Privacy policy

STANDARD TERMS:

Beauty Alchemy India Pvt Ltd, having its registered office 6-217, Sy No. 288, Chilkur, Moinabad, Hyderabad, Telangana- 501504 (“Company”, “Thou.”, “we”, “us” or “our”) is managing and operating the mobile application/website www.thoubeauty.com (collectively referred to as the “Thou.” or “Website”) through which it inter alia facilitates the sale and purchase of wellness and related products (“Products”) to the users of this Website (“User” or “Users” or “you” or “your”).

This privacy policy (“Privacy Policy”), together with the Terms governs your use of this Website and describes our policies and procedures on the collection, use, disclosure, processing, transfer, and storage of the information provided to us by you. By using, browsing, accessing, or purchasing from this Website you agree to be bound by the terms of this Privacy Policy and consent to the collection, storage, possession, dealing, handling, sharing, disclosure or transfer of your information in accordance with the terms of the Privacy Policy. Our privacy policy is effective from 24.09.2025. To make sure you are aware of any changes, please review this policy periodically. This privacy policy was last updated 25.09.2025.

We shall not use the User’s information in any manner except as provided under this Privacy Policy. Capitalised terms used herein if not defined shall have the same meaning as ascribed to them under the Terms.

This document is an electronic record and is governed by the provisions under the Information Technology Act, 2000 and rules made thereunder as may be applicable, and the amended provisions pertaining to electronic records in various statutes as amended by the Information Technology Act, 2000. This electronic record is generated by a computer system and does not require any physical or digital signatures.

This Privacy Policy sets out the type of information collected from the Users, including the nature of the Sensitive Personal Data or Information (defined hereinafter), the purpose, means and modes of usage of such information and how and to whom we shall disclose or transfer such information. You may at any time withdraw your consent for collection and use of your information including Personal Information (defined hereinafter) or Sensitive Personal Data or Information. However, please note that if you withdraw your consent, we may no longer be able to provide you with the corresponding service for which you have withdrawn your consent. It is hereby clarified that your decision to withdraw your consent will not affect the processing of Personal Information based on your previous consent prior to the withdrawal.

Further, you agree and consent to receive all communications related to our services on the mobile number provided by you to the Company. You further confirm that no communication to you from the Company or on behalf of the Company shall be construed as Unsolicited Commercial Communication under Regulation 2(bw) of the TRAI Regulations and you have specifically opted to receive communications in this regard on the mobile number provided by you. Incase, you do not wish to receive communications from our end, you can withdraw your consent by emailing us at care@thoubeauty.com. If you are located in any region other than India, additional rights under GDPR (European region) and other respective local privacy laws will be applicable.

Please take a moment to familiarize yourself with our Privacy Policy. If you do not agree with any provisions of the Terms or this Privacy Policy, we advise you to not use or access this Website.

TYPE OF INFORMATION COLLECTED

You may be asked to provide your information anytime you visit, access, use or browse this Website. We may share information and use it consistent with the provisions of this Privacy Policy. We may also combine it with other information to provide and improve our Products, services, content and advertising.

You agree to provide information, which shall be true, correct, up to date and accurate. You may access, amend, alter or require deletion of your information partially or fully by contacting us at this Website.

This Website is not directed towards minors. We do not knowingly collect Personal Information from any User who is under 18 (Eighteen) years. If we are made aware that we have collected the Personal Information of a person below the age of 18 (Eighteen) years, we will take steps to delete the information within a reasonable time frame. If a parent or guardian becomes aware that his or her child has provided his/ her information on this Website without their consent, he or she shall contact us for the deletion of such information. In the event, where in contravention to the Privacy Policy and Terms, a person below the age of 18 (Eighteen) uses the services, we shall not be held liable or responsible for any damage or injury suffered by such person. We also do not knowingly collect any information from children under 16 and/or 13. If we are made aware that we have collected the Personal Information of a person below the age of 16 and/or 13 years, we will take steps to delete the information within a reasonable time frame.

We may collect a variety of information from you, including your name, password, mailing address, phone number, email address and contact preferences, including any other usage and interaction details with us or our affiliates. We may collect such information which when combined with other pieces of information available with us could reasonably allow you to be identified (“Personal Information”). Personal Information shall include but is not limited to your full name, personal contact numbers, residential address, email address, gender or date of birth.

We may also collect, receive, process or store certain sensitive personal data or information consisting of, but not limited to:

(i)             your name, e-mail and postal addresses, phone number(s), country;

(ii)           date of birth, language preference, location;

(iii)         Product interest information.

