Privacy policy

Effective Date: 28th September 2025

KHET FRAGRANCES LLP (“KHET”, “we”, “us” or “our”) is a Limited Liability Partnership registered in India at Plot No G-184 & 185, Begumpur Khno 74/15 Ground Floor, North West Delhi – 110086.

This Policy covers:

  1. What personal data we collect and why;

  2. How we use, share and protect that data;

  3. The rights you have under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the implementing Rules; and

  4. How to exercise your rights or raise a complaint. 

Scope:  when this Policy applies

This Policy applies to digital personal data that KHET collects and processes when you:

  1. Visit or transact on our Website/App;

  2. Create an account or place an order;

  3. Contact customer support; or

  4. Interact with our marketing, reviews, quiz or product recommendation features.

It also explains processing by our authorised service providers acting on our behalf (payment gateways, delivery partners, analytics providers, cloud hosts, etc.). Where we integrate third-party features (social sign-in, social sharing), those third parties will have their own privacy terms.

Key Terms and Assigned Meaning  

  1. Personal data / digital personal data: Any information that identifies you or by which you can be identified when in digital form.

  2. Data Principal: You 

  3. Data Fiduciary: Khet Fragrances LLP

  4. Data Processor: A third party processing data for KHET under contract.

What categories of data we collect?

We only collect personal data that is necessary for the specified purpose(s):

  1. Identity & contact information (name, email address, mobile number, billing & shipping addresses, preferred delivery instructions); 

  2. Account & Authentication data (username, salted/hashed password. we do not store plain-text passwords, security questions and account preferences; 

  3. And transaction & Payment records (order details, invoices, payment identifiers such as card tokens or UPI references, and refunds/returns history). 

Where we share payment or transaction data with payment processors or other service providers, we do so under written contracts that limit use to the purposes of processing your payment or facilitating the refund/return.

We also collect technical, device and usage information that is necessary to operate and secure the Website and improve your experience: IP address, device type, browser and OS, cookies and similar identifiers, pages viewed, referral URLs, product searches and clicks, and basic (approximate) geolocation. In addition, we process communications you send us, such as customer support chat logs, email exchanges, and any reviews/ratings you post  as well as the marketing preferences you choose to opt into, all to enable support, feedback handling and (where consented) personalised communications.

We do not collect health or sensitivity data unless you voluntarily provide it for example, skin sensitivity, allergies or product intolerance and then only with your explicit consent and only to provide safe, personalised product recommendations. 

We do not collect children’s personal data except with verifiable parental or guardian consent and solely for permitted purposes; if we become aware that we have unintentionally collected a child’s personal data without such consent, we will take prompt steps to delete it.

How we collect personal data

  1. Directly from you: account signup, checkout, customer service, forms, surveys and product reviews.

  2. Automatically: analytics cookies, server logs, device signals.

  3. From third parties: payment gateways, courier partners, fraud prevention providers, or publicly available sources where permitted. We will always identify the source at or before collection where required by law.

Necessary Purpose

  1. Service delivery & account operations: to take and fulfil your orders, process payments and invoices, arrange delivery, manage returns/refunds, provide customer support, and create/maintain your account and preferences. 

  2. Safety, compliance & improvement: to protect accounts and the platform (security, fraud detection), comply with legal, tax and regulatory obligations, and perform analytics and business-improvement activities. 

  3. Marketing & personalisation: to send promotional communications and personalised product recommendations and offers only where you have given explicit consent; you may opt out at any time. 


Consent 

  1. We seek free, specific, informed and unambiguous consent via clear toggles/checkboxes, cookie banner and account settings. We keep records of all consent logs (what you consented to, when, and by what method) for the period as required by law.

  2. You can withdraw consent at any time: withdrawal is as simple as grant of consent (account settings, privacy dashboard, or emailing privacy@khetparfums.com). Withdrawal does not affect processing done before withdrawal. 


Cookies & similar tracking technologies

We use cookies and similar technologies for:

  1. Strictly necessary site functions (cart, login, session management);

  2. Performance & analytics (site usage and improvements);

  3. Functional features (language, saved preferences);

  4. Advertising & measurement (only with your consent).

By continuing to use our site, you can either accept or deny the use of cookies. If you deny, only strictly necessary cookies will function, and certain features or services may be limited. For more details, please see our Cookie Policy.

