This Privacy Policy explains how Demorr (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you use demorr.in (the “Platform”), contact us or buy from us. It has been prepared with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its Rules, the Information Technology Act, 2000 and the rules under it, and the Consumer Protection (E-Commerce) Rules, 2020.

Who We Are

Demorr is a hair care brand based in Amritsar, Punjab. For the personal data described in this Policy, Demorr is the “Data Fiduciary”, which means we decide why and how your data is used. Our address is RM Bay, Plot No 1, Batala Road, Street No.4, Vijay Nagar, Amritsar, Punjab (143001), India, and you can reach us at spsbeautylabs23@gmail.com.

What Personal Data We Collect

Information you give us

• Contact details: your name, email address and phone number.
• Delivery and billing details: addresses and PIN code.
• Order details: what you bought, order history, and the type of payment method used. We do not store your full card number, CVV or net banking password; payments are handled by our payment partners.
• Account details: your login details and saved preferences.
• Messages and feedback: emails, support requests, reviews and survey answers.

Information collected automatically

• Device and technical data: IP address, browser type, device type and operating system.
• Usage data: pages you view, products you look at, items in your cart and how long you stay.
• Approximate location: estimated from your IP address.

Information from others

• Delivery status from courier partners and payment confirmation from payment partners.

Why We Use Your Data and On What Basis

Purpose	Basis
Process and deliver your orders, handle returns and refunds, issue invoices	Needed to carry out the sale and meet legal duties
Create and manage your account, verify your identity, provide support	Your consent and the service you asked for
Send offers, product news and updates by email, SMS or WhatsApp	Your consent, which you can withdraw at any time
Improve the Platform and our products, using analytics in aggregated form	Your consent for non-essential cookies; legitimate use otherwise
Prevent fraud, keep the Platform secure	Legitimate use and legal obligation
Keep tax and accounting records, respond to lawful requests	Legal obligation

We use your data only for these purposes. If we want to use it for something new, we will tell you and ask for your consent where the law requires it.

Cookies

We use cookies and similar technologies to keep your cart working, remember you when you log in, and understand how the Platform is used. Please read our Cookie Policy for details and for how to manage your choices.

Who We Share Your Data With

We do not sell your personal data. We share it only where needed, and only with:

• Courier and logistics partners to deliver your orders and handle returns;
• Payment partners to process payments and prevent fraud;
• Technology, hosting and email providers that run the Platform for us;
• Analytics and marketing service providers for measuring and improving our services, where you have agreed to this;
• Professional advisers and auditors who are bound by confidentiality; and
• Government authorities, courts or law enforcement when the law requires us to.

We ask these providers to protect your data and to use it only for the services they perform for us.

How We Protect Your Data

We use reasonable security measures, including encrypted connections (HTTPS), restricted access to personal data, secure payment handling through our payment partners, regular backups and software updates. No online system can be perfectly secure, but if a data breach affects you, we will inform you and the authorities as required by law.

Stay safe: we will never ask for your password, OTP, full card number, CVV or PIN by phone, email or chat.

How Long We Keep Your Data

We keep personal data only as long as we need it for the purposes described above or as the law requires. For example, order and invoice records are kept for the period required under tax and accounting laws, and marketing contact details are kept until you withdraw your consent. When we no longer need data, we delete it or make it non-identifiable.

Your Rights

Under the DPDP Act, 2023 you have the right to:

• Access a summary of the personal data we hold about you and how it is used;
• Correct or update data that is inaccurate or incomplete, and ask us to erase data we no longer need to keep;
• Withdraw consent at any time, without affecting the use of your data before you withdrew it;
• Unsubscribe from marketing messages using the link in the message or by writing to us (service messages about your orders will continue);
• Raise a grievance about how we handle your data; and
• Nominate another person to exercise your rights if you die or cannot do so yourself.

To use any of these rights, email spsbeautylabs23@gmail.com with the subject line “Data Request” and tell us your name and the email address or phone number linked to your account. We may need to verify your identity first. We will acknowledge your request within 48 hours and respond within 30 days.

Children

The Platform is not meant for children under 18, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we will delete it.

Third-Party Links

The Platform may link to other websites, social media pages or payment pages. This Policy does not cover them, so please read their privacy policies.

Grievance Officer

If you have a concern about your personal data or this Policy, you can write to our Grievance Officer at spsbeautylabs23@gmail.com (subject: “Privacy Grievance”) or by post at RM Bay, Plot No 1, Batala Road, Street No.4, Vijay Nagar, Amritsar, Punjab (143001), India. We acknowledge complaints within 48 hours and aim to resolve them within one month. If you are not satisfied, you may approach the Data Protection Board of India once it is in operation, or the appropriate consumer forum or court.

Changes to This Policy

We may update this Policy from time to time. The latest version will always be on this page with its effective date. If we make an important change, we will tell you through the Platform or by email, and ask for fresh consent where the law requires it.

Governing Law

This Policy is governed by the laws of India, and disputes are subject to the courts at Amritsar, Punjab, without affecting any right you have under the DPDP Act or consumer protection law.

Contact Us

spsbeautylabs23@gmail.com · RM Bay, Plot No 1, Batala Road, Street No.4, Vijay Nagar, Amritsar, Punjab (143001), India.