Privacy Policy

This Privacy Policy describes how Hyluminix Infosystems Private Limited (CIN: U62091MP2024PTC073760), trading as Grace("we", "us", or "our"), collects, uses, shares, and protects personal information when you visit or make a purchase from graceskin.in(the "Site").

By using this Site, you agree to the terms of this Privacy Policy. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.

1. Information We Collect

• Order information: Name, shipping address, billing address, phone number, email address, and payment confirmation details when you place an order.
• Device and log information: IP address, browser type, pages visited, and referral URL, collected automatically via cookies and server logs.
• Communications: Messages you send us via WhatsApp or email for customer support.

We do not store your UPI handle, card numbers, or banking credentials on our servers. Payment processing is handled by third-party payment processors.

2. How We Use Your Information

• To process and fulfil your orders and send delivery updates.
• To communicate with you about your order, returns, or support queries.
• To improve our Site, products, and services.
• To comply with legal obligations, including tax and accounting requirements.
• To send you marketing communications, if you have opted in (you may unsubscribe at any time).

3. Sharing Your Information

We share personal data only where necessary:

• Logistics partners (e.g., Shiprocket, Delhivery) — to deliver your order.
• Payment processors — to process transactions securely.
• Government or regulatory authorities — when required by law.

We do not sell or rent your personal data to any third party.

4. Cookies

We use essential cookies to operate the Site (e.g., session management) and analytics cookies to understand how visitors use the Site. You can disable cookies in your browser settings, though some Site features may not function correctly.

5. Data Retention

We retain your order data for up to 7 years as required under Indian accounting and tax laws. Support communications are retained for 2 years.

6. Your Rights

Under the DPDP Act 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data (subject to legal retention obligations).
• Withdraw consent for marketing communications at any time.
• Lodge a grievance with our Data Protection Officer (details below).

To exercise any of these rights, contact us at support@graceskin.in.

7. Security

We implement industry-standard security measures including HTTPS encryption for all data in transit. However, no method of electronic storage or transmission is 100% secure. We will notify you of any breach that materially affects your data as required by law.

8. Third-Party Links

Our Site may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

9. Children's Privacy

Our Site is not directed at children under 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated "Last updated" date.

11. Contact / Grievance Officer

For any privacy-related queries or to exercise your rights, contact our Grievance Officer:

• Company: Hyluminix Infosystems Private Limited
• Address: A-12, E-8 Extension, Near Shweta Mandir, Gulmohar, Venkatesh Nagar, Bhopal, Madhya Pradesh — 462010, India
• Email: support@graceskin.in
• Phone: +91 92430 77840