(iv)          Password;

(v)           Financial information such as bank account or credit card or debit card or other payment instrument details; and

(vi)          Any of the information received under above Personal Information categories by us for processing, stored or processed under lawful contract or otherwise.

(Collectively, referred to as “Sensitive Personal Data or Information”).

PURPOSE OF INFORMATION COLLECTED

We may collect, use or process your information including Personal Information and Sensitive Personal Data or Information for the following purposes:

Administration Purpose: For creating and giving you access to your registered account on this Website.

Customer Service Purpose: To develop, deliver, process and improve our Products, services, content in order to personalize and improve your experience.

Marketing Purpose: To inform you about our Products, services, offers, updates, upcoming events, including providing you information in relation to order confirmations, invoices, technical notices, security alerts.

Audit Purpose: For internal analytical and research purposes such as auditing, data analysis and research to improve our Products, services and customer communications.

Legal Purpose: To meet any legal or regulatory requirement or comply with a request from any governmental or judicial authority.

The legal basis on which we collect your Personal Information:

Performance of a Contract: some of the Personal Information processed is performed on the basis that it is necessary for the performance of our agreement with you. An example of this would be where we process your Personal Information for delivering the Products ordered by you on our Platform.

Legitimate Interest: legitimate interests will include where we send you marketing information about our Products, communicate with you in order to serve you better.

Compliance with a Legal Obligation: for certain types of processing it is necessary in order to allow us to comply with a legal obligation. An example of this would be where we are required to retain business records for fixed periods of time in order to comply with local legal requirements.

Consent: Finally, in certain limited situations, we rely on your consent in order to process your Personal Information. Where we require your consent in order to collect and process certain Personal Information, we seek your consent at the time of provision, and such processing will only be performed where consent is secured.

Redressal Purpose: To resolve any request, dispute, grievance or complaint raised by you in relation to your use of this Website.

Security Purpose: To detect or monitor any fraudulent or illegal activity on this Website.

In general, you can browse the Website without telling us who you are or revealing any personal information about yourself. Once you give us your personal information, you are not anonymous to us. Where possible, we indicate which fields are required and which fields are optional. You always have the option to not provide information by choosing not to use a particular service or feature on the Website. We may automatically track certain information about you based upon your behaviour on our Website. We use this information to do internal research on our users' demographics, interests, and behaviour to better understand, protect and serve our users.

If you use the Website, you are responsible for maintaining the confidentiality of your access information and password. You are responsible for restricting access to your computer, mobile device, etc., and you agree to accept responsibility for all activities that occur under your password. We cannot secure any information that you release on you own, that you request us to release or that is released through another third party to whim you have given access.

In case of our customer care support, we may record calls for quality and training purposes.

DISCLOSURE OF INFORMATION COLLECTED

We may from time to time be required to disclose the information collected from you to our trusted third-party service providers who assist us in order to facilitate the provision of services and purchase of Products on this Website. For instance, we may share your information with third party payment gateway provider to process transactions on this Website. By using this Website, you consent to any such disclosure of your information with third party service providers. We ensure that such third-party service providers are bound by reasonable confidentiality obligations and/ or use, maintain and follow generally accepted industry and security standards with respect to such information.

We may also disclose your information when such disclosure is requisitioned under any law or judicial decree or when we, in our sole discretion, deem it necessary in order to protect our rights or the rights of other Users, to prevent harm to persons or property, to fight fraud and credit risk.

We may also disclose or transfer your information to any third party as a part of reorganization or a sale of the assets, division or transfer of a part or whole of us. We shall ensure that third party to which we transfer or sell our assets will have appropriate confidentiality and security measures, at least as protective as those described in this Privacy Policy, to handle your Personal Information. You will have the opportunity to opt out of any such transfer if the new entity's planned processing of your information differs materially from that set forth in this Privacy Policy.

A third-party payment gateway provider may be required to collect certain financial information from you including, but not restricted to, your credit/debit card number or your bank account details (collectively referred to as “Financial Information”). All Financial Information collected from the you by such third-party payment gateway providers will be used only for billing and payment processes. The Financial Information collected from you is transacted through secure digital platforms of approved payment gateways which are under encryption, thereby complying with reasonably expected technology standards. The verification of the Financial Information shall be accomplished only by you through a process of authentication in which we shall have no role to play and hence, we shall bear no liability in relation to the same. We shall neither be liable nor responsible for any actions or inactions of third-party payment gateway providers or any breach of conditions, representations and warranties given by them. We shall also not be obligated to mediate or resolve any dispute or disagreement between you and such third-party payment service providers.

