Privacy,promised.

Welcome to Jalhans Solis (operated by Jalhans Solis Private Limited). We respect your privacy and are committed to protecting your personal data in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian information technology and ecommerce rules.

This Privacy Policy explains what personal data we collect, why we collect it, how it is processed by our trusted technical partners, how long it is retained, and your statutory rights regarding your data.

We only collect personal information necessary to deliver our skincare products, manage your orders, and provide customer support:

• Contact Information: Full name, email address, and 10-digit Indian mobile number.
• Delivery & Billing Address: Street address, city, state/province, and 6-digit postal PIN code used for order fulfillment.
• Order & Transaction Records: Purchased products, quantities, order references, payment method (prepaid via Razorpay), and transaction amounts.
• Authentication & Account Data: If you sign in using Google, we receive your name, verified email address, and public profile avatar URL via secure OAuth 2.0. We never receive or store your Google password.
• Optional Analytics Cookies: Only if you explicitly grant consent through our cookie consent banner, non-personally identifiable site navigation data may be measured via Meta Pixel or Google Analytics 4.
• Email Marketing Consent (Optional): If you explicitly check the opt-in checkbox during checkout or click “Subscribe” in your account dashboard, your email address is added to our Shopify Email marketing list so we can send you new-launch announcements, offers, and skincare tips. This is entirely optional and you may unsubscribe at any time via the link in any marketing email or by contacting us.

We partner with industry-leading, certified third-party service providers (Data Processors) to deliver a secure shopping experience:

• Razorpay (Payment Gateway): All payments are processed through Razorpay Software Private Limited under RBI regulations and PCI-DSS Level 1 compliance. We never store, log, or have access to your credit/debit card numbers, CVVs, UPI PINs, or bank net banking credentials.
• Shopify (Ecommerce Catalog & Order Admin): Provides our authoritative catalog, pricing, inventory management, and merchant order records.
• Shiprocket (Logistics & Courier Fulfillment): Receives your delivery address and contact information to assign courier partners and provide automated live tracking at /track-order.
• Supabase (Authentication & Order Database): Securely stores user account profiles, order correlation records, and form inquiries with enterprise Row Level Security (RLS) and encryption in transit and at rest.
• Netlify (Hosting & Edge Network): Hosts our Next.js web application with SSL/TLS encryption.

Your data is processed strictly for:

• Processing and fulfilling your prepaid skincare orders.
• Sending automated order confirmations, receipts, and delivery tracking updates.
• Responding to customer support and product inquiry requests.
• Complying with statutory accounting, tax (GST), and legal recordkeeping requirements.
• Email marketing (only with explicit opt-in): Sending new-launch announcements, exclusive offers, and skincare tips if and only if you have actively subscribed. You can withdraw consent at any time via the unsubscribe link in any email we send.

We retain transactional order data for the period required under applicable Indian tax and commercial statutes (typically up to 7 years). Customer account records remain active until you request deletion.

As a Data Principal under the DPDP Act, you have the right to:

• Right to Access: Request a summary of the personal data we hold about you.
• Right to Correction & Erasure: Request the correction of inaccurate details or the erasure of personal data that is no longer required for statutory or contractual fulfillment.
• Right of Grievance Redressal: Direct any privacy-related grievances to our designated Grievance Officer.
• Right to Nominate: Nominate an individual to exercise your data rights in the event of incapacity.

To exercise any of these rights, please email us at jalhanssolis@gmail.com.