Privacy Policy

1. Introduction

This Privacy Policy explains how AEMS Beauty, we collects, uses, stores, and shares information when you use the AEMS Beauty mobile application, website, products, and related services (collectively, the “Services”).

By using our Services, you acknowledge the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Services.

2. Information We Collect

Depending on how you use the Services, we may collect:

• Account information: your full name, mobile number, email address, account credentials, and authentication information such as one-time passwords.
• Delivery information: recipient name, telephone number, delivery address, address label, and other information needed to deliver an order.
• Order information: products viewed or purchased, cart contents, quantities, order history, order status, returns, and related transaction records.
• Payment information: your chosen payment method, payment status, transaction reference, and limited billing information. Payment-card or banking details may be collected directly by an authorised payment provider and may not be stored by AEMS Beauty.
• Customer-support information: messages, complaints, feedback, and other information you provide when contacting us.
• Device and technical information: IP address, device type, operating system, app version, language, diagnostic data, access times, and security logs when available.
• Usage information: interactions with products, categories, searches, screens, notifications, and other app features.

Please provide accurate information and avoid submitting personal information about another person unless you are authorised to do so.

3. How We Use Information

We may use personal information to:

• Create, authenticate, and manage your account.
• Verify your mobile number using an OTP.
• Process, fulfil, deliver, and manage orders.
• Process payments, refunds, cancellations, and returns.
• Save your cart and delivery addresses.
• Provide order updates and service notifications.
• Respond to support requests, questions, and complaints.
• Maintain the functionality, reliability, and security of the Services.
• Detect fraud, misuse, security incidents, or unlawful activities.
• Understand usage and improve our products and user experience.
• Send promotional communications where you have consented or where otherwise permitted by law.
• Meet our legal, tax, accounting, and regulatory obligations.
• Establish, exercise, or defend legal claims.

4. Consent and Lawful Processing

We process personal information with your consent, when necessary to provide requested products or services, to comply with legal obligations, or for other purposes permitted by applicable law.

Where processing is based on consent, you may withdraw that consent by contacting us. Withdrawal will not affect processing already completed before your request and may prevent us from providing features that require the relevant information.

5. How We Share Information

We may share relevant information with:

• Service providers: hosting, cloud-storage, authentication, OTP, technical-support, analytics, and security providers.
• Payment providers: banks, payment gateways, and financial institutions involved in processing transactions.
• Delivery partners: couriers, fulfilment providers, and logistics companies responsible for delivering orders.
• Professional advisers: auditors, accountants, insurers, and legal advisers where reasonably necessary.
• Authorities: courts, government agencies, law enforcement, or regulators when disclosure is required or permitted by law.
• Business successors: an acquiring or reorganised entity in connection with a merger, acquisition, financing, restructuring, or sale of business assets.

We require service providers to use personal information only for the services they perform for us and to protect it appropriately. We do not sell your personal information for money.

6. Data Storage and International Transfers

Information may be processed or stored on our systems or those of our service providers. Some providers may operate outside your state or country. Where information is transferred, we take reasonable steps to ensure that it receives protection consistent with applicable law.

7. Data Retention

We retain personal information only for as long as it is reasonably needed for the purpose for which it was collected, to provide the Services, maintain transaction records, resolve disputes, prevent fraud, enforce agreements, and comply with legal, tax, accounting, or regulatory requirements.

When information is no longer required, we will delete, anonymise, or securely isolate it, unless continued retention is required by law.

8. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction. These safeguards may include access controls, secure communications, monitoring, and restricted access to production systems.

No electronic storage or transmission method is completely secure. Therefore, we cannot guarantee absolute security. You are responsible for keeping your password and OTP confidential and for notifying us if you suspect unauthorised account access.

9. Your Privacy Rights

Subject to applicable law and verification of your identity, you may have the right to:

• Request information about how your personal data is processed.
• Request access to a summary or copy of your personal data.
• Correct inaccurate or incomplete personal data.
• Request deletion or erasure of eligible personal data.
• Withdraw consent where processing is based on consent.
• Opt out of promotional communications.
• Nominate another person to exercise applicable rights on your behalf.
• Raise a grievance concerning our handling of your personal data.

Certain requests may be limited where retaining or processing the information is required for completing an order, fraud prevention, legal compliance, recordkeeping, or establishing legal claims.

To exercise a right or raise a grievance, contact us using the details in Section 15. We may request information necessary to verify your identity and process the request.

10. Account and Data Deletion

You may request deletion of your account and eligible personal data by contacting us at REPLACE_ME_PRIVACY_EMAIL .

Please submit the request from the email address or mobile number associated with your account. We may retain limited information when required for order records, taxation, fraud prevention, dispute resolution, or other legal obligations.

11. Notifications and Marketing

We may send transactional communications relating to OTPs, account security, orders, deliveries, payments, and customer support. These messages may be necessary to provide the Services.

You can stop promotional messages by using the unsubscribe option, changing available notification settings, or contacting us. Disabling promotional messages will not necessarily disable essential service communications.

12. Children’s Privacy

The Services are not intended for children under 18 years of age without verifiable consent from a parent or lawful guardian. We do not knowingly seek personal information from a child without the consent required by applicable law.

If you believe that a child has provided personal information without appropriate consent, please contact us so that we can investigate and take suitable action.

13. Third-Party Services and Links

The Services may contain links to or integrate services operated by third parties, including payment and delivery providers. Their privacy practices are governed by their own policies. We recommend reviewing those policies before submitting information directly to a third party.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. The updated version will be posted on this page with a revised effective date.

Where required, we will provide additional notice or seek fresh consent before materially changing how personal information is used.

15. Contact and Grievance Officer

Important: Replace every value beginning with “REPLACE_ME” before publishing this page. Also revise the policy if you later add advertising, analytics, precise location tracking, social login, camera access, or other data-collection features.