Sharing & third-party processors

We share personal data only where necessary and under contract with processors who must implement equivalent safeguards. Typical recipients:

  1. Payment gateways (to complete transactions)

  2. Logistics & courier partners (to deliver products)

  3. Cloud and hosting providers (to store encrypted data)

  4. Analytics, email & marketing providers (only with consent for marketing)

  5. Law enforcement, courts or regulators when required by law.

Every third party that processes data for us must sign a Data Processing Agreement (DPA) requiring confidentiality, security measures, limited purpose use, and return or secure deletion of data at the end of the contract. We conduct due diligence before engaging critical third parties.

Cross-border transfers

Cross-border transfer of personal data will be done in compliance with the DPDP Act and the Rules through lawful mechanisms such as appropriate contractual clauses, adequacy assessments and explicit consent. Where transfers are to countries or processors that do not provide comparable protection, we will implement contractual and technical safeguards and will inform you. 

Note: the DPDP Rules and government guidance continue to evolve; where the law imposes additional requirements (localisation, prior approvals, etc.) we will follow them. 

Retention & automatic erasure

We keep personal data only as long as necessary for the purposes set out here or to meet legal, tax and accounting requirements.

Indicative retention periods:

  1. Order & transaction records: 7 years (tax / audit compliance).

  2. Account profile data: for the lifetime of the account + 3 years of inactivity (unless you request earlier deletion).

  1. Marketing consents and preferences: until you withdraw consent.

  2. Customer support records: 2 years after resolution.

  3. Security logs / fraud records: 1–3 years as required for security monitoring.

We will provide you advance notice of automatic erasure (for inactive accounts), we will communicate such notices and offer you an opportunity to preserve your account. When data is deleted, we will use secure deletion methods and backups in line with our deletion schedule. 

Children, Guardians & Nominees

  1. We do not knowingly collect personal data of anyone under 18. If we discover such data collected, we will promptly delete it. You may also intimate us at email privacy@khetparfums.com with a detailed request and proof of identity. 

Your rights & how to exercise them

You have the right to:

  1. Access the personal data we hold about you;

  2. Correct inaccurate or incomplete data;

  3. Erase data where lawful and appropriate;

  4. Port your data in a structured, machine-readable format;

  5. Withdraw consent;

  6. Nominate another person to act on your behalf; and

  7. Complain to us and to the Data Protection Board of India.

How to exercise: Use email privacy@khetparfums.com with a detailed request and proof of identity. We will respond in accordance with DPDP timelines (and in any event within 30 days unless an extension is permitted by law). We may require additional information to verify your identity before fulfilling certain requests. 

Security & organisational safeguards

We implement reasonable technical and organisational measures proportionate to the risk, including: Encryption of data in transit (TLS) and encryption at rest for sensitive fields; We continually review and strengthen controls to reflect current security standards and regulatory guidance. 

Personal data breach: detection, reporting & notification

We operate continuous monitoring to detect personal data breaches. In the event of a breach that compromises the confidentiality, integrity or availability of personal data, we will:

  1. Investigate and contain the incident;

  2. Notify the Data Protection Board, CERT-In and affected Data Principals in the form and manner required per the law; and

  3. Provide affected users with meaningful information about the breach, likely consequences, mitigation measures they can take and contact details for assistance.

We will maintain a record of every breach and our remediation steps and cooperate with regulators. 

Automated decision-making, profiling & recommendations

We may use automated techniques (machine learning models or business rules) to:

  1. Personalise product recommendations;

  2. Detect fraud or anomalous behaviour; and

  3. Improve our search and merchandising.

Where automated decisions materially affect you, we will provide clear information about the logic involved, meaningful information about the likely consequences, and an opportunity to obtain human review where required by law.

Grievance redressal, DPO & contact points

Privacy & Grievance Contact (Internal):

  1. Email: privacy@khetparfums.com

  2. Registered office: Plot No G-184 & 185, Begumpur Khno 74/15 Ground Floor, North West Delhi – 110086, India.

We will acknowledge receipt of privacy-related grievances promptly and aim to resolve within 30 days. 

Changes to this Policy

We may update this Policy from time to time to reflect legal, regulatory or business changes. For material changes we will notify you via email (if you have an account) and by posting a prominent notice on the Website at least 30 days before the change takes effect, except where immediate changes are required to comply with law. We maintain a change log and previous versions are available on our website. 

Miscellaneous legal & compliance notes

  1. Governing law & jurisdiction: Indian law; disputes subject to courts of Delhi unless otherwise agreed in the Terms of Service.

  2. Manufacturer disclaimer: KHET is a retailer/distributor. We procure products from licensed manufacturers who comply with Drugs & Cosmetics Act, 1940 and Cosmetics Rules, 2020; we verify manufacturer licences and documents.

  3. Third-party links & services: Our Services may link to third-party sites or embed third-party content. These are governed by the third parties’ privacy notices.