Privacy Policy

This Privacy Policy explains how Beauty Elixir ("Beauty Elixir", "we", "us") collects, uses and protects information when you use beautyelixir.in (the "Site"). It is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (India). It also sets out your rights if you visit from the EU/UK (GDPR) or California (CCPA/CPRA).

The short version

• You can use every tool without an account, and we never ask for your name, phone number or payment details.
• What you type into our tools (ingredient lists, quiz answers) is used only to show you the result. We do not save it to a database or build a profile from it.
• We do not sell your personal data.
• If we enable analytics or advertising, those services use cookies. You can decline them (see our Cookie Policy).

1. Information we collect

a) Information you enter into our tools

• Pore-Clog Checker: the ingredient list and optional product name you paste are sent to our server, analysed, and returned to you on the results page. They are not stored in a database, not added to our product library, and not linked to you.
• Ingredient Checker ("paste a list" and "whole routine" tabs): these run entirely in your browser, and nothing is sent to us.
• Routine Builder, Hair Porosity Test, Spray Calculator and Batch Code Checker: your answers are placed in the page address (URL) so you can bookmark or share your result. They describe skin type, hair type or product dates. They do not identify you, and we do not combine them with any other data.
• Share cards: result images are created inside your browser. We never receive a copy.

Please do not enter health records, names or other personal details into the tools. None of them need it.

b) Information collected automatically

• Server logs: like every website, our hosting provider (Hostinger) records technical data such as IP address, browser type, pages requested, referring page and time of request. These logs keep the Site secure and working. Our host retains them for a limited period and they are not used to identify you.
• Analytics (only if enabled): we may use Google Analytics 4 to understand which pages are useful. It collects pseudonymous usage data such as pages viewed, approximate location, device type and time on page, using cookies or similar identifiers.
• Advertising (only if enabled): we may show ads through Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other websites. See how Google uses data from sites that use its services.

c) Information you send us

If you email us, we receive your email address and whatever you choose to include. We use it only to reply and to keep a record of the conversation.

2. How we use information, and our legal basis

3. Who we share information with

We do not sell or rent personal data. We only share data with service providers who help us run the Site, under their own privacy terms:

• Hostinger (web hosting and server logs)
• Google (Analytics and AdSense, only if enabled)
• We may also disclose information if Indian law, a court order or a government authority requires it, or to protect our rights and users' safety.

Affiliate links: when you click a "Shop" link to Amazon, Nykaa or another retailer, that retailer may set its own cookies to credit us with a commission. Once you are on their site, their privacy policy applies. We receive only aggregated sales reports, never your identity or order details.

4. International transfers

Our hosting provider and Google may process data on servers outside India. Where this happens, we rely on those providers' contractual and security safeguards, and it is done in line with the DPDP Act 2023 and any restrictions notified by the Government of India.

5. How long we keep data

• Tool inputs: not stored after your result is shown.
• Server logs: kept for the hosting provider's standard retention period, typically up to 90 days.
• Analytics: Google Analytics retention is set to 14 months.
• Emails: up to 2 years after our last exchange, unless you ask us to delete them sooner.

6. Your rights

Under the DPDP Act 2023 (India) you may:

• ask for a summary of the personal data we hold about you and how it is processed;
• ask us to correct, complete, update or erase your personal data;
• withdraw consent at any time, which does not affect processing already done;
• nominate another person to exercise your rights in case of death or incapacity; and
• raise a grievance with our Grievance Officer. If it is not resolved, you may complain to the Data Protection Board of India.

EU/UK visitors (GDPR): you also have the right to access, rectification, erasure, restriction, portability and objection, and you may complain to your local data protection authority. California residents (CCPA/CPRA): you have the right to know, delete and correct personal information, and to opt out of "sale" or "sharing". We do not sell personal information. To opt out of personalised advertising, use the cookie settings link in the footer or Google Ad Settings.

To exercise any right, email privacy@beautyelixir.in. We respond within 30 days and may need to verify the request.

7. Children

The Site is meant for adults and teenagers learning about skincare, and is not directed at children under 18 for any processing that needs consent. We do not knowingly collect personal data from children, and advertising (if enabled) is not personalised for users we know to be children. If you believe a child has sent us personal data, contact us and we will delete it.

8. Security

We use HTTPS encryption, restricted server access and security headers, and we collect as little data as possible. No method of transmission over the internet is 100% secure. If a data breach affects you, we will notify you and the Data Protection Board of India as required by law.

9. Changes to this policy

We may update this policy when our tools or the law change. The "Last updated" date at the top shows the latest version. Significant changes will be highlighted on the Site.

10. Contact and Grievance Officer