Privacy Policy

Seller/legal name: Smiley Beauty

GSTIN: To be added when applicable.

Registered/support address: No 7/3 Richmond Town, Serpentine Street, Richmond Town, Bangalore, Karnataka 560025, India

Support email: support@smileybeauty.in

Phone/WhatsApp: +91 88612 21497

We collect the information needed to run the store, including your name, email address, phone number, shipping address, account details, order history, wishlist/cart activity, support messages, and delivery updates.

When you create an account, we receive your email address from the sign-in method you choose. For Google sign-in, we also receive the name on your Google account. Firebase Authentication assigns your account a unique identifier, which we use to link your profile, cart, wishlist, and orders.

For online payments, Razorpay processes payment details such as card, UPI, wallet, or net banking information. Smiley Beauty does not store full card numbers, UPI PINs, CVV, net banking passwords, or other sensitive payment credentials.

We may collect device, browser, IP address, cookie, and usage data to keep the website secure, remember preferences, analyze performance, and improve the shopping experience. We use SyncoraAI analytics on public store pages to understand page views, clicks, form interactions, scroll depth, and time spent on the website. We use the Google Ads tag to measure the performance of our advertising, and an AskMyBot chat widget to answer shopping questions. Information you type into the chat widget is processed by that provider.

We use your information to create and manage accounts, process orders, verify payments, arrange shipping, send order updates, handle returns and refunds, respond to support requests, prevent fraud, and comply with legal or tax obligations.

We may send service messages about orders, payments, deliveries, account activity, refunds, or policy changes. Marketing messages are sent only where permitted and can be opted out of by contacting support.

We use access controls, secure hosting, encrypted transport, and limited staff/admin access to protect personal information. No internet service can be guaranteed completely secure, but we work to reduce risk and respond promptly to suspected issues.

Order, payment, invoice, shipping, refund, and return records are retained for as long as applicable tax, accounting, consumer-protection, and other laws require, and as needed to resolve disputes and prevent fraud. This applies even after you delete your account. When an account is deleted, these records are detached from it, your email address is removed from them, they are no longer shown in any customer account, and they are not used for marketing. The name, phone number, and delivery address on each order are kept as part of delivery, refund, and tax records, so retained orders are still personal data and are protected accordingly.

Account data such as your profile, saved address, cart, and wishlist is kept while your account is active and deleted when you delete your account. Limited security and server logs are kept for the period applicable law requires.

You can download a copy of the personal data linked to your account from My Account under Privacy & Data, by selecting Export My Data. We ask you to confirm your identity by signing in again first. The download is a JSON file that includes your profile, saved address, orders and order items, payment status and payment references, refunds, returns, shipment tracking, cart, wishlist, contact-form messages sent from your verified email, and a summary of how we use your data and who receives it.

The export does not include full card, UPI, or bank details (Razorpay processes these and we never receive them), sign-in tokens or other security information, internal fraud, risk, stock, and seller-financial records, items saved only in your browser while signed out, or data held by other companies such as Razorpay, Shiprocket, or couriers. You can export up to 3 times in 24 hours. The file is created when you request it and sent only to you; we do not store a copy for download.

This self-service export is offered for your convenience. It includes more than the summary of personal data provided for under the Digital Personal Data Protection Act, 2023. If you cannot sign in, or need information the export does not cover, email us as described under Your Privacy Rights.

You can delete your account yourself from My Account. Before deletion, we ask you to confirm your identity by signing in again. Deletion removes your profile, saved address, cart, wishlist, sign-in, and the contact-form messages linked to your verified email, removes your email address from past orders and our internal stock records, and signs you out. Retained order records are handled as described under Data Security and Retention.

If an order, return, or refund is still in progress, you can delete your account once it is complete. Deletion usually completes immediately; if a step fails, we retry it automatically. Deletion is permanent once it is complete, and we cannot export your data afterwards, so download a copy first if you want one. See how account deletion works for step-by-step instructions.

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023 as it comes into force, you may ask for a summary of the personal data we process about you, ask us to correct, complete, update, or erase it, withdraw consent you have given, nominate another person to exercise your rights if you die or become incapable, and raise a grievance with us. Withdrawing consent does not affect processing that took place before withdrawal. We may not be able to provide some services, such as order fulfilment, without the necessary information. Most of the Act's rights and duties are scheduled to take effect in May 2027; we already offer the requests described here.

To make a request, use Export My Data or delete your account from My Account, or email support@smileybeauty.in, from your registered email address if possible, with a subject such as “Data Deletion Request” or “Data Access Request.” If you cannot sign in, email us and we will help.

We may ask for an order ID, phone number, or other information to verify your identity before acting on a request. After verification, we aim to complete emailed account deletion, data access, and correction requests within 15 business days, except for records that must be retained for legal, tax, payment, fraud prevention, dispute, or shipping compliance reasons. If you are not satisfied with our response to a grievance, you may have the right to complain to the Data Protection Board of India once the relevant provisions are in force.

We sell and deliver only within India. If you contact us from another country, we will handle your request as required by the laws that apply to us.

If you only want to stop marketing communication, email support with the subject “Unsubscribe.” Transactional order and account messages may still be sent where necessary.

Grievance contact: Customer Support Manager, Smiley Beauty

Email: support@smileybeauty.in

Phone/WhatsApp: +91 88612 21497

We aim to acknowledge privacy or grievance requests within 48 business hours and provide a resolution or next update within 15 business days.