Privacy policy
This Privacy Policy outlines Nykaa E-Retail Limited’s approach to Data Protection and Privacy to fulfil its obligations under the applicable laws and regulations. This Privacy Policy applies to your Personal Information which is processed by us, whether in physical or electronic mode.
While you may be able to browse and access the Website from countries outside of India, however, please note we do not offer any product/service under this Website outside India. By accessing the Website or submitting your information, you affirm that you agree to this Privacy Policy and accept that you are governed by the applicable laws of India, including those concerning data protection and privacy.. If you do not agree please do not use or access our Website.
We are committed to treating data privacy seriously. It is important that you know exactly what we do with your Personal Information.
WHO WE ARE
This Website and the brand Wanderlust is owned and operated by Nykaa E-Retail Limited (Nykaa) having its principal place of business in India. Nykaa is a company incorporated and registered under the provisions of the Companies Act, 2013 and having its registered office 104, Vasan Udyog Bhavan, Sun Mill Compound, Lower Parel, Mumbai 400 013. Wanderlust is engaged in the business of facilitating selling, marketing, and retailing through the beauty/cosmetics (“Business”) through the e-commerce website developed and owned by Nykaa and its affiliates or offline stores / events to conduct its Business.
Throughout this document, “we”, “us”, “our”, “ours”, “Nykaa”, “Wanderlust” refers to Nykaa E-Retail Limited. Wherever we have said ‘you’ or ‘your’ or ‘Customer’, this means YOU (a user of the website).
OUR COMMITMENT
We commit to protecting your privacy and hence our Personal Information handling practices are continually reviewed to ensure compliance with applicable laws & regulations.
PERSONAL INFORMATION GATHERED
The information we learn and gather from you, personal or otherwise, is used to register you, verify your identity to permit you to use the Website, undertake transactions (including to facilitate and process payments), communicate with you, convey any promotional offers, services or updates associated with Wanderlust, and generally maintain your accounts with us. Further, we also use this information to customize your experience and improve Wanderlust.
Information You Give Us:
We receive and store any information you provide while using the website or give us in any other way. You can choose not to provide certain information, but then you might not be able to use certain features or services on our website. We use the information that you provide for such purposes as opening your account, processing your transactions, responding to your requests, and communicating with you.
Information We Collect About You:
We receive and store certain types of information whenever you interact with us. For example, like many websites, we use “cookies,” and we obtain certain types of information when your web browser accesses our Services. We may also receive/store information about your location and your mobile device, including a unique identifier for your device. We may use this information for internal analysis and provide you with location-based services, such as advertising, search results, and other personalized content.
Information From Other Sources:
We may receive information about you from other sources, including publicly available databases, marketing partners, and other third parties incl. Payment Gateways. This information helps us to understand your preferences, improve the relevance of our communications, and personalize your experience. For example, we may use this data to correct and update our records, verify information you've provided, and make your next purchase and delivery experience more efficient.
CATEGORIES OF PERSONAL INFORMATION
Categories of Personal Information collected and processed by us are as follows:
Demographic & Identity data
● Contact details such as name, email address, contact number, shipping address, country, date of birth, and profile picture.
● Open data and public records such as information about YOU that is openly available on the internet.
● Details such as Transaction amount, bank name, card number, and card type.
Online Identifiers and other Technical Data
● Location details such as data we get about your location, IP address, logs, or from where you connect a computer to the internet.
● Technical details such as device information, location, and network carrier when you use our website from a mobile device.
● Communication details such as the Metadata and other Personal Information we get from communications done through e-mails, SMS, instant messages, and calls.
● Usage data details such as data about how you use our website or web-based properties, pages viewed, etc.
CONSENT
By using the Website and/or providing your information, you confirm your free, specific, informed, unconditional, and unambiguous consent to our collection, storage, processing, transfer, use, and sharing of your personal information (including sensitive personal information as defined under applicable law) with third parties or service providers, strictly for the purposes stated and in accordance with this Privacy Policy.
