This policy explains what personal data ARROMELLE LLP (“we”, “us”), which operates the AROMYTH brand and the website at www.arromelle.com, collects from you, why we collect it, and what you can ask us to do with it.
Who is responsible for your data
ARROMELLE LLP, 26E Wing, Building No. 2, N.G. Suncity Phase 1, Thakur Village, Kandivali East, Mumbai 400101, Maharashtra, India.
What we collect
- Order information — name, delivery address, billing address, phone number and email address. We need these to fulfil and invoice an order.
- Account information — if you create an account, your login credentials and saved addresses.
- Payment information — handled entirely by our payment gateway. We receive a confirmation that payment succeeded and a reference number. We never see or store your full card number, CVV, UPI PIN or net-banking credentials.
- Communications — messages you send us on WhatsApp, phone or email, kept so we can follow up on your query.
- Technical data — IP address, browser and device type, and pages visited, collected through cookies and server logs.
Why we use it
- To process, pack, ship and invoice your order.
- To send you order and delivery updates.
- To handle refunds and support queries.
- To meet tax, accounting and other legal obligations.
- To detect and prevent fraudulent orders.
- To send marketing messages, but only if you have opted in. You can opt out at any time.
Who we share it with
We do not sell your personal data. We share it only with parties who need it to deliver what you asked for:
- Courier and logistics partners — your name, address and phone number, so they can deliver.
- Payment gateways — to take payment and process refunds.
- Our accountants and auditors — for statutory compliance.
- Law enforcement or regulators — where we are legally required to disclose.
Cookies
The site uses cookies to keep your cart contents between pages, keep you signed in, and understand how the site is used. You can block or delete cookies in your browser settings, but the cart and checkout will not work correctly without them.
How long we keep it
Order and invoice records are kept for as long as tax and company law requires. Account data is kept until you ask us to delete the account. Support messages are kept for up to 24 months.
How we protect it
The site is served over HTTPS, access to order data is restricted to people who need it, and payment details never reach our servers. No system is perfectly secure, and we do not claim otherwise — but we will tell you promptly if a breach affects your data.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us to:
- tell you what personal data of yours we hold;
- correct data that is wrong or out of date;
- delete data we no longer need to keep;
- withdraw a consent you previously gave, such as for marketing.
To exercise any of these, contact us using the details below. We may need to verify your identity first. We will respond within 30 days.
Children
The site is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes to this policy
If we change this policy we will update the date below. Material changes will be highlighted on the site.
Contact and grievances
Questions about this policy, or a grievance about how your data has been handled, can be raised on +91 96190 55665 or in writing to the Grievance Officer at the registered office address above. Grievances are acknowledged within 48 hours and resolved within 30 days.
