measurement with Meta happens only if you choose “Accept all”, and you can switch it off any time with Cookie settings at the bottom of every page.
5How long we keep it
| Information | How long |
|---|---|
| Account and saved addresses | Until you delete them or your account |
| Orders and invoices | Up to 8 years, because Indian tax (GST) law requires it |
| Messages and complaints | Up to 3 years after the matter is closed |
| Sign-in and security logs | Up to 90 days |
| Your offers and message choices | Until you change them or delete your account |
| Seller verification documents | While you sell with us, then as long as the law requires |
6Your rights and choices
Under the DPDP Act you can:
- See your data. Download a copy instantly from My account → Privacy & settings.
- Correct it. Edit your name, number, email and addresses in My account, or ask us to.
- Delete it. Delete your saved details, or your whole account, from Privacy & settings. We keep order invoices only as long as tax law requires.
- Withdraw consent. Switch off offers at any time. We will still send messages about orders you have already placed.
- Nominate someone to use these rights for you if you are unable to.
- Complain. Contact our Grievance Officer first. If you are not happy with our answer, you can complain to the Data Protection Board of India.
7Cookies
We use a few essential cookies to keep your bag, sign-in and checkout working. Analytics and ad-measurement cookies (Google, Microsoft Clarity and Meta) are used only if you choose “Accept all”. The full list, and how to change your choice, is in our Cookie Policy.
8How we keep it safe
- The whole website runs on a secure (HTTPS) connection.
- Passwords are stored encrypted. Nobody at Secret Beauty can read them.
- Only the staff who need your information to help you can see it.
- Seller documents are stored privately and can only be opened by our verification team.
- We limit repeated sign-in attempts to stop people guessing passwords.
No website can promise perfect security. If a data breach ever affects you, we will tell you and the Data Protection Board as the law requires.
9Children
Our store is meant for adults. You must be 18 or older to create an account. If you are younger, please ask a parent or guardian to shop for you.
10Changes to this policy
If we make an important change, we will update the date at the top of this page and email account holders before it takes effect.
Still have a question? Email secretbeautywebsite@gmail.com or see our Grievance Officer page for everything about your personal data. We reply within 48 hours.