PURPOSES OF GATHERING YOUR PERSONAL INFORMATION
We use your personal information to operate, provide, develop, and improve the products and services. These purposes include:
Purchase and Delivery of Products and Services
● We use your personal information to take and handle orders, deliver products and services, process payments, and communicate with you about orders, products and services, and promotional offers.
● Lawful basis, for processing your personal data, relied for the above-mentioned purpose here is consent.
Provide, Troubleshoot and Improve Wanderlust
● We use your personal information to provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of our Website.
● Lawful basis, for processing your personal data, relied for the above-mentioned purpose here is legitimate use.
Recommendations and Personalization
● We use your personal information to recommend features, products, and services that might be of interest to you, identify your preferences, and personalize your experience with us.
● Lawful basis, for processing your personal data, relied for the above-mentioned purpose here is consent.
Communication With You
● We use your personal information to communicate with you in relation to Wanderlust via different channels (e.g., by phone, e-mail, chat).
● Lawful basis, for processing your personal data, relied for the above-mentioned purpose here is consent.
Advertising
● We use your personal information to display interest-based ads for features, products, and services that might be of interest to you.
● Lawful basis, for processing your personal data, relied for the above-mentioned purpose here is consent.
We will not use your personal information for any new or additional purposes without first obtaining your fresh, informed consent for such purposes.
COOKIES AND OTHER TRACKERS USED BY OUR DIGITAL PROPERTIES
Cookies are small text files that are placed on your computer by websites that you visit. Similarly, there are other types of trackers used. Likewise, Mobile Apps use requisite permissions and SDKs. These are used to make websites & apps work, or work more efficiently, as well as to provide information to the owners of the website/app.
Depending upon the jurisdiction from where you might be accessing our Platform and as per applicable laws you may be served different types of cookies such as strictly necessary cookies, performance cookies etc. We use cookies, permissions and other trackers on our Platform to collect and process data so as to provide you a better online experience as well as improve our services.
For more information about cookies, and how to disable them, visit https://www.allaboutcookies.org.
Below are the categories of cookies used on our website along with a description of what they are used for:
Strictly Necessary
These cookies are needed to run our website, to keep it secure if you are logged on and to obey regulations that apply to us.
If you are a customer, they help us know who you are so that you can log on and manage your accounts. They also help us keep your details safe and private.
Functional
These cookies are used for remembering things like:
● Your user ID on the log on page
● Your region or country
● Your preferred language
● Accessibility options like large font or high contrast pages
Performance
These cookies tell us how you and our other customers use our website. We combine all this data together and study it. This helps us to:
● Improve the performance of our services
● Improve the products we provide
Most web browsers allow some control of most cookies through the browser settings. Please note disabling the ‘Strictly Necessary’ cookies may cause certain parts of our website to remain inaccessible to you.
We use other tracking mechanisms in addition to the above
● Pixel Tags
● Log Files
● Clickstream analytics
ADVERTISING
We use your personal information to display interest-based ads for features, products, and services that might be of interest to you and are designed targeting your preferences.
DO NOT TRACK
Some web browsers have a “Do Not Track” feature. This feature lets you tell websites you visit that you do not want to have your online activity tracked. These features are not yet uniform across browsers. Our sites are not currently set up to respond to those signals.
PERSONAL INFORMATION DISCLOSURE
Links to the Privacy Policies of some of the third-party service providers (list attached is not exhaustive in nature) used by our application are given below:
● Judge.me
● Razorpay
● Bluedart
● Shopify
We may disclose your information to third parties service providers, and you hereby consent to such disclosure. We have appropriate contracts in place, including but not limited to Data Processing Agreements, with our third-party partners. This means that they cannot do anything with your Personal Information which is outside of the scope permitted by us.
