-
PRIVACY NOTICE
Welcome to the Privacy Notice for “Pureplay Skin Sciences (India) Private Limited”, of (hereinafter referred to as “Company”, “Pureplay” or “Plum” or “We” or “Us”). This Privacy Policy (“Policy”) describes how we collect, use, disclose and transfer Personal Information (as defined below), through platforms controlled by the Company viz. www.plumgoodness.com and mobile sites/application (the “Platform(s)”) of the individuals who browse, or access the Platform or provide information on or through the Platform, or whose information the Company otherwise collects, receives or processes in connection with the offer and sale of its products (“Product(s)”) (hereinafter, collectively referred to as “customer(s”, “you”, “your”) and ensure its compliance with applicable laws and regulations.
We respect your privacy and value our relationship; therefore, we handle your personal data responsibly. By using the platforms and consenting to personal data collection, you confirm that you have read and agree to be bound by this Privacy Notice.
APPLICABILITY:
This Privacy Notice applies to all personal data we collect in connection with various products and services offered by the Pureplay, either directly or indirectly through a third party acting on our behalf. We collect personal data in compliance with applicable law(s) for time being in force. This Policy does not apply to Personal Information collected from you offline (unless otherwise specified), to Company’s websites that do not link to this Policy, to Customers of countries other than India or to third-party websites to which Platform may link.
Further, you agree and consent to receive all communications related to our services on the mobile number provided by you to the Company, even if such mobile number is registered under DND/NCPR list under the Telecom Commercial Communications Customer Preference Regulations, 2018 (“TRAI Regulations”). Notwithstanding your registration with the National Do Not Call Registry (In Fully or Partly blocked category under National Customer Preference Register set up under the Telecom Regulatory Authority of India), you hereby express your interest and accord informed consent to receive communications (including commercial communications) in relation to the Company’s services. You further confirm that no communication to you from the Company or on behalf of the Company shall be construed as Unsolicited Commercial Communication under Regulation 2(bw) of the TRAI Regulations and you have specifically opted to receive communications in this regard on the mobile number provided by you.
PERSONAL DATA THAT WE COLLECT:
We may collect personal data elements across different processes for the purposes as set out in this Privacy Notice, including but not limited to:
- Personal identifiable information: Elements such as name, email address, postal address and phone number, including the phone numbers used to call our customer service number.
- Demographic information and your interests: Personal data elements compromising of date of birth, location (postal code), favourite products, interests, professional details, hobbies, and other lifestyle information.
- Login information: This includes username and password that you create to access your account, including the names of people to whom purchases have been shipped including address and telephone numbers, IP addresses
- Service history: Order history and purchase patterns,
- Platform usage information: Personal data collected through cookies including IP address, device ID, location data, computer, and connection information such as browser type and version, time zone setting, browser plug-in types and versions, and operating system.
- Financial Information: You may also provide us with information like financial information such as bank account or credit card or debit card or other payment instrument details, password for availing the products at our Platforms.
- Product usage experience: Includes your personal experience about using our products/ services, including any grievance/ complaints that you raise with us.
COLLECTING AND PROCESSING PERSONAL DATA FOR IDENTIFIED PURPOSES:
Collection of personal data:
- Online platform: We collect personal data when you come in contact with one or more of Pureplay online platforms, for example, when you sign up for a newsletter, fill a survey, register an account, create a profile, or make a purchase.
- Other channels: We may collect personal data from you offline, through following mechanisms:
- Contact customer care or reach out to us with any other inquiry.
- When you participate in any event or campaign or promotion activities.
- When you make a purchase or enquire about the products from our exclusive business outlets.
- From other Sources: We may obtain your personal data from other indirect sources that include:
- Publicly available databases and sources;
- Data companies
- Joint marketing partners;
- Third parties working on behalf of us including agencies;
- Social media account details (based on the permissions given by you) when you use to create login in our account(s) or connect to any account offered by us.
- Automatically: We may use “cookies”, pixels, web beacon, applications, software and similar technologies to receive and store certain types of information about your online interaction with us. These may include session information, page response times, page interaction information, and methods used to browse away from the page. We may also collect information to help us identify your device for fraud prevention and diagnostic purposes.
Processing personal data of a child or person with disability with special care:
- We do not intend to directly collect personal data from children below the age of (18).If we identify that we have unintentionally collected personal data from a child below the age of 18, we will remove personal data from our records as soon as practical.
- Personal data collected may be used to perform age verification for enforcinge parent or guardian consent.
Using your personal data for identified purposes:
We may use your data in manners including but not limited to:
- Order processing/ fulfilment:
- To process and ship your orders and to inform you about the status of your orders.
- To process order returns for products you purchase on our platforms.
- Order support:
- For consumer service purposes including responding to your enquiries, examples include, order status, product support, product question/ complaint, and general feedback.
- For product and service personalization based on your based interaction with us.
- Events, campaigns and other marketing promotions:
- To invite participation in competitions, contests, sweepstakes and communicate products promotions from Plum.
- To communicate information to you and to manage your subscription to our newsletter(s) or other promotional communications.
- To reach out to you about offerings from Plum.
- To improve our future offerings, including products and services.
- To track products, you buy when you click on one of our display adverts and go on to purchase something from a selection of our retail partners.
- To understand your likes and dislikes to tailor our web content, products, and offerings.
Research & Other purposes:
- To understand your impression about our products before they are launched.
