Privacy Policy

1. Who We Are

This Privacy Policy describes how Muskan Tolani, trading as Not Beige ("we", "our", or "us"), collects, uses, and protects your personal information when you visit or make a purchase from our website.

2. Data We Collect

We collect personal information necessary to provide and deliver our products and services to you, including:

• Identity & Contact Information: Your full name, email address, and mobile phone number.
• Shipping Information: Delivery address lines, city, state, and postal pincode.
• Order & Purchase History: Details of products ordered, quantities, order status, and total amount.
• Cart & Browsing Information: Cart items, preferences, and interactions on our store.
• Account Credentials: If you register an account, your password is stored strictly as an irreversible cryptographic hash (using bcrypt); we never store or have access to plain-text passwords.
• Newsletter Preferences: Your email address if you opt-in to receive news, drops, and product announcements.

3. How We Use Your Data

Your information is used strictly for legitimate commercial and customer-support purposes:

• To process, fulfill, package, and dispatch your orders.
• To transmit critical order updates, invoices, shipping tracking details, and delivery confirmations via email and SMS.
• To provide customer care and respond to product queries, returns, or warranty requests.
• To administer your account and prevent fraudulent transactions or security incidents.
• To send optional marketing communications and product drops if you subscribed to our newsletter (you may unsubscribe at any time).

4. Cookies, Sessions & Local Storage

We use essential cookies and browser storage technologies to operate our online store smoothly:

• Authentication Cookies: User login sessions are maintained using secure, HTTP-only authentication cookies to protect against unauthorized script access.
• Local Storage: Shopping cart items for guest visitors are saved in your browser's local storage so you don't lose items while browsing.

5. Payment Processing

Online payments on Not Beige are handled securely through our payment gateway partner, Razorpay. We never view, capture, or store your credit/debit card numbers, CVVs, netbanking credentials, or UPI PINs on our servers. All financial transactions are processed directly on Razorpay's PCI-DSS compliant infrastructure.

6. Service Providers & Sharing

We do not sell, rent, trade, or monetize your personal information to third parties. We share your data only with trusted service partners essential for business operations:

• Payment Processing: Razorpay Software Private Limited for secure payment transactions.
• Shipping & Logistics: Third-party courier partners for package pickup, transit, and door delivery.
• Email & Communications: Cloud email delivery providers for transactional order confirmations and delivery updates.
• Cloud Infrastructure: Secure cloud server and database providers for hosting our application.

7. Data Retention

We retain your personal data for as long as your account remains active or as needed to provide you with order history and support. We also retain and use your information to the extent required to comply with our statutory tax, accounting, and legal record-keeping obligations under Indian law.

8. Your Rights & Choices

You have the right to:

• Access, review, and request a copy of the personal information we hold about you.
• Request correction or updates to inaccurate or incomplete information.
• Request deletion of your account and personal data, subject to legal record retention requirements.
• Opt-out of promotional newsletters at any time by contacting us or using the unsubscribe link.

To exercise any of these rights, please email us at notbeigeee@gmail.com.

9. Children's Privacy

Our services and products are not intended for individuals under the age of 18 without parental or legal guardian consent. We do not knowingly collect personal information from minors.

10. Security Measures

We implement industry-standard technical and organizational security controls to protect your data, including TLS/HTTPS encryption for all web communications, bcrypt hashing for passwords, and strict role-based access controls for operational data.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory changes. Any modifications will be posted directly on this page with an updated "Last updated" date.

12. Contact Us

For questions about this Privacy Policy, contact Muskan Tolani at notbeigeee@gmail.com or call +91 9099693817.

Registered Address: Smruti Apt, Nanpura, Surat, Gujarat - 395001, India