Privacy Policy

1. Introduction

Welcome to Elysian Plaza, an online marketplace owned and operated by YumiGlow Online Services Private Limited (YumiGlow, Company, we, our, or us).

Your privacy is important to us. This Privacy Policy explains how we collect, use, store, process, share, and protect your personal information when you access or use the Elysian Plaza website, mobile application, or any related services (collectively, the Platform).

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 (India), the Information Technology Act, 2000, the Consumer Protection (E Commerce) Rules, 2020, and other applicable legal requirements.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your information as described here. If you do not agree with this Privacy Policy, please discontinue use of the Platform.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• Visitors to our website
• Registered users of the Platform
• Buyers and customers
• Salon owners, spa owners, beauticians, makeup artists, and other business users
• Seller and distributor applicants
• Individuals communicating with our customer support team
• Anyone interacting with our services through our website, mobile application, email, WhatsApp, telephone, or other official communication channels

Third party services

This Privacy Policy applies only to information collected by YumiGlow through the Platform. It does not apply to third party websites, applications, payment providers, logistics companies, or other external services that may have their own privacy policies.

3. Definitions

Personal Data means any information relating to an identified or identifiable individual, including information that can directly or indirectly identify a person.

Processing includes collecting, recording, organising, storing, updating, retrieving, using, sharing, transmitting, analysing, deleting, or otherwise handling Personal Data.

User means any individual or business representative using the Platform. Buyer means any customer purchasing products through the Platform. Seller or Distributor means any authorised supplier, distributor, manufacturer, or business listing products on the Platform.

Platform refers to the Elysian Plaza website, mobile application, and all related digital services operated by YumiGlow. Applicable Laws means all laws, regulations, notifications, and governmental requirements applicable within India.

4. Information we collect

Depending on how you interact with the Platform, we may collect personal information such as your full name, mobile number, email address, date of birth where applicable, gender (optional), and profile photograph (optional).

Where applicable, we may also collect business information including business name, salon or spa name, makeup studio name, business address, GST number, business registration details, and business contact details.

To fulfil orders we collect delivery information such as delivery address, landmark, PIN code, contact person, and an alternate contact number.

• Order information: products ordered, quantity, pricing, order history, payment status, invoice information, delivery status, refund and exchange history
• Payment information: payment method, transaction ID, payment status and refund status. Payments are securely processed through authorised third party payment gateways
• Device and technical information: device type and model, operating system, browser type, app version, IP address, device identifiers, language preferences, time zone, crash reports, performance logs and diagnostic information
• Location information: approximate location and delivery location, subject to your device permissions
• Communications, marketing preferences, and user content such as ratings you choose to submit

Sensitive payment data

We do not store your complete debit card, credit card, UPI PIN, CVV, internet banking credentials, or other sensitive payment authentication data on our servers.

Location information may be used for delivery services, serviceability checks, nearby distributor availability, fraud prevention, and customer support. You may disable location permissions through your device settings, although certain Platform features may become unavailable.

5. How we collect information

You provide information directly when you create an account, complete your profile, place an order, contact customer support, participate in surveys, submit reviews or ratings, apply as a seller or distributor, or redeem coupons and promotional offers.

We also collect information automatically through your use of the Platform, which helps us understand Platform usage, improve performance, detect fraud, and enhance user experience.

We may receive information from trusted third parties including payment gateway providers, courier and logistics partners, identity verification services, marketing partners, publicly available business directories, and fraud prevention services. Such information is processed only for legitimate business purposes and in accordance with applicable law.

6. Legal basis for processing

We process Personal Data on the basis of your consent, the performance of a contract with you, compliance with legal obligations, the security of the Platform, and legitimate business interests that do not override your legal rights.

Where processing is based on consent, you may withdraw your consent at any time, subject to legal or contractual limitations. Withdrawal of consent may affect the availability of certain Platform features.

7. How we use your information

Platform operations: to create and manage user accounts, verify user identity where necessary, authenticate logins, maintain Platform security, and deliver products and services.

Order fulfilment: to process orders, coordinate with distributors, arrange shipping, track deliveries, process refunds and exchanges, provide invoices, and resolve order related issues.

Customer support: to respond to enquiries, resolve complaints, provide technical assistance, and improve customer experience.

Platform improvement: to analyse Platform performance, improve product recommendations, enhance search functionality, optimise user experience, detect technical issues, and develop new products and features.

8. Sharing of personal information

We may share Personal Data only as necessary to operate the Platform, including with:

• Sellers and distributors fulfilling your order
• Payment gateways and financial service providers processing transactions and refunds
• Courier, logistics, and delivery partners completing deliveries
• Technology service providers for analytics, customer support, communication, security monitoring, email delivery, and Platform maintenance
• Legal and regulatory authorities where required by law, a court order, or to protect our legal rights and investigate fraud
• Acquirers or successors in the event of a merger, acquisition, restructuring, investment, sale of assets, or similar corporate transaction, subject to applicable law

Our commitment

Service providers receive only the information necessary to perform their contracted services and are expected to protect such information appropriately.

