Policy

Privacy policy

At CareOne ("Company", "we", "our", "us"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://careone.in ("Website") and purchase our products.

Please read this Privacy Policy carefully. By using our Website, you consent to the practices described in this policy.

1. Information We Collect

1.1 Personal Information You Provide

We collect information that you voluntarily provide when you:

Create an account or register on our Website
Place an order or make a purchase
Subscribe to our newsletter or mailing list
Contact us for support or inquiries
Participate in surveys, contests, or promotions
Leave reviews or comments

This information may include:

Category	Examples
Identity Information	Full name, username
Contact Information	Email address, phone number, shipping address, billing address
Payment Information	Credit/debit card details, UPI ID, bank account info (for COD refunds)
Account Information	Password (encrypted), order history, wishlist
Communication Data	Messages, emails, support tickets, feedback

1.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information, including:

Device Information: Device type, operating system, browser type and version
Log Data: IP address, access times, pages viewed, referring URL
Location Data: General geographic location based on IP address
Usage Data: How you interact with our Website, products viewed, search queries

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. See Section 6 for detailed information about our cookie practices.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Order Processing & Fulfillment

Process and fulfill your orders
Send order confirmations and shipping updates
Handle payments and refunds
Verify your identity to prevent fraud

2.2 Customer Service

Respond to your inquiries and support requests
Resolve complaints and disputes
Provide after-sales support

2.3 Communication

Send important account and service-related notifications
Send promotional emails and newsletters (with your consent)
Inform you about new products, offers, and updates

2.4 Website Improvement

Analyze how users interact with our Website
Improve our Website's functionality and user experience
Develop new products and services
Conduct research and analytics

2.5 Security & Legal Compliance

Protect against fraud, unauthorized access, and illegal activities
Comply with legal obligations and regulations
Enforce our Terms and Conditions

3. How We Share Your Information

We do NOT sell, rent, or trade your personal information. We may share your information only in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

Service Type	Purpose
Payment Processors	Razorpay, Paytm, PhonePe, etc. – to process payments securely
Shipping Partners	Delhivery, BlueDart, DTDC, India Post – to deliver your orders
Email Service Providers	To send transactional and marketing emails
Analytics Providers	Google Analytics – to understand website usage
Customer Support Tools	To manage support tickets and chat
SMS Gateway	To send order updates via SMS

These providers are contractually bound to protect your information and use it only for the specified purposes.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

Court orders, subpoenas, or legal processes
Requests from government or regulatory authorities
To protect our rights, property, or safety
To investigate potential violations of our policies

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before your information becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Security Measures We Use:

SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted
Secure Payment Processing: We use PCI-DSS compliant payment gateways; we do not store your full card details
Password Protection: Passwords are hashed and encrypted; we never store plain-text passwords
Access Controls: Only authorized personnel have access to personal data
Regular Security Audits: We regularly review and update our security practices
Firewall Protection: Our servers are protected by industry-standard firewalls

⚠️ Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we do our best to protect your data.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Data Type	Retention Period
Account Information	Until account deletion + 30 days
Order History	7 years (for tax/legal compliance)
Payment Records	7 years (as per Indian law)
Newsletter Subscriptions	Until you unsubscribe
Support Communications	3 years from last interaction
Website Analytics Data	26 months (Google Analytics default)

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognize you, remember your preferences, and improve your experience.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for website functionality (cart, checkout, login)	Session / 1 year
Performance Cookies	Help us understand how visitors use our website	Up to 2 years
Functional Cookies	Remember your preferences (language, region)	Up to 1 year
Marketing Cookies	Track visitors across websites for advertising	Up to 2 years

6.3 Third-Party Cookies

We may use third-party services that set their own cookies:

Google Analytics: Website traffic analysis
Facebook Pixel: Advertising and remarketing
Instagram: Social media integration
Shopify: E-commerce platform functionality

6.4 Managing Cookies

You can control cookies through your browser settings:

Chrome: Settings → Privacy and Security → Cookies
Firefox: Options → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Edge: Settings → Cookies and Site Permissions

Note: Disabling essential cookies may affect website functionality.

7. Your Rights

You have the following rights regarding your personal information:

7.1 Right to Access

You can request a copy of the personal information we hold about you.

7.2 Right to Correction

You can request that we update or correct inaccurate information.

7.3 Right to Deletion

You can request that we delete your personal data, subject to legal retention requirements.

7.4 Right to Object

You can object to the processing of your data for certain purposes, including marketing.

7.5 Right to Data Portability

You can request your data in a structured, commonly used format.

7.6 Right to Withdraw Consent

Where we rely on your consent, you can withdraw it at any time.

7.7 Right to Opt-Out of Marketing

You can unsubscribe from marketing communications at any time by:

Clicking "Unsubscribe" at the bottom of any marketing email
Emailing us at support@careone.in
Updating your account preferences

To exercise any of these rights, contact us at: support@careone.in

We will respond to your request within 30 days.

8. Children's Privacy

Our Website is not intended for children under the age of 18. We do not knowingly collect personal information from minors.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information.

9. Third-Party Links

Our Website may contain links to third-party websites, plug-ins, and applications. We are not responsible for the privacy practices of these external sites.

We encourage you to read the privacy policies of any third-party sites you visit. CareOne assumes no responsibility for the content or privacy practices of linked websites.

10. International Data Transfers

Our primary operations are based in India, and your data is stored on servers located in India.

Some of our third-party service providers may process data in other countries. By using our Website, you consent to the transfer of your information to countries outside India, where data protection laws may differ.

We ensure that appropriate safeguards are in place when transferring data internationally.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

The "Last Updated" date at the top will be revised
Significant changes will be communicated via email or website notice
Your continued use of the Website after changes constitutes acceptance

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Grievance Officer
CareOne
83 S.P. Mukherjee Road (4th Floor)
Devi Market
Kolkata, West Bengal 700026, India

Email: grievance@careone.in
Response Time: Within 30 days of receiving the complaint

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@careone.in
Website: https://careone.in
Address: 83 S.P. Mukherjee Road (4th Floor), Devi Market, Kolkata, West Bengal 700026, India
Support Hours: Monday to Saturday, 10:00 AM - 6:00 PM IST

Your privacy matters to us as much as your skin does.

CareOne – Skincare simplified. Privacy respected. 🔒