Indicrest Privacy Policy

At Cosmetics & Co. (operating under the brand name Indicrest™) ("Company", "we", "us", or "our"), we value your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use our website www.indicrest.shop (the "Platform"), make purchases, or otherwise engage with our services.

By using the Platform you consent to the collection and use of your personal information as described in this policy.

1. WHO WE ARE & WHAT WE SELL

Indicrest™ is an Indian beauty brand focused on diversity, inclusivity, and sustainability. We sell skincare, haircare, cosmetics, and personal care products through our e-commerce store hosted on Shopify.

Important: Indicrest sells third-party products sourced from authorised distributors, wholesalers, or brands within India. We source all products from India and ship them both domestically and internationally.

2. INFORMATION WE COLLECT

We collect information needed to provide services and complete transactions. Types of information include:

(a) Information you provide:

• Name, email address, phone number
• Billing and shipping addresses
• Account username and password (if you register)
• Payment information (processed through our payment partners - we do not store full card details)
• Reviews, survey responses, customer support messages

(b) Information collected automatically:

• Device and technical details (IP address, browser, operating system)
• Browsing and purchase activity (pages viewed, items clicked, cart history)
• Cookies, pixels and similar tracking technologies

(c) Information from third parties:

• Payment processors, logistics and delivery partners, and verified marketing partners may provide limited information necessary to complete orders or support services.

3. HOW WE USE YOUR INFORMATION

We use personal information for legitimate business purposes, including:

• Order fulfilment: to confirm, process, ship and deliver purchases
• Account management: to maintain your profile, preferences and order history
• Customer support: to respond to queries, returns, refunds and complaints
• Personalisation: to offer product recommendations and improve your experience
• Marketing & promotions: to send newsletters and offers only if you have opted in; you may withdraw consent at any time
• Fraud prevention & security: to detect suspicious activity and protect accounts
• Legal compliance: to meet tax, accounting, regulatory and legal obligations

We may use your information to process refunds or returns in accordance with our Refund & Return Policy.

4. COOKIES, TRACKERS & ADVERTISING

We use cookies and similar technologies to provide and improve the Platform. These are used to:

• Keep your cart active while you shop
• Remember login and display preferences
• Analyze site performance and troubleshoot issues
• Deliver non-personalised or personalised adverts on third-party platforms, where you have given consent

Where required by law, we will obtain your consent before placing non-essential cookies or showing personalised ads. You can control cookie preferences via your browser settings or our cookie consent tool (if shown on the Platform). Disabling cookies may affect certain features.

5. SHARING YOUR INFORMATION (INCLUDING THIRD-PARTY SELLERS)

We do not sell or rent your personal information. We may share information with third parties only as necessary to provide services or as required by law. Examples:

• Shopify: our hosting and store platform provider (processing and storage)
• Payment providers: to securely process payments (for example: Razorpay, PayU, or other authorised gateways)
• Logistics & delivery partners: to deliver orders and handle returns
• Marketing & analytics partners: to run campaigns or improve services (only with consent for personalised marketing)
• Third-party product sellers / brands: For products supplied by third-party brands or authorised distributors, we may share limited order information (your name, phone number and delivery address) with the respective brand or authorised distributor solely to fulfil the order, handle warranty claims or manage returns. Indicrest is not responsible for third-party privacy practices; we recommend reviewing the seller’s privacy terms where available.
• Legal & regulatory authorities: when required by law or to protect our rights

In the event of a business transfer (merger, sale, reorganisation), customer data may be transferred to the acquiring entity under appropriate safeguards.

6. PAYMENT DATA & SECURITY

All online payments are processed through our authorised payment partners. Indicrest does not collect or store full payment card details on our servers. For additional information, see the payment partner’s privacy and security practices.

We use industry-standard technical and organisational safeguards (encryption, firewalls, secure hosting) to protect your personal information. While we work to protect your data, no method of transmission or storage is 100% secure; please keep your account credentials confidential.

7. DATA RETENTION

We retain your information only for as long as necessary to fulfil the purposes described in this Policy or to meet our legal and regulatory obligations.

• Order and transaction records: retained up to 7 years where required for tax, audit and statutory compliance in India.
• Marketing and communication preferences: retained until you withdraw consent or request deletion.
• Support and dispute records: retained as needed to resolve issues and as required by law.

8. YOUR RIGHTS

Subject to applicable law, you may have rights including:

• Access the personal information we hold about you
• Request correction or update of inaccurate information
• Request deletion of your personal information (subject to legal and transactional limits)
• Withdraw consent for processing that is consent-based
• Opt out of marketing communications

To exercise any of these rights, please email our Grievance Officer at support@indicrest.shop with the subject line 'Data Rights Request' and provide details of your request.

9. CHILDREN'S PRIVACY

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will take steps to delete it promptly.

If you are under 18, you may use the Platform only with the involvement of a parent or guardian.

10. INTERNATIONAL PROCESSING & STORAGE

Indicrest proudly serves customers worldwide with international shipping options available.

We process and store customer data primarily in India. However, because our Platform is hosted on Shopify and supported by trusted global service providers, certain technical processing (such as backups, infrastructure, or analytics) may take place on servers located outside India.

When data is transferred across borders, we rely on internationally recognised safeguards (such as Standard Contractual Clauses or equivalent mechanisms) and other lawful transfer tools to ensure your information remains secure.

Note: All our products are sourced and fulfilled directly from India, with safe and reliable delivery to our international customers.

11. GRIEVANCE REDRESSAL & CONTACT

We are committed to resolving privacy concerns promptly. For any privacy queries, requests or complaints, contact:

We will acknowledge privacy complaints within 48 hours and aim to resolve them within 30 days, in line with applicable law.

12. LINKS TO OTHER WEBSITES

Our Platform may include links to third-party sites. We are not responsible for their content or privacy practices. Please review the privacy policies of any third-party sites you visit.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy when our practices or legal requirements change. We will post the updated policy on this page with a revised "Last Updated" date. Significant changes may also be notified by email to registered users.