We might also disclose your Personal Information to appropriate authorities if we believe that it is reasonably necessary to comply with a law, regulation, legal process, to protect the safety of any person, to address fraud, security, or technical issues, or to protect our rights or the rights of those who use our products & services.
Reasons for disclosing your Personal Information to other parties:
We may disclose your Personal Information to others where it is lawful to do so including where we or they:
● need to provide you with products or services
● where you have initiated a payment
● have a legal obligation to do so, e.g., to assist with detecting and preventing fraud,
● have requirement in connection with regulatory reporting, litigation or asserting or defending legal rights and interests
● have a legitimate business reason for doing so
● want to send you information and promotional material regarding our products and services,
● have asked you for your consent to share it, and you’ve agreed
● Improve your online experience for using our product.
Disclosure to other third parties:
We may disclose your Personal Information for the above purposes to other parties including:
● Other group companies and any subcontractors, agents or service providers who work for us or provide services to us or group companies (including their employees, sub-contractors, service providers, directors, and officers)
● Law Enforcement Authorities, Government Authorities, courts, dispute resolution bodies, our regulators, auditors, and any party appointed or requested by our regulators to carry out investigations or audits of our activities
● Statutory and regulatory bodies and authorities (including the government) investigating agencies and entities or persons, to whom or before whom it is mandatory to disclose the Personal Information as per the applicable law, courts, judicial and quasi-judicial authorities and tribunals, arbitrators, and arbitration tribunals
● Overseas regulators
● Anybody else that we’ve been instructed to share your Personal Information with by you
CROSS-BORDER DATA TRANSFER
Personal Information we hold about you may be transferred to other countries outside your residential country for any of the purposes described in this Privacy Policy.
You understand and accept that these countries may have differing (and potentially less stringent) laws relating to the degree of confidentiality afforded to the information it holds and that such information can become subject to the laws and disclosure requirements of such countries, including disclosure to governmental bodies, regulatory agencies and private persons, as a result of applicable governmental or regulatory inquiry, court order or other similar process. In addition, a number of countries have agreements with other countries providing for exchange of information for law enforcement, tax and other purposes.
If we transfer your Personal Information to third parties for purposes stated in this Privacy Policy, we will use best endeavors to put in place appropriate controls and safeguards to ensure that your Personal Information is kept accurate, adequately protected, and processed only for specified and reasonable purposes in a manner that is fair, transparent and has a lawful basis, and is stored for no longer than is absolutely necessary.
DATA SECURITY
We are committed to protecting your Personal Information in our custody. We take reasonable steps to ensure appropriate physical, technical and managerial safeguards are in place to protect your Personal Information from unauthorized access, alteration, transmission and deletion. We ensure that the third parties who provide services to us under appropriate contracts, take appropriate security measures to protect your Personal Information in line with our policies.
RETENTION AND DISPOSAL OF DATA
We keep the Personal Information we collect about you on our systems or with third parties for as long as it is required for the purposes set out in this Privacy Policy and for legal or regulatory reasons. We will only use your Personal Information for those purposes and will make sure that your Privacy is protected. We shall take reasonable steps to delete or permanently de-identify Personal Information that is no longer needed.
Our retention schedule(s) shall be subject to amendment or modification in accordance with the Digital Personal Data Protection Rules, as may be published or notified by the Government, in addition to the DPDPA.
LINKS TO OTHER WEBSITES
Our Website may contain links to websites of other organizations. This privacy policy does not cover how that organization processes Personal Information. We encourage you to read the privacy policies on the other websites you visit.
CHILDREN’S PRIVACY
Our Website and services are directed to be used by adults only and are not directed towards children under the age of eighteen years. If you are not an adult, while you may look at our site, you should not make a purchase, register, or submit Personal Information to us. We or our associates /affiliates do not knowingly collect information from minors.
In case you feel a minor’s data has been shared inadvertently with Nykaa, we urge you to reach out to us at privacy@nykaa.com.
