Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us, as well as data collected automatically during your use of the website.

Information you provide directly:

• Full name, email address, and phone number when you register or place an order
• Delivery and billing address details
• Payment information (processed securely by our payment partners — we do not store card details)
• Messages submitted via the contact form
• Product reviews and ratings you submit
• Profile photograph if you choose to upload one

Information collected automatically:

• IP address and browser type
• Pages visited and time spent on each page
• Referring URLs and search terms used to reach our website
• Device type and operating system
• Cookie identifiers (see Cookies section below)

2. Orders

When you place an order on our website, we collect the information necessary to process and fulfil your purchase. This includes your contact details, delivery address, and order preferences. This information is used to:

• Confirm and process your order
• Communicate order status and shipping updates via email and SMS
• Generate and issue invoices compliant with GST regulations
• Handle returns, refunds, and post-purchase support
• Maintain your order history accessible through your account profile

3. Payments

All online payments on our website are processed through PCI-DSS Level 1 compliant third-party payment gateway partners. We support Credit/Debit Cards (Visa, MasterCard, RuPay, American Express), Net Banking, UPI (Google Pay, PhonePe, Paytm), and Cash on Delivery (COD).

Purity Prime does not store, process, or retain your full card number, CVV, or banking credentials on our servers. All payment transactions are encrypted using 256-bit SSL technology. When you provide payment details, you are interacting directly with our payment partners' secure environment.

For COD orders, your phone number is used to send an OTP confirmation and to facilitate delivery coordination with our courier partners.

4. Cookies

Our website uses cookies — small text files placed on your device — to improve your browsing experience, remember your preferences, and analyse site traffic.

We use the following types of cookies:

• Essential cookies: Required for the website to function, including maintaining your shopping cart and login session
• Preference cookies: Remember your settings and personalisation choices
• Analytics cookies: Help us understand how visitors interact with our website (via anonymised data)
• Authentication cookies: Used by Firebase Authentication to manage your signed-in session securely

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the website, including the shopping cart and checkout process.

5. Marketing Communications

With your consent, we may use your email address or phone number to send you information about new products, promotional offers, skincare tips, and brand updates. You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email
• Contacting us at info@purityprimes.com with the subject line "Unsubscribe"
• Updating your communication preferences in your account profile settings

Opting out of marketing communications does not affect transactional messages related to your orders, which will continue to be sent as they are necessary for service delivery.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or regulatory requirements.

• Account data: Retained for the duration of your active account and for up to 3 years after account closure
• Order records: Retained for 7 years to comply with Indian tax and GST regulations
• Contact form submissions: Retained for up to 1 year
• Marketing preferences: Retained until you opt out or withdraw consent

7. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers
• Firebase Authentication with OTP-based verification for account access
• Encrypted storage of session and authentication tokens on your device
• Access controls limiting employee access to customer data on a need-to-know basis
• Regular security reviews of our systems and infrastructure

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

8. Your Rights

You have the following rights in relation to the personal data we hold about you:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of any inaccurate or incomplete data
• Right to deletion: Request deletion of your personal data, subject to legal retention obligations
• Right to withdraw consent: Withdraw consent for marketing communications at any time
• Right to portability: Request a copy of your data in a structured, machine-readable format
• Right to object: Object to the processing of your personal data for direct marketing purposes

To exercise any of these rights, please contact us at info@purityprimes.com. We will respond to your request within 30 days.