Privacy Policy

This Privacy Policy explains what personal information A1 Henna collects when you use our website or buy from us, why we collect it, how we protect it, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. "A1 Henna" ("we", "us"), operated by Aliya, Bengaluru, is the data fiduciary responsible for your information.

1. Information You Give Us — Your name, email address, phone number and delivery address(es); the name, phone number and relationship of any additional contact person you add to receive an order; your account password (stored only in hashed form, never in plain text); your order, booking and review history; and any messages you send us.

2. Information Collected Automatically — Basic device and browser information, the pages you visit and similar analytics data, collected through cookies and similar technology to keep the site working and to understand how it is used.

3. Payment Information — Because you pay by UPI and send us a screenshot, we see the payment reference and the name shown on your UPI transaction. We do not collect or store your card number, UPI PIN, CVV or bank login credentials.

4. Why We Use Your Information — To create and manage your account; to process, verify, pack, deliver and support your orders and bookings; to contact you about an order or booking by email, phone or WhatsApp; to handle returns, refunds and complaints; to detect and prevent fraud and misuse; to improve our products and website; and to meet our legal, tax and accounting obligations.

5. Legal Bases — We process your data to perform our contract with you (your order), for our legitimate business interests (security and improving the shop), to comply with law, and — where required — with your consent, for example for optional marketing messages or non-essential cookies. You may withdraw consent at any time.

6. Who We Share It With — We share only the minimum data needed with: delivery and courier partners (name, address, phone); our website and image hosting providers; our email-sending provider; analytics providers, only where analytics is enabled; and WhatsApp, when we message you about your order. We disclose data to government or law-enforcement authorities only where legally required. We do not sell your personal data, and we do not share it for third-party advertising.

7. Data Retention — We keep order, invoice and payment-verification records for as long as tax and company law require (generally up to eight years). Account information is kept while your account is active; other data is deleted or anonymised once it is no longer needed.

8. Security — Passwords are hashed, access is limited to people who need it, and data is transmitted over encrypted (HTTPS) connections. No method of storage or transmission is completely secure and we cannot guarantee absolute security, but we will notify you and the relevant authority of a significant data breach as required by law.

9. Your Rights — You may ask us to: provide a copy of the personal data we hold about you; correct or update inaccurate data; delete your account and associated data (except records we are legally required to keep); or stop a specific use such as marketing. You may also nominate someone to exercise these rights on your behalf. To make a request, contact us using the details on our Contact page; we respond within a reasonable period, normally 30 days.

10. Cookies — We use cookies that are necessary for the site to function (login sessions and your cart) and, where enabled, analytics cookies to understand site usage. You can block cookies in your browser, but parts of the site may then stop working.

11. Children — Our shop is intended for adults. We do not knowingly create accounts for anyone under 18. A parent or guardian who believes a child has given us personal data should contact us so we can remove it.

12. Changes to This Policy — We may update this policy from time to time; the version and effective date shown on this page apply. Material changes will be highlighted here.

13. Grievances and Data Protection Contact — Questions or complaints about your data can be sent to Aliya, Grievance Officer, at the email on our Contact page (currently hello@a1henna.in) or by WhatsApp at +91 96204 86237. We acknowledge within 48 hours and aim to resolve within 30 days.