YumiGlow does not sell, rent, or commercially trade users Personal Data to advertisers, data brokers, or unrelated third parties. Any sharing of Personal Data is limited to legitimate business purposes described in this Privacy Policy and is carried out only to the extent reasonably necessary for operating the Platform, fulfilling orders, providing customer support, complying with legal obligations, or improving our Services. This commitment forms a fundamental principle of our privacy practices.

9. Cookies and similar technologies

The Platform uses cookies and similar technologies to enhance user experience and improve Platform performance. These technologies help us maintain user sessions, remember user preferences, improve website functionality, measure Platform performance, analyse user behaviour, and detect fraud and abuse.

Depending on your browser or device settings, you may refuse or disable certain cookies. Please note that disabling cookies may affect the functionality of certain features. A separate Cookie Policy may provide additional details regarding our use of cookies and similar technologies.

10. Marketing communications

With your consent, where required, we may send promotional emails, SMS campaigns, WhatsApp messages, push notifications, product recommendations, and newsletters. You may opt out of promotional communications at any time through the unsubscribe option provided or by writing to us.

Transactional and service related communications necessary for providing the Services may continue to be sent even where promotional communications are disabled.

11. Information security

We implement reasonable technical and organisational security measures to protect Personal Data. These measures may include:

• Secure Socket Layer (SSL or TLS) encryption
• Access controls and password protection
• Multi layer authentication mechanisms where applicable
• Network monitoring and security audits
• Data backup procedures
• Employee access restrictions based on business need

Personal data breach

While we strive to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure. Users are also responsible for protecting their account credentials and devices.

In the event of a Personal Data breach that is likely to result in significant harm, or where notification is required under applicable law, YumiGlow will take reasonable steps to investigate the incident, contain and mitigate the impact, notify affected users and the competent authority where required, and implement corrective measures.

12. Data retention

We retain Personal Data only for as long as necessary for the purposes described in this Policy. Retention periods may vary depending upon their purpose. Illustrative examples include:

• Account information: until account deletion or as required for legitimate business purposes
• Orders and invoices: compliance with accounting, taxation, and regulatory obligations
• Payment records: audit, fraud prevention, and financial compliance
• Customer support communications: quality assurance, dispute resolution, and service improvement
• Product reviews and ratings: Platform integrity, unless removal is requested and legally permissible
• Security logs: fraud prevention, cybersecurity monitoring, and investigations
• Marketing preferences: until consent is withdrawn or preferences are updated

Retention limits

Retention periods may be extended where required by law or where reasonably necessary for dispute resolution, investigations, enforcement of contractual rights, or protection of the Company legitimate interests. When Personal Data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with applicable law.

13. Your rights

Subject to applicable law, you may:

• Access the Personal Data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your Personal Data
• Withdraw consent previously provided
• Manage communication preferences
• Receive a summary of the Personal Data processed by the Company
• Submit grievances relating to processing of Personal Data

Limits on requests

Certain requests may be limited where retention is required by law, regulatory obligations, fraud prevention, taxation, accounting, or dispute resolution. Requests may require reasonable identity verification before processing.

14. Children privacy

The Platform is intended for individuals aged 18 years or older. We do not knowingly collect Personal Data directly from children without appropriate legal authorisation.

If we become aware that Personal Data relating to a child has been collected contrary to applicable law, we will take reasonable steps to delete such information. Parents or legal guardians who believe that a child has provided Personal Data may contact us for assistance.

15. Cross border data transfers

Some of our service providers may store or process information outside India. Where such transfers occur, we take reasonable steps to ensure that the information continues to be protected in accordance with this Privacy Policy and applicable Indian law.

16. Privacy principles

In operating the Platform, the Company aims to:

• Minimise unnecessary collection of Personal Data
• Process only information relevant for identified purposes
• Provide users with meaningful privacy choices
• Implement appropriate security controls throughout the information lifecycle
• Periodically review internal privacy practices and security measures

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in business operations, technological developments, legal or regulatory requirements, new Platform features, or security improvements.

Updated versions will be published on the Platform with a revised Last Updated date. Continued use of the Platform following publication of changes constitutes acceptance of the revised Privacy Policy.

18. Grievance Officer

In accordance with applicable Indian laws, users may contact our Grievance Officer regarding privacy related concerns by writing to support@elysianplaza.com or by using the contact details below. We acknowledge and address grievances within the timelines prescribed under applicable law.