YOUR RIGHTS AS A CUSTOMER
We understand that when you interact with Nykaa, you have rights over your Personal Information. These rights involve providing reasonable steps to allow you to access your personal Information, correct any errors among others.
To exercise your rights as a Data Principal over your personal information (including access, correction, deletion, or any other rights available under applicable law), you may contact us via mail through privacy@nykaa.com.
We may require you to undergo identity verification to ensure that such requests are genuine and to protect your personal information. In events wherein you are not satisfied with our response or have unresolved concerns, you may reach out to us through the same email address to escalate the matter for resolution.
CUSTOMER GRIEVANCE REDRESSAL POLICY
BACKGROUND
Customer satisfaction is one of the key focus areas and an integral part of Wanderlust’s founding principles and business policies. We strongly believe that Customer satisfaction is the most important factor in the growth and development of our business and hence, at Wanderlust we have adopted Customer centricity as a priority in developing our business processes. This Customer Grievance Redressal Policy summarizes and outlines the framework for addressing Customer grievances.
OBJECTIVE
The objective of this Grievance Policy is to provide a framework:
● to ensure provision of timely and effective resolution of issues raised by Customers.
● to keep Customers informed about the manner in which they can reach out to us to resolve their queries and grievances.
PRINCIPLES GOVERNING THE GRIEVANCE POLICY
Policy on grievance redressal is governed by the following principles:
● Customers shall be treated fairly at all times.
● Issues raised by Customers are always attended with courtesy and in time.
● Customers are provided with effective and satisfactory resolution within a reasonable time period.
● Customers are fully informed of avenues to escalate their issues/ grievances if they are not fully satisfied with the response to their complaints.
CUSTOMER SUPPORT
Any customer can reach out to our Customer Support team/ representative, please email customer service at support@nykaawanderlust.com
Specific complaint numbers will be given to the complaints lodged by the customers to help them track the status of their complaints.
GRIEVANCE OFFICER
Given below are the contact details, name and designation of the Grievance Officer of Nykaa. This information is provided in accordance with applicable provisions of the Information Technology Act 2000 and rules made there under and the Consumer Protection (E-Commerce) Rules, 2020:
Name: Mr. Pratiek Varma
Designation: Senior Manager - Customer Service
Address:- 104, Vasan Udyog Bhavan, Senapati Bapat Marg, Lower Parel , Mumbai , Maharashtra, Pin - 400013
Email Id: pratiek.varma@nykaa.com
Phone: 1800 267 4444
NEED TO KNOW:
● Nykaa DOES NOT solicit confidential details like your OTP/CVV/PIN/Card Number/ Bank account details through any means. Nykaa never calls users/customers with offers, discounts on products and offering free gifts.
● Scamsters/fraudsters attempt various techniques such as ‘phishing’, to contact, influence and defraud consumers. Nykaa regularly cautions its customers against sharing any personal or payment sensitive information with unknown persons as such sharing leads to unauthorized use and/or fraud and consequent financial loss.
● Nykaa shall not be liable for any loss, damage, or expense incurred by a Customer where the Customer has shared personal and/or payment sensitive information with scamsters/fraudsters.
● We also request and encourage our Customers to report such attempts or incidents to our Grievance officer (or Customer care) to enable us to investigate and explore legal recourse.
● Nykaa relies on payment partners and banks. In certain cases involving payment/refund issues, we might see a delay as that is beyond our control once we pass the investigation to them however, we try our best not to exceed timelines stated in this policy.
CONTACT US:
For any further queries and complaints related to privacy under applicable laws and regulations, you could reach us at:
Contact Email Address: support@nykaawanderlust.com
NOTIFICATION OF CHANGES
We keep our Privacy Policy under regular review to make sure it is up to date and accurate. Any changes we may make to this Privacy Policy in the future will be posted on this page. We recommend that you re-visit this page regularly to check for any updates.