This Privacy Policy explains how Hindustan Cosmed Pvt. Ltd. (“we”, “us”) collects, uses and protects your personal data when you use hindustancosmed.com or buy from us. We process personal data in line with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. Information we collect

• Order and account details: your name, billing and shipping address, email address, phone number, order history and account login details.
• Messages: anything you send us through the contact form or by email.
• Payment information: payments are handled by our payment partners. We do not see or store your full card, UPI or net-banking details.
• Technical data: IP address, browser and device type, and cookies needed for the cart, checkout, login and wishlist to work.

2. How we use your information

• to process, pack, ship and track your orders;
• to send order confirmations, dispatch and delivery updates;
• to handle returns, refunds and customer questions;
• to meet our legal, tax and drug-licence record-keeping obligations; and
• to keep the website secure and prevent fraud.

We do not sell your personal data. We will only send you marketing emails if you have agreed to receive them, and you can opt out at any time.

3. Who we share it with

We share only what is needed with:

• courier and postal partners, to deliver your order;
• payment gateways and banks, to process payments and refunds;
• our website hosting and email providers; and
• government authorities, where the law requires it.

Our Contact page shows an embedded Google Map, which is provided by Google and subject to Google’s own privacy policy.

4. Cookies

We use essential cookies to keep your cart, login and wishlist working. You can block or delete cookies in your browser settings, but the shop may not work properly without them.

5. How long we keep it

We keep order and invoice records for as long as tax, accounting and drug-licensing laws require. Other personal data is kept only as long as needed for the purposes above, after which it is deleted or anonymised.

6. Security

Our website uses HTTPS encryption, and access to customer data is limited to staff who need it to fulfil orders. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

7. Your rights

You can ask us to access, correct or delete your personal data, or withdraw consent you have given, by emailing us. You can also update your details in My Account. We may need to keep some records where the law requires it.

8. Children

This website is intended for adults. Orders for children should be placed by a parent or guardian.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

10. Grievance officer and contact