Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Identity & contact information: name, phone number, email address, billing and delivery address
• Payment information: processed directly by our third-party payment gateways (PayU, PhonePe, and Easebuzz) — we do not receive or store your full card, UPI PIN, or net-banking credentials on our own servers
• Order & transaction history: products purchased, order value, order status, refund/return history
• Communication records: support queries, order-related emails, feedback
• Technical information: IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies
• Account information: login credentials (password stored in encrypted/hashed form), account preferences

2. How We Use Your Information

• To process, fulfil, ship, and track your orders
• To process payments and refunds through our payment gateway partners
• To provide customer support and respond to enquiries
• To send order updates, service messages, and — only with your consent — offers and promotions (you can opt out at any time)
• To detect and prevent fraud, abuse, and security incidents
• To understand site usage and improve our products, website, and services
• To comply with legal, tax, and regulatory obligations, and to enforce our Terms & Conditions

We only use your information for the purposes described here, or other purposes we clearly disclose to you at the time of collection.

3. Cookies & Similar Technologies

We use cookies and similar technologies to keep you logged in, remember your cart, and understand how visitors use our website. You can disable cookies in your browser settings, but some parts of the website (such as checkout) may not work correctly without them.

4. Sharing Your Information

We do not sell your personal information. We share it only where necessary to run our business, specifically with:

• Payment gateway providers (PayU, PhonePe, Easebuzz) to process payments and refunds
• Courier and logistics partners (including RapidShyp-affiliated couriers) to deliver your order and provide tracking
• Service providers who help us operate the website, send emails, or provide technical support, under confidentiality obligations
• Law enforcement, courts, or regulators, where required by applicable law or to protect our legal rights

5. Data Security

We use reasonable security practices and procedures, including encrypted password storage and secure (HTTPS) transmission, in line with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active and thereafter for as long as necessary to fulfil orders, resolve disputes, enforce our agreements, and meet our legal, accounting, and tax record-keeping obligations. When information is no longer needed for these purposes, we take reasonable steps to delete or anonymise it.

7. Your Rights & Choices

You may, at any time, request to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and associated personal information, subject to our legal record-keeping obligations
• Withdraw consent to marketing communications at any time

To exercise any of these rights, contact us using the details in Section 12 below. We will respond within a reasonable time and in line with applicable law.

8. Children's Privacy

Our website is intended for users who are 18 years of age or older, or who are using the site under the supervision of a parent or legal guardian (see our Terms & Conditions). We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. Third-Party Links

Our website may contain links to third-party sites (for example, social media or payment gateway pages). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

10. Social Media Integration (Meta / Instagram)

We use Meta's Instagram Graph API, through our own internal marketing application, solely to publish organic posts, stories, and content on our own official Instagram Business account (@fragrance_on_flame) and our official Facebook Page, on our behalf as the business owner. This integration does not log in, authenticate, or collect any personal data from visitors to this website or from other Instagram/Facebook users — it only reads and writes content on FOF's own connected Page and Instagram Business account, using access explicitly granted by the account owner through Meta's own permission system. No data obtained through this integration is shared with, or sold to, any third party.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will always reflect the most recent version. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

12. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer are provided below. If you have any questions, concerns, or complaints about this Privacy Policy or how your data is handled, please reach out:

• Grievance Officer: Prathyush
• Email: fragranceonflame1@gmail.com
• Phone: +91 99938 11107
• Location: Guntur, Andhra Pradesh, India

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days, in line with the Consumer Protection (E-Commerce) Rules, 2020.

13. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising out of or relating to this policy shall be subject to the exclusive jurisdiction of the courts in Guntur, Andhra Pradesh.