While we take best efforts to ensure that your information including Personal Information, Financial Information and Sensitive Personal Information or Data is duly protected by undertaking security measures prescribed under applicable laws, you are strongly advised to exercise reasonable discretion while providing Personal Information or Financial Information while using the services given that the Internet is susceptible to security breaches.

Your information may also be transferred, stored or processed in any country other than the one where you access this Website. For purposes of sharing or disclosing data in accordance with the Privacy Policy, we reserve the right to transfer your information outside of your country. By using this Website, you consent to such transfer of your information outside of your country and also within our affiliates, subsidiaries and partners whose personnel and subcontractors. When such information is transferred out of India, appropriate safeguarding measures are applied, such as Standard Contractual Clauses (SCCs) or other such similar protective measures. The information may be transferred in the event it is necessary for the performance of the services, operation of this Website and provision of Products as agreed upon between us and the third party.

SECURITY

The security of your Personal Information is important to us. We have implemented security policies, rules and technical measures, as required under applicable law including firewalls, transport layer security and other physical and electronic security measures to protect the Personal Information that it has under its control from unauthorized access, improper use or disclosure, unauthorized modification and unlawful destruction or accidental loss. When you submit your information on this Website, your information is protected through our security systems. Please note that we use international and industry-recognized standards such as per applicable laws, rules and regulations.

Your information is contained within secured networks and is only accessible by a limited number of authorized persons who have access rights to such systems or otherwise require such information for the purposes provided in this Privacy Policy. These authorized persons are also under an obligation to keep such information confidential.

Although we make best possible efforts to transmit and store all the information provided by you in a secure operating environment that is not open to public, you understand and acknowledge that there is no such thing as complete security and we do not guarantee that there will be no unintended disclosures of any information and potential security breaches. You agree not to hold us responsible for any breach of security or for any action of any third parties that receive your Personal Information or events that are beyond our reasonable control including, acts of government, computer hacking, unauthorized access to computer data and storage device, computer crashes, breach of security and encryption, etc. 

COOKIES POLICY

Due to the communications standards on the Internet, when you visit, access or browse this Website, we automatically receive the uniform resource locator of the site from which such you visit, access or browse this Website, details of the website you visit on leaving this Website, the internet protocol (“IP”) address of each User’s computer operating system, type of web browser the User is using, email patterns, and the name of the User’s internet service provider. This information is used solely to analyse overall User trends and to help us improve our services. Please note that the link between the User’s IP address and the User’s personally identifiable information is not shared with third parties without such User’s permission or except when required by law or to provide or facilitate the User with the services. Notwithstanding the above, the User acknowledges that we reserve the right to share some of the aggregate findings, including the personal information provided by the Users in an unidentifiable, aggregate form, and not the specific data with advertisers, sponsors, investors, strategic partners, and others in order to help grow the business. The amount of information sent to us depends on the settings of the web browser used by the User to access the Platforms. The User may refer to the browser used, if the User wishes to learn what information is provided to us.

This Website uses temporary cookies to store certain data. We do not store Personal Information in the cookies. Information collected by us, by any means whatsoever, that does not personally identify the User as an individual (such as patterns of utilization described above) is exclusively owned by us and may be used by us and third-party service providers for technical administration of the Platforms, user administration, research, development, and other purposes.

You understand that you may set or amend your web browsers to delete or disable cookies. If you choose to disable cookies on your computer or mobile telecommunication device, it may impair, degrade or restrict access to certain areas of this Website.

We may allow other companies or entities to serve advertisements to you. These companies or entities include third party advertisement servers, advertisement agencies, advertisement technology vendors and research firms. We use Meta Pixel and other technologies including collection of cookies to understand our demographics and to improve targeting while measuring ad performance. Using these technologies, we show relevant ads on Meta Platforms.  We may target some advertisements to you that fit a certain general profile. We do not use Personal Information to target advertisements to you. In the course of serving advertisements or optimizing the services to its Users, we may allow authorised third parties to place or recognize a unique cookie on the User’s browser.

You agree and understand that we do not exercise control over third party websites displayed as search results or links on this Website. These other sites may place their own cookies or other files on the Users’ computer, collect data or solicit personal information from the Users, on which we have no control and shall not be held responsible or liable. We do not make any representations concerning the privacy practices or policies of such third parties or terms of use of such websites, nor do we guarantee the accuracy, integrity, or quality of the information, data, text, software, sound, photographs, graphics, videos, messages, or other materials available on such websites. The inclusion or exclusion does not imply any endorsement by us of such websites, the websites’ provider, or the information on the website.

