Privacy Policy
Privacy Policy
|
Plain-language summary: Aromalizz LLP uses the information needed to operate its website, fulfil orders, provide support, prevent misuse and send marketing only where permitted. We do not sell personal data. You may contact us to access, correct, update or erase eligible personal data, withdraw consent, or raise a grievance. |
1. About this Privacy Policy
This Privacy Policy explains how Aromalizz LLP ("Aromalizz", "we", "us" or "our") collects, uses, stores, shares and protects personal data when you visit our website, create an account, place an order, contact us, subscribe to communications, or otherwise interact with us.
For personal data processed through our website and direct customer operations, Aromalizz LLP acts as the Data Fiduciary. By using the website, you acknowledge this Policy. Where consent is the lawful basis for processing, we will request a clear affirmative indication and you may withdraw it as described below.
2. Personal Data We May Collect
Information you provide
Identity and contact details, such as your name, mobile number, email address and billing or delivery address.
Account details, such as login identifiers and account preferences. Passwords should be stored only in protected or hashed form.
Order and transaction details, including products purchased, order value, payment status, invoices, returns, refunds and delivery information.
Communications, including enquiries, complaints, product reviews, feedback and support conversations.
Marketing preferences, including whether you wish to receive promotional messages.
Information collected automatically
Device and technical data, such as IP address, browser type, device type, operating system and approximate location inferred from IP address.
Website activity, such as pages viewed, links clicked, referring pages, session times and cart activity.
Cookie and similar-technology data used for essential site functions, preferences, security, analytics and, where enabled with appropriate choice, advertising.
We do not intentionally collect payment card numbers, UPI PINs or banking passwords. Payments should be processed by the payment gateway selected at checkout, subject to that provider's privacy and security practices.
3. Why We Process Personal Data
To create and manage accounts, carts and wish lists, where these features are offered.
To accept, verify, process, deliver, track, cancel, return or refund orders.
To send transactional communications, including order confirmations, invoices, delivery updates, service notices and responses to enquiries.
To provide customer support and resolve complaints or disputes.
To maintain website security, detect fraud, prevent misuse, debug errors and protect our customers and business.
To understand website performance and improve products, content, usability and customer experience.
To send offers, launches or brand updates where you have consented or where otherwise permitted by law; you may opt out at any time.
To comply with tax, accounting, consumer-protection, legal, regulatory and law-enforcement obligations, and to establish or defend legal claims.
We seek to collect only personal data reasonably necessary for the stated purpose. We do not use personal data for a materially unrelated purpose without providing appropriate notice and obtaining consent where required.
4. Consent and Permitted Processing
We process personal data with your consent where required, including for optional marketing or non-essential cookies. We may also process personal data for uses permitted without separate consent under applicable law, such as responding to information you voluntarily provide for a specified purpose, fulfilling legal obligations, complying with court or government orders, and handling emergencies where applicable.
Withdrawing consent does not affect processing already lawfully completed. It may prevent us from offering a feature that genuinely requires the relevant data; it will not ordinarily affect an order already placed where processing remains necessary to complete it or comply with law.
5. Cookies and Similar Technologies
Our website may use cookies, pixels, local storage and similar technologies. Essential cookies support functions such as security, cart operation, checkout and session management. Preference cookies remember choices. Analytics cookies help us understand usage. Advertising cookies, if used, may measure campaigns or personalise advertising.
Where required, non-essential cookies will be used only after an appropriate choice is provided. You can change cookie preferences through the website's consent tool, if available, or through your browser settings. Blocking essential cookies may cause parts of the website to stop working.
6. When We Share Personal Data
We may share only the data reasonably required with:
Payment gateways and banking partners to process payments, refunds and payment-risk checks.
Courier, logistics, warehousing and delivery partners to fulfil and track orders.
Website hosting, cloud, analytics, communications, customer-support, security and technology providers acting on our instructions.
