Privacy Policy

This policy explains what personal data Ali Sparkles collects, why, and the rights you have over it. It is published under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 and the rules made under it, as they apply.

1. Who is responsible for your data

Ali Sparkles, Navi Mumbai, is the data fiduciary for the personal data collected through this website. For any privacy question or request, contact our Grievance Officer, Ilyas, at [email protected].

2. What we collect

• Order details you give us: name, mobile number, email (optional), delivery address, city, state and PIN code, and any order notes.
• Order history: products ordered, amounts, order status and invoices.
• Communications: messages you send us by phone, email or WhatsApp.
• Technical data: basic server logs (such as IP address, browser type and time of visit) kept for security.

You can shop as a guest or create an account (name, mobile, email, password and a saved address) to see and track your orders. Passwords are stored only in encrypted (hashed) form. We do not collect card or bank details, biometric or health data. You can delete your account at any time from My account → My details. We do not collect card, UPI or bank details — online payments are entered directly with our payment partner.

Cookies and analytics. We use one essential session cookie to keep your bag and sign-in while you shop, and a first-party cookie that remembers for 30 days which link, ad or website brought you to us, so we can tell which of our ads and posts lead to orders; it is stored with your order and not shared. With your permission (asked through the cookie banner, which you can change any time from “Cookie settings” at the bottom of every page), we also use analytics and advertising tools — Google Analytics / Tag Manager — which use cookies to understand how the website is used (pages viewed, products added to the bag, purchases) and to measure and improve our ads. These providers process this data under their own privacy policies. We do not send them your name, phone, email or address.

3. Why we use it

• to process, confirm, pack, deliver and invoice your order, and to collect cash-on-delivery payments;
• to contact you about your order, deliveries, returns, refunds and complaints;
• to keep the books and records required by tax, GST and accounting laws;
• to prevent fraud and keep the website secure;
• to comply with legal obligations and lawful requests from government authorities.

We use your data only for these purposes. We send newsletters (new launches, offers and fragrance tips) only to people who subscribe — through our signup form or the newsletter checkbox at checkout. Every newsletter has an unsubscribe link, and you can also ask us to stop at any time.

4. Your consent

When you place an order you agree to us using your details as described here. Where we rely on your consent, you may withdraw it at any time by writing to the Grievance Officer; this will not affect anything done before you withdrew it, and we may still keep data we are required by law to keep.

5. Who we share it with

We do not sell your personal data. We share only what is needed with:

• courier and logistics partners, to deliver your order (name, phone, address);
• our payment partner Razorpay, when you pay online (order amount, and the name, mobile and email you give at checkout);
• analytics and advertising providers named above, for website usage data only, if you allow it;
• service providers that host this website, store our data or send messages for us, under confidentiality obligations;
• our accountants and auditors, and government or law-enforcement authorities when required by law.

6. How long we keep it

We keep order and invoice records for as long as tax and accounting laws require (for GST, generally up to eight years) and other personal data only as long as needed for the purposes above, after which it is deleted or anonymised.

7. Security

We follow reasonable security practices, including encrypted connections (HTTPS), restricted access to order data for authorised staff only, and secured servers. No system is completely secure; if a personal data breach affects you, we will inform you and the authorities as the law requires.

8. Your rights

You have the right to:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law (for example, invoices);
• withdraw consent you have given;
• nominate another person to exercise your rights in case of death or incapacity;
• have your grievance addressed by us, and if not resolved, complain to the Data Protection Board of India.

Write to the Grievance Officer at [email protected] with your name and the mobile number used for your orders. We will respond within the time required by law, and in any case within 30 days. See also our Grievance Redressal page.

9. Children

This website is meant for adults. We do not knowingly collect data from children under 18. If you believe a child has given us personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy. The latest version is always on this page with its “last updated” date. If we make a significant change to how we use your data, we will tell you before it applies.