Privacy Policy

1. Introduction & Overview

Welcome to Meoora (“we”, “our”, or “us”). We are committed to safeguarding your personal information and respecting your privacy rights. This Privacy Policy outlines our data collection, processing, and storage practices in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

2. Information We Collect

We collect only information necessary to deliver exceptional skincare formulations and seamless customer service:

• Contact Information: Full name, delivery address, postal PIN code, contact phone number, and email address.
• Account Credentials: Secure, passwordless authentication credentials via One-Time Passwords (OTP).
• Order & Transaction Data: Products purchased, variant selections, transaction tokens, and delivery preferences. Note: We never store your complete credit card numbers, debit card PINs, or UPI MPINs. All payment transactions are encrypted and processed by RBI-licensed payment aggregators (e.g., Razorpay).
• Skincare Preferences: Skin type profile data provided voluntarily to personalize routine recommendations.
• Device & Usage Data: IP address, browser type, device identifiers, and browsing activity collected via cookies to enhance performance.

3. How We Use Your Information

• To process, fulfill, and track your e-commerce orders via our logistics partners (e.g., Shiprocket, BlueDart, Delhivery).
• To send essential transactional notifications, including order receipts, shipping tracking links, and delivery confirmations.
• To synchronize your shopping bag, saved addresses (up to 3 saved locations), and wishlist across your devices.
• To prevent fraudulent payments, unverified COD orders, and unauthorized access.
• With your explicit consent, to share botanical beauty updates, product launches, and exclusive member discounts.

4. Information Sharing & Third Parties

We do not sell, rent, or trade your personal data. We disclose your information strictly to trusted third-party service providers essential for business operations:

• Payment Aggregators: Razorpay Software Private Limited for encrypted payment capture.
• Logistics Partners: Shiprocket (BigFoot Retail Solutions Pvt. Ltd.) and integrated national courier services for doorstep delivery and COD verification.
• Transactional Messaging: Brevo / transactional SMTP servers for order confirmation emails.
• Legal Obligations: Law enforcement or judicial authorities when required under Indian law.

5. Data Retention & Security

Your personal data is encrypted in transit using Transport Layer Security (TLS 1.3) and stored in secure database environments. We retain transaction and customer records only as long as required to fulfill legal, tax, accounting, and consumer protection obligations under Indian law.

6. Your Rights

Under the DPDP Act 2023, you have the right to access, review, correct, or request deletion of your personal data. You may update your profile and saved addresses directly through your Account Dashboard, or contact our Data Grievance Officer.

7. Grievance Redressal & Contact

In accordance with the Information Technology Act 2000 and rules made thereunder, the contact details of our Grievance Officer are: