PRIVACY POLICY

Your trust matters to us. This Privacy Policy explains how Cosmekor collects, uses, shares, stores, and protects personal data when you visit our website, create an account, place an order, contact us, join a campaign, or interact with our marketing.

For this policy, "Cosmekor," "we," "us," and “our” mean Miss Dixita Atekar, with a registered office at H-312, Sharad Industrial Estate, Bhandup (W), Mumbai-400078. The website is www.cosmekor.in .

2.1 Personal data we may collect

We may collect information you provide directly, such as your name, email address, phone number, billing and delivery addresses, account credentials, order details, customer-support messages, reviews, survey responses, and marketing preferences.

We may receive transaction-related information from payment providers, such as payment status, method, and reference identifiers. We do not ordinarily store complete card, UPI PIN, or banking credentials; those are processed by authorized payment providers subject to their own terms and security practices.

When you use the website, we and our service providers may collect device and usage data such as IP address, browser type, device identifiers, pages viewed, referral source, approximate location derived from IP, session activity, cookies, and similar technologies. We may also receive information from delivery partners, Shopify, analytics tools, social platforms, and advertising partners where permitted.

2.2 Why we use personal data

We use personal data to operate the store; create and manage accounts; process payments and orders; deliver products; send order and service updates; prevent fraud and misuse; respond to questions and complaints; manage returns, refunds, and replacements; improve products and website performance; personalize content; maintain records; comply with law; protect our rights; and send promotional communications where permitted or consented to.

We process personal data on the basis of your consent, to fulfill your request or order, for uses permitted by applicable law, and to meet legal obligations. Where consent is the basis, you may withdraw it through the method provided, although withdrawal does not affect lawful processing already completed and may limit services that require the data.

2.3 Cookies and marketing

Our website may use essential cookies for cart, checkout, security, and account functions and optional analytics or advertising cookies to understand performance and show relevant communications. You can manage cookies through your browser and any consent controls made available on the website. Blocking essential cookies may affect store functionality.

You may unsubscribe from promotional emails using the unsubscribe link. For SMS or WhatsApp marketing, follow the opt-out instructions in the message or contact us. Transactional communications about an order may continue even after a marketing opt-out.

2.4 When we share data

We may share only the information reasonably needed with Shopify and hosting providers; payment gateways; courier, warehousing, and fulfillment partners; communications, customer support, analytics, and marketing providers; professional advisers; regulators and law-enforcement authorities where legally required; and a buyer or successor in a genuine business reorganisation, subject to appropriate safeguards.

We do not sell personal data for money. Some advertising or analytics activities may involve sharing identifiers or usage information as described in our cookie controls and service-provider notices.

2.5 Cross-border processing

Some service providers may process information outside India. Where personal data is transferred or accessed across borders, we will take reasonable steps required by applicable law and use providers with appropriate contractual and security protections, subject to any government restrictions then in force.

2.6 Retention and security

We retain personal data only for as long as reasonably necessary for the purposes described, including order fulfillment, customer support, accounting, taxation, fraud prevention, dispute resolution, and legal compliance. Retention periods vary by record type. When data is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it, unless continued retention is required or permitted by law.

We use reasonable administrative, technical, and organizational safeguards. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. If you believe your account or data may be compromised, contact us promptly.

2.7 Your choices and rights

Subject to applicable law and the relevant provisions being in force, you may request information about your personal data, correction or updating of inaccurate data, erasure where appropriate, withdrawal of consent, grievance redressal, and nomination or other rights made available under Indian data protection law. We may need to verify your identity and may retain information where a lawful exception applies.

To exercise a privacy right or raise a concern, email [info@cosmekor.in]. We will acknowledge and respond within the period required by applicable law.

2.8 Children’s privacy

Our store is not intended to solicit personal data from children. If you are below the age at which you can validly consent under applicable law, a parent or lawful guardian should use the service on your behalf. If we learn that personal data was collected from a child contrary to applicable requirements, we will take appropriate steps.

2.9 Third-party links and policy updates

Our website may link to third-party sites or services. Their privacy practices are governed by their own policies. We may update this Privacy Policy to reflect legal, operational, or technology changes. The current version will be posted on the website with an effective date before publication.