Privacy Policy

Information you provide directly:

• Account registration: name, email address, phone number, password
• Order placement: billing and shipping address, GST number (optional), payment method
• Profile updates: company name, business type
• Communications: messages sent via the contact form, email, or support channels
• Reviews and feedback: ratings, review text, and your public name
• Newsletter subscription: email address

Information collected automatically:

• Log data: IP address, browser type, pages visited, time and date of visit
• Device information: device type, operating system
• Cookie data: session identifiers, preferences (see Cookies section)
• Recently viewed products: stored per session to improve your browsing experience

We use the information we collect to:

• Process and fulfil your orders, including sending order confirmations and shipping updates
• Maintain and manage your account
• Apply correct pricing based on your customer tier (retail, wholesale, or dealer)
• Respond to your enquiries, complaints, and support requests
• Send transactional emails (order confirmation, shipping, cancellation)
• Send marketing emails if you have subscribed — you can unsubscribe at any time
• Improve our website, products, and customer experience
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations, including GST invoicing requirements

We do not use automated decision-making or profiling that produces legal or significant effects on you.

We do not sell, trade, or rent your personal information. We may share your information with:

• Logistics partners: shipping carriers receive your name and delivery address to fulfil your order
• Payment processors: Razorpay and banking partners process payment data under their own privacy policies
• Email service providers: used to send transactional and marketing emails on our behalf
• Analytics providers: anonymised usage data to help us understand site performance
• Legal authorities: if required by law, court order, or to protect the rights and safety of our users or the public

All third-party service providers are required to maintain the confidentiality of your information and are prohibited from using it for any other purpose.

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your cart contents between visits
• Store your recently viewed products
• Analyse site traffic and usage patterns

Types of cookies we use:

• Essential cookies: required for the site to function (session, cart). Cannot be disabled.
• Analytics cookies: help us understand how visitors use the site. You can opt out via your browser settings.

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality such as staying logged in or maintaining your cart.

We implement industry-standard security measures to protect your personal information:

• All passwords are hashed using bcrypt — we never store plain-text passwords
• SSL/TLS encryption for all data transmitted between your browser and our servers
• CSRF protection on all forms and data-modifying requests
• Prepared statements for all database queries to prevent SQL injection
• File upload restrictions to prevent malicious file execution
• Regular security reviews of our codebase and infrastructure

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected:

• Account data: retained while your account is active. You may request deletion at any time.
• Order records: retained for 7 years to comply with Indian GST and accounting regulations.
• Email communications: retained for 2 years for customer support purposes.
• Session data: expires after 30 days of inactivity.
• Newsletter subscriptions: retained until you unsubscribe.

When data is no longer needed, it is securely deleted or anonymised.

Under applicable Indian privacy laws, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: update or correct inaccurate data via your account profile or by contacting us
• Deletion: request deletion of your account and personal data (subject to legal retention requirements)
• Portability: receive your data in a structured, commonly used format
• Opt-out: unsubscribe from marketing emails at any time via the unsubscribe link or account settings
• Complaint: lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at hello@scentcraft.in. We will respond within 30 days.

Our site is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at hello@scentcraft.in and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via email or a prominent notice on our site. We encourage you to review this policy periodically.

Your continued use of the site after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: hello@scentcraft.in
• Address: Mumbai, Maharashtra, India

We will acknowledge your request within 3 business days and aim to resolve it within 30 days.