Who we are
Shramasa is a premium Indian skincare and haircare brand. This policy explains how we handle personal information when you visit our website, create an account, place an order, or contact us. For questions, use the Contact page.
Legal
Privacy Policy
Last updated 20 August 2026. This is a working policy for the Shramasa storefront. Have a qualified advisor review it before you rely on it for live payments.
Information we collect
We collect the details you provide: name, email, phone number, delivery address, and account password (stored in hashed form). If you sign in with Google, we receive your name and verified email from Google. When you order, we keep product, payment method, and fulfilment records. Razorpay processes card, UPI, and net-banking payments; we store payment identifiers needed to confirm an order, not your full card number. If you write through the contact form, we store your name, email, and message so we can reply.
How we use it
We use this information to create and secure your account, process orders (including Cash on Delivery), deliver products, handle returns, respond to support messages, send a password-reset link when you request one, prevent fraud, and improve the shop. We do not sell your personal information.
Legal basis and sharing
We process data to fulfil your order and operate the store. We share information only with services required to run the business — for example Razorpay for online payments, and courier partners for delivery. Google receives data only if you choose Google sign-in, according to Google’s own terms.
Cookies and account sessions
We use an essential session cookie to keep you signed in so you can use cart, wishlist, checkout, and orders. We do not use advertising trackers on the storefront at this time.
Retention and security
Order and account records are kept as long as needed for fulfilment, returns, accounting, and legal requirements. We protect data with industry-standard measures, including encrypted connections in production and hashed passwords. No method of transmission is completely secure.
Your choices
You may update your name, phone, and addresses from your account. You may ask us to correct or delete personal data that we are not required to keep, via the Contact page. Google sign-in can be disconnected by using email sign-in instead, where an email password already exists.
Children
The shop is intended for adults. We do not knowingly collect personal information from children.
Updates
We may update this policy as the store or the law changes. The date below reflects the latest revision. Continued use of the site after an update means you accept the revised policy.
Related: Terms of Use and Customer Care.