Professional advisers, auditors, insurers and government authorities where necessary for compliance, claims or lawful requests.
A successor or transaction counterparty in a merger, restructuring, financing, acquisition or transfer of business, subject to appropriate safeguards.
We do not sell personal data. Service providers are expected to process personal data only for authorised purposes and to apply reasonable security measures. Third-party websites and services have their own privacy policies, which we do not control.
7. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, support, fraud prevention, record keeping, legal compliance and dispute resolution. Different records may have different retention periods. Transaction, invoice and tax records may be kept for the period required under applicable law.
When consent is withdrawn, the purpose is completed, or retention is no longer necessary, we will erase or anonymise eligible personal data unless retention is required by law or needed for a legal claim, security investigation or other lawful purpose. Backup copies may remain for a limited cycle before secure deletion.
8. Security
We use reasonable technical and organisational safeguards appropriate to the nature of the data and the risks involved. These may include access controls, secure configurations, encryption in transit where supported, logging, backups, service-provider controls and internal access restrictions. No website, transmission or storage system is completely secure; we therefore cannot promise absolute security.
If a personal data breach occurs, we will take reasonable containment and remediation steps and provide notifications to affected individuals and the Data Protection Board of India where and when required by applicable law.
9. Your Rights and Choices
Subject to applicable law and verification of your identity, you may request:
A summary of personal data being processed and the processing activities concerning you.
The identities or categories of other Data Fiduciaries and processors with whom your personal data has been shared, where disclosure is required.
Correction of inaccurate or misleading personal data, completion of incomplete data, and updating of outdated data.
Erasure of personal data that is no longer necessary, unless retention is legally required or otherwise permitted.
Withdrawal of consent for future processing based on consent.
Grievance redressal and, where applicable, nomination of another individual to exercise your rights in the event of death or incapacity.
To exercise a right, contact us using Section 15. We may ask for information necessary to verify your identity and locate the relevant records. We will respond within the period required by applicable law. You should provide authentic information and must not impersonate another person or submit a false or frivolous grievance.
10. Marketing Communications
You may opt out of promotional email or SMS communications using the unsubscribe method in the message, where available, or by contacting us. You may still receive non-promotional messages necessary for an order, account, security matter, legal notice or customer-service request.
11. Children's Personal Data
Our website and products are intended for adults and are not directed to children. We do not knowingly process a child's personal data for creating an account or placing an order without verifiable consent from a parent or lawful guardian where required. If you believe a child has provided personal data improperly, contact us so that we can review and take appropriate action.
12. Data Processing Outside India
Some technology or service providers may process or store personal data outside India. Where this occurs, we will take reasonable steps to use providers offering appropriate safeguards and will comply with restrictions or requirements notified under applicable Indian law.
13. Third-Party Links
The website may link to payment providers, delivery partners, social platforms or other third-party services. Their handling of personal data is governed by their own terms and privacy policies. Review those policies before providing personal data to them.
14. Changes to this Policy
We may update this Policy to reflect changes in our website, business practices, service providers or law. The revised version will show a new last-updated date. If a change materially affects how we use personal data, we will provide an appropriate notice and obtain fresh consent where required.
15. Grievance Officer and Contact
For privacy questions, rights requests, consent withdrawal or grievances, contact:
Grievance Officer / Privacy Contact
Aromalizz LLP
H/No 005, Unity Village
Dimapur, Nagaland - 797112, India
Phone: +91 6009112288
Please state that your request concerns privacy, describe the issue, and provide sufficient details to identify your account or order. If you are not satisfied with our response after using this grievance process, you may approach the Data Protection Board of India when the applicable complaint mechanism is operational and available to you.
16. Governing Framework
This Policy is intended to operate consistently with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their relevant provisions come into force, together with other applicable information-technology, consumer-protection, tax and e-commerce requirements.
Official references: Digital Personal Data Protection Act, 2023; Digital Personal Data Protection Rules, 2025