We may keep records of telephone calls received from and made to Users for the purpose of administration of services, research and development, training, business intelligence, business development, or for User administration. We may share such telephone records with third parties when required by law or when required to provide or facilitate the User with the services.

You consent to our reproduction/publishing of all testimonials and reviews given by you on this Website in relation to the services or the Products. You agree that we may edit the testimonials and reviews provided by you and reproduce/publish such edited or paraphrased versions of the testimonials and reviews on this Website. If the User has any concerns with the reproduction/publication of any testimonial or review provided by you, the User may contact us at legal@thoubeauty.com.

OPT-OUT POLICY

The third-party service providers with whom we may share information provided by you are not permitted to market their own services or send promotional e-mails or engage in promotional communication with you. We provide you with the opportunity to opt-out of receiving non-essential, promotional, or marketing-related communication from itself or its partners.

If you wish to remove your contact information from all our mailing lists and newsletters, you can click on the "unsubscribe" link or follow the instructions in each e-mail message. Further, if you do not wish to be a part of targeted advertising, you can also opt out of such advertising by changing your ad preference in all your social media platforms under the ‘settings tab’ or (ad preferences) ‘review tab.’  We reserve the right to limit membership based on availability of contact information. All Users will be notified by email prior to any actions taken.

YOUR CONSENT

By using the Website and/ or by providing your information, you consent to the collection and use of the information you disclose on the Website in accordance with this Privacy Policy, including but not limited to your consent for sharing your information as per this privacy policy.

RETENTION OF INFORMATION

We will retain your information and any data for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted under the applicable law. Your Personal Information is safeguarded against inappropriate access and disclosure, as per this Policy.

We may store Personal Information using our own secure on-site servers or other internally hosted technology. Your Personal Information may also be stored by third parties, via cloud services or other technology, with whom the Company has contracted, to support the Company's business operations.

These third parties do not use or have access to your Personal Information other than for cloud storage and retrieval, and the Company requires such parties to employ at least the same level of security that we use to protect your Personal Information.

We also maintain appropriate and adequate administrative, technical and physical safeguards designed to protect your Personal Information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

POLICY REVIEW

We reserve the right to amend this Privacy Policy at any time. The Privacy Policy, as and when modified, shall be updated on this Website. We encourage you to review this Privacy Policy whenever you visit this Website to understand how your Personal Information is used.

GRIEVANCE REDRESSAL

In case, you have any questions, grievance or complaints about this Privacy Policy, or this Website, you may contact on the below mentioned details:

Email Address:  legal@thoubeauty.com

GOVERNING LAW

The terms of this Privacy Policy shall be governed and construed in accordance with the laws of India. Any dispute regarding or arising out of this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana.

SEVERABILITY

Whenever possible, each section of this Privacy Policy shall be interpreted in a manner so as to be valid under applicable law. However, in the event any provision is held to be prohibited or invalid, such provision shall be ineffective only to the extent of such prohibition or invalidity, without invalidating the remainder of such provision or other remaining provisions of this Privacy Policy.

Privacy Policy- FAQs

1. What personal information do you collect?

We may collect your name, age, contact details, address, payment information, and order history when you shop with us or sign up for our services.

2. How do you use my information?

We use your information to process orders, deliver products, improve our services, and send you updates, offers or show you advertisements based on your preferences (only if you’ve opted in).

3. Do you share my data with third parties?

We do not sell your personal information. We may share it only with trusted service providers such as payment gateways, courier partners, with third party platforms such as Meta Pixel to measure and improve ad performance or IT service providers, to complete your orders securely.

4. Is my payment information safe?

Yes. All online transactions are processed through secure, PCI-DSS compliant payment gateways. We do not store your card or UPI details on our servers.

5. Will I receive marketing emails or SMS?

You will only receive promotional emails or SMS if you choose to subscribe. You can withdraw your consent or unsubscribe anytime.

6. How do you protect my data?

We use industry-standard security measures, encryption, and restricted access policies to protect your personal information.

7. Can I access or update my personal information?

Yes. You can log in to your account on our website to update your details, or you may contact our customer support team.

8. Do you use cookies?

Yes. We use cookies to improve your browsing experience, analyze site traffic, and provide personalized recommendations.

9. How long do you keep my data?

We retain your personal information only as long as necessary to fulfill the purposes mentioned in our privacy policy or as required by law.

10. Who can I contact for privacy-related concerns?

You can reach out to our team at ‘care@thoubeauty.com’ for any queries or concerns about your personal information.