privacy-policy

GLUZO PRIVACY POLICY
Last Updated: 04 March 2026
Effective Date: 04 March 2026

This Privacy Policy (“Policy”) explains how Gluzo E-Commerce India Pvt Ltd (“Gluzo”, “we”, “us”, “our”) collects, uses, shares, stores, and protects personal data when you access or use our website and mobile application(s), and related services (collectively, the “Platform” / “Services”).

By using the Platform, you consent to the processing of your personal data as described in this Policy. If you do not agree, please do not use the Platform.

1. Who We Are

Data Fiduciary / Data Controller: Gluzo E-Commerce India Pvt Ltd
Registered Office: 2 Park End, First Floor Rear, Vikas Marg, Delhi–110092, India
Grievance Officer (Privacy): Gluzo Legal Team
Email: team@gluzo.com

2. Scope

This Policy applies to personal data processed by Gluzo in relation to:

• visiting and using the Platform;
• creating an account, placing orders, payments, shipping, and returns/refunds;
• customer support communications;
• AI-enabled features such as Gluzo Face Match (face scan) and Gluzo Lia (chatbot).

Links to third-party websites/services are governed by their own policies. Gluzo is not responsible for third-party privacy practices.

3. Definitions

For this Policy:

• “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
• “Data Principal” means the individual to whom the personal data relates.
• “Processing” means any operation performed on personal data, such as collection, storage, use, disclosure, transfer, or deletion.
• “Consent” means a freely given, specific, informed, unconditional and unambiguous indication of the Data Principal’s wishes by a clear affirmative action.

4. Personal Data We Collect

4.1 Data You Provide

We may collect personal data you provide, including:

• Account data: name, phone number, email address, authentication data (including OTP-based login).
• Order and delivery data: shipping address, billing details, products ordered, order history, returns/refunds.
• Customer support data: communications with us (email, chat, support tickets), and evidence you share (e.g., photos/videos for damaged/defective/wrong items).
• Preference data (optional): preferences, skin concerns, and related inputs you choose to provide.

4.2 Payment Data

Payments on the Platform are processed via third-party payment gateways (e.g., Razorpay). Gluzo does not store complete card details on its servers. Payment processors may collect and process payment information in accordance with their own policies and applicable law.

4.3 Data Collected Automatically

When you use the Platform, we may collect:

• device information (device type, OS, app version), identifiers and diagnostic data;
• IP address, browser type, language;
• logs relating to activity on the Platform (access timestamps, pages/screens viewed, clicks, session data);
• approximate location derived from IP for security, fraud prevention, and serviceability (not precise GPS unless you explicitly enable it).

4.4 Camera and Face Scan Data (Gluzo Face Match)

Gluzo Face Match uses your device camera only after you grant device permission and provide consent in-app.

You have confirmed Gluzo’s intended design as follows:

• the face scan image/data is processed temporarily to generate skin insights and recommendations;
• Gluzo does not store your facial image or face scan data on Gluzo servers for Face Match;
• processing occurs on the user’s device and any data retained is under the user’s device environment and controls.

Gluzo Face Match is intended solely for cosmetic/skincare informational insights and product recommendations. It is not a medical or diagnostic service.

FACE MATCH CONSENT & DISCLAIMER

Face Match uses your device camera to process your facial image temporarily on your device to generate cosmetic/skincare insights and product recommendations. Gluzo does not store your face scan image on Gluzo servers for this feature. Face Match is not medical or dermatological advice. By continuing, you consent to this processing.

4.5 Gluzo Lia (AI Chatbot) Data

When you use Gluzo Lia, we process:

• your prompts, questions, and interactions;
• generated responses; and
• related account/context data necessary to deliver recommendations and improve the Service.

Gluzo Lia is for informational guidance and product recommendations; it does not provide medical, dermatological, diagnostic, or prescription advice.

GLUZO LIA DISCLAIMER

Gluzo Lia provides informational assistance and cosmetic/skincare product recommendations. It does not provide medical, dermatological, diagnostic, or prescription advice. AI outputs may be incomplete or inaccurate. For medical concerns, consult a qualified healthcare professional.

5. Purposes of Processing

We process personal data for the following purposes:

1. Service delivery: account creation, authentication, order processing, payment facilitation, delivery, returns/refunds, customer support.
2. Personalization: recommendations, content personalization, and improving user experience (including Face Match and Lia).
3. Platform improvement: analytics, troubleshooting, quality assurance, and product improvement.
4. Security and fraud prevention: protecting users, transactions, and Platform integrity.
5. Communications: transactional messages (order/shipping/return updates), service notices, and marketing communications (where permitted and/or based on preferences).
6. Legal compliance and enforcement: compliance with applicable laws, responding to lawful requests, enforcing rights and agreements, dispute resolution.

6. Legal Basis 

We process personal data based on:

• Consent (e.g., camera/face scan, certain personalization, marketing where applicable);
• Performance of contract (e.g., providing the Services you request, fulfilling orders);
• Legitimate uses as permitted under applicable law (e.g., security, fraud prevention, essential service communications);
• Compliance with law (e.g., taxation, accounting, consumer protection compliance, regulatory requests).

You may withdraw consent at any time where processing is based on consent. Withdrawal may affect your ability to use certain features.

7. Sharing and Disclosure

We do not sell personal data. We may share personal data with:

1. Service providers and processors (as necessary to operate the Platform), such as:
   • payment gateways (e.g., Razorpay),
   • logistics and courier partners,
   • customer communication vendors (email/SMS/WhatsApp),
   • cloud hosting, analytics, and security vendors.
2. Legal and regulatory authorities where required by law, court order, or to protect rights, safety, and property.
3. Business transfers in connection with mergers, acquisitions, reorganizations, or sale of assets, subject to applicable law and safeguards.

We share data on a need-to-know basis and require service providers to implement reasonable security and confidentiality measures.

8. Cross-Border Processing

Gluzo operates in India and does not ship internationally. Certain vendors may process data outside India (e.g., cloud infrastructure). Where cross-border processing occurs, we implement reasonable safeguards and comply with applicable laws.

9. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, including:

• providing Services and supporting user requests;
• compliance with legal obligations (accounting, taxation, consumer protection);
• dispute resolution, fraud prevention, and enforcement of rights.

When data is no longer required, we delete or anonymize it subject to legal and technical constraints.

10. Your Rights and Choices

Subject to applicable law, you may:

• access personal data we hold about you;
• correct or update inaccuracies;
• request erasure/deletion;
• withdraw consent where processing is based on consent;
• raise grievances with the Grievance Officer.

10.1 Account Deletion (In-App)

Gluzo provides an in-app feature enabling users to delete their accounts and remove associated personal data. Certain records may be retained where required by law or for legitimate legal purposes (such as compliance records and dispute/fraud prevention), and will be handled in accordance with this Policy.

To exercise rights or raise concerns, email: legal@gluzo.com.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies to enable core functionality, remember preferences, analyze performance, and enhance security. You may manage cookies via browser settings; disabling cookies may impact functionality.

12. Children’s Privacy

The Platform is intended for individuals 18 years and above. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact legal@gluzo.com.

13. Security

We implement reasonable technical and organizational measures designed to protect personal data. However, no system can be guaranteed completely secure. You are responsible for maintaining the confidentiality of your account credentials and device access.

14. Changes to This Policy

We may update this Policy periodically. Updates will be posted on the Platform with a revised “Last Updated” date. Continued use after updates constitutes acceptance.

15. Contact

Grievance Officer – Gluzo Team
Email: team@gluzo.com
Registered Office: 2 Park End, First Floor Rear, Vikas Marg, Delhi–110092, India