Last Updated: July 2026 | Compliant with DPDPA 2023

The Rovelle Beauty website is owned by ROVELLE BEAUTY, which acts as the Data Fiduciary (Data Controller) of your personal data. We have adopted this Privacy Policy to determine how we process the information collected by Rovelle Beauty and to explain the reasons why we must collect certain personal data about you. Please read this Privacy Policy before using the Rovelle Beauty website.

We take the protection of your personal data seriously and undertake to guarantee its confidentiality and security in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA).

1. Personal Information We Collect

Then you visit Rovelle Beauty, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as "Device Information."

Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, email, phone number, and payment information) during registration or checkout to be able to fulfill our agreement with you.

2. Purpose of Processing and Consent

Our top priority is customer data security, and we process only minimal user data-only as much as is absolutely necessary to maintain the website, fulfill your orders, and comply with legal obligations. We process your data based on your explicit and informed consent, or for legitimate uses such as fulfilling a contract (e.g., shipping your order).

You can visit the website without revealing who you are. However, to use certain features like purchasing products or receiving newsletters, personal data is required. You may choose not to provide your personal data, but this may restrict your ability to use our services. You have the right to withdraw your consent at any time by contacting our Grievance Officer.

3. Payment Processing & Third-Party Sharing

• Razorpay Secure Payments: We use Razorpay for processing payments. We and Razorpay do not store your card data on our servers. Your payment data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) when processing transactions. Your purchase transaction data is only used as long as is necessary to complete your purchase transaction.

We may share your Personal Information with third parties to help us use your Personal Information, as described above (such as shipping partners). We ensure that all third-party service providers are contractually obligated to protect your data in compliance with applicable laws.

4. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, tax or accounting laws), resolve disputes, and enforce our legal agreements and policies.

5. Your Rights (Under DPDPA 2023)

If you are a resident of India, you are guaranteed the following rights regarding your personal data under the Digital Personal Data Protection Act, 2023:

• Right to Access/Information: You have the right to request a summary of your personal data being processed by us and the identities of all third parties with whom it has been shared.

• Right to Correction & Erasure: You can request us to correct inaccurate or misleading personal data, complete incomplete data, or erase your personal data when it is no longer necessary for the purpose it was collected.

• Right to Grievance Redressal: You have the right to readily available means of grievance redressal provided by us.

• Right to Nominate: You have the right to nominate any other individual to exercise your rights on your behalf in the event of your death or incapacity.

6. Information Security

We secure the information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards in place. However, no data transmission over the Internet or wireless network can be guaranteed to be 100% secure.

7. Legal Disclosure

We will disclose any information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

8. Grievance Officer and Contact Information

In accordance with the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are provided below. If you have any questions about this policy, wish to exercise your rights, or want to register a complaint, please contact:

• Email: nandinipatel13104@gmail.com

• Entity: ROVELLE BEAUTY