Privacy Policy

Eau So Haute is a brand owned and operated by Stratos Growth LLP, a company incorporated under the Companies Act, 2013, having its registered office at A2/2, ATS Bouquet, Jaypee Cosmos Road, Sector 132, Noida, Uttar Pradesh – 201305, India 

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit www.eausohaute.com, place an order, create an account, or interact with us in any way.

This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws of India.

By using our Website or purchasing from us, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

WHAT PERSONAL DATA WE COLLECT

When you interact with us, we may collect the following categories of personal data:


Category

Examples

Identity & Contact Details

Name, email address, phone number

Address Information

Billing address, shipping address, city, state, PIN code

Payment Information

Card type, last 4 digits, UPI ID, transaction reference (we do not store full card numbers — payments are processed by our secure payment partners)

Account Information

Username, password, purchase history, wishlist

Order & Transaction Data

Products purchased, order value, delivery status, returns/exchanges

Device & Technical Data

IP address, browser type, device type, operating system, session data

Behavioural Data

Pages visited, products viewed, time spent, cart activity, clicks

Communications Data

Messages or queries sent via email, WhatsApp, or contact forms

Preferences

Fragrance preferences, notification settings, marketing opt-ins


We collect only what is necessary for the purposes described in this policy (data minimisation principle under the DPDP Act, 2023).


HOW WE COLLECT YOUR DATA

We collect personal data through:

  • Directly from you : when you create an account, place an order, subscribe to our newsletter, fill out a form, take our fragrance quiz, or contact us

  • Automatically :  through cookies, and tracking technologies when you browse our Website.

  • From third-party partners : including payment gateways , shipping partners , and advertising platforms.

  • From social media : if you interact with us on Instagram, Facebook, or Pinterest, or use social login features.


HOW WE USE YOUR PERSONAL DATA

We use your personal data only for clearly defined and lawful purposes. These include:

a) To process and fulfil your orders: Processing payments, confirming orders, arranging delivery, managing returns and exchanges.

b) To manage your account: Creating and maintaining your profile, storing your preferences and order history.

c) To communicate with you: Sending order confirmations, shipping updates, delivery notifications, and customer service responses.

d) For marketing and promotions: Sending emails, WhatsApp messages, or SMS about new launches, offers, and events ,  only if you have consented to receive these. You can withdraw consent at any time .

e) To personalise your experience : Recommending products based on your browsing and purchase history, customising content on our Website.

f) To improve our Website and services: Analysing usage data to fix issues, improve performance, and enhance the user experience.

g) For fraud prevention and security : Detecting suspicious activity, verifying identities, and protecting both you and us from fraudulent transactions.

h) For legal compliance : Meeting obligations under applicable Indian law, responding to lawful requests from government authorities or courts, and maintaining records as required by law .

LEGAL BASIS FOR PROCESSING YOUR DATA

Under the DPDP Act, 2023, we process your personal data on the following lawful bases:


Purpose

Legal Basis

Processing orders & payments

Contractual necessity: required to fulfil your purchase

Sending marketing communications

Consent:  you have explicitly opted in

Fraud prevention & security

Legitimate interest:  to protect you and our business

Legal obligations

Legal compliance:  as required by Indian law

Personalisation & analytics

Consent / Legitimate interest


CONSENT

Where we rely on your consent to process personal data (e.g. for marketing communications), we will:

  • Ask for your consent clearly and separately, without bundling it with other terms

  • Allow you to withdraw consent at any time, easily and without penalty

  • Not make purchase or service access conditional on giving marketing consent

To withdraw consent, simply:

  • Click "Unsubscribe" in any marketing email, OR

  • WhatsApp or email us at the contact details in Section 13

Withdrawal of consent will not affect the lawfulness of processing done before withdrawal.

SHARING YOUR PERSONAL DATA

We do not sell your personal data to any third party.

We may share your data with the following categories of trusted partners, strictly to fulfil the purposes described above:

Recipient

Purpose

Payment Gateways

Secure processing of your transactions

Logistics & Shipping Partners

Delivering your orders

Technology & Platform Providers

Hosting and operating our Website and store

Email & Marketing Tools 

Sending you communications you've consented to

Advertising Platforms

Showing relevant ads based on your activity

Analytics Tools 

Understanding website usage to improve our services

Legal & Regulatory Authorities

When required by law, court order, or government directive


 COOKIES & TRACKING TECHNOLOGIES

Our Website uses cookies and similar technologies to:

  • Keep you logged in and remember your cart

  • Understand how you use our Website (analytics)

  • Show you relevant advertisements on other platforms (retargeting)

  • Improve website performance and user experience



DATA SECURITY

We implement reasonable technical and organisational security measures to protect your personal data, However, no online transmission is 100% secure. We strongly recommend:

  • Using a strong, unique password for your account

  • Not sharing your login credentials with anyone

  • Contacting us immediately if you suspect unauthorised access to your account on hey@eausohaute.com & WhatsApp: +91 9217516999

We will respond to your request within a reasonable time, and no later than 30 days from receipt of your request. We may need to verify your identity before processing your request.


DATA RETENTION

We retain your personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Specifically:


Data Type

Retention Period

Order & transaction records

7 years (as required under law)

Account data

Until the account is deleted or inactive 

Marketing preferences

Until consent is withdrawn

Website analytics data

Up to 26 months

Customer support communications

2 years from resolution


CHILDREN'S DATA

Our Website and products are intended for individuals aged 18 years and above. We do not knowingly collect or process personal data of children (persons below 18 years of age).

We will not undertake behavioural monitoring of children or target advertising at children, in compliance with the DPDP Act, 2023.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at hey@eausohaute.com  and we will delete it promptly.

CROSS-BORDER DATA TRANSFERS

Our Website is hosted on Shopify. By using our Website, you consent to your data being processed and stored in countries other than India, including the United States. We ensure that all such transfers are carried out with appropriate safeguards, including contractual protections and compliance with applicable Indian data protection law.

We do not transfer your Sensitive Personal Data outside India without your explicit consent, except as permitted by law.


THIRD-PARTY LINKS

Our Website may contain links to third-party websites or social media platforms . We are not responsible for the privacy practices of these external platforms. We encourage you to review their privacy policies before sharing any information with them.


GRIEVANCE OFFICER

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data privacy:

Grievance Officer
Name: SUMIT GHOSH
Eau So Haute |  Stratos Growth LLP
Address: A2/2, ATS Bouquet, Jaypee Cosmos Road, Sector 132, Noida, Uttar Pradesh – 201305
Email: hey@eausohaute.com

WhatsApp: +91 9217516999

We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page

  • Notify you via email or a prominent notice on our Website if the changes are significant

We encourage you to review this policy periodically. Continued use of our Website after changes constitutes your acceptance of the updated policy.

GOVERNING LAW & JURISDICTION

This Privacy Policy is governed by and construed in accordance with the laws of India. 

Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts at Noida / Gautam Buddha Nagar, Uttar Pradesh, India.