- For internal training and quality assurance purposes.
Consented Data from Third Parties: We may also use personal data you have provided to selected third-parties and consented to be shared, like your age, life stage, lifestyle and wider interests to identify people who we think will have similar interests to you and who we believe will be interested in similar advertising.
PERSONAL DATA SHARING AND DISCLOSURE FOR IDENTIFIED PURPOSE:
- Within Pureplay, we may share your personal data for business and operational purposes and with third parties under the following circumstances:
- Third Parties:
- Third Party Service Providers help us run our business processes, for examples include, order processing, payment collection, website hosting, process payments, research companies, support services, website development, etc.
- Other Third Parties include advertisers, advertising networks, advertising servers, social media networks, and analytics companies or other third-parties in connection with marketing, promotional and other offers, as well as product information.
- Third Party Service Providers are only allowed to process your personal data on our behalf for the specific purposes that they have been onboarded to perform.
- Third Party Service Providers are required to protect and securely process any personal data shared by Pureplay.
- Business Transfers:
- As Pureplay continues to develop the business, it may sell or purchase assets or business, acquire stake in companies or divest stake. In such transactions, your personal data generally is one of the transferred assets but remains subject to the promises made in any pre-existing Privacy Notice (unless you consent otherwise).
- If another entity acquires us, our businesses or substantially all or part of our assets, or assets related to websites, your personal data will be disclosed to such entity as part of the due diligence process and will be transferred to such entity as one of the transferred assets.
- Legal Purposes: We may disclose your personal data to comply with a legal obligation.
- Regulatory requirement: We will share your personal data with local regulatory bodies for the purpose of investigation or compliance as and when requested.
SECURITY SAFEGUARDS FOR STORING PERSONAL DATA WITHIN OUR ECOSYSTEM:
- We use technical and organizational measures to safeguard your personal data. We take every effort to protect your personal data from misuse, interference, loss, unauthorized access, modification, or disclosure.
- We have implemented appropriate security safeguards to deal with any suspected personal data or security breach.
- If you suspect any misuse or loss or unauthorized access to your personal data, please let us know immediately by contacting our grievance officer (details listed below).
LINKS TO THIRD PARTY SITE/ APPS
- Our website may, from time to time, contain links to and from other websites or applications of third parties. Please note that if you follow a link to any of these websites or applications, such websites or application will apply different terms to the collection and privacy of your personal data, and we do not accept any responsibility or liability for these policies. When you leave our website, we encourage you to read the privacy policy of every website or application you visit.
RETAINING YOUR RECORDS:
We retain your personal data for as long as necessary to achieve our business purpose(s) specified in this privacy notice and to provide you access to and use of our website, your account(s) on our platform(s), or for other essential purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements and as long as processing and retaining your data is necessary.
- Even if we delete your personal data, including on account of exercise of your right to erasure, it may be stored within our backups or on archival media for the purpose of audit, legal, tax or regulatory purposes only.
- The criteria used to determine our retention periods include:
- The length of time we provide the services to you (for example, for as long as you have an account with us or keep using the services);
- The length of time we have an ongoing relationship with you;
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); and
- Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, government investigations or regulatory considerations).
HONORING YOUR PRIVACY RIGHTS:
You have various rights in relation to your personal data that we hold about you. To get in touch with us about any of your rights under the Digital Personal Data Protection (DPDP) Act, 2023, please reach out to our grievance officer. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
You may be entitled to the following rights in relation to your personal data:
- Right to access: Upon request, the following data about you shall be provided by us:
- a summary of personal data which is being processed by us and the processing activities undertaken performed for such personal data;
- details of all data processors with whom the personal data has been shared along with a detail of the personal data shared.
- Right to correction and update: You may request correction of personal data where it is identified that your personal data records are inaccurate, misleading, incomplete or requires update.
- Right to erasure: You may request for erasure of your personal data stored with us. Upon receipt of such a request, the personal data shall be erased from our system(s) within in the required timeline, unless retention of this data is necessary for any of the purpose(s) specified in this notice or for compliance with any law for the time being in force.
- Right to grievance redressal: You may raise a grievance with us regarding the performance of our obligation in relation to your personal data or regarding the exercise of your rights pertaining to Data privacy. If your grievance is not addressed, you may further reach out to the Data Protection Board.
- Right to nominate: You may exercise your right to nominate an individual who shall exercise data privacy rights on your behalf in the event of your death or incapacity. Incapacity here refers to the inability to exercise rights due to unsoundness of mind or infirmity of body.
- Right to withdrawal of consent: Where we have obtained your consent to process your personal data for certain purposes, you may withdraw this consent at any time, and we will cease to carry out the activity that you previously consented to unless we consider that there is an alternative and strong compelling legal basis to justify our continued processing of your personal data for this purpose.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during the period for which we hold it.
AVAILABLE TO ADDRESS YOUR PRIVACY QUERIES:
For any query or grievance with respect to this privacy statement or to exercise your privacy rights, you can reach out to our grievance officer. Details of the Grievance officer are:
Grievance Officer Name: Mr. Ajay Gopalakrishnan
Address: 1st Floor, Lodha i-Think Techno Campus, A Wing, Chirak Nagar, Thane Maharashtra 400607
Email address: grievance.officer@teampureplay.com
Contact Number: +91 75064 96604
from: 9:30 AM to 5:30 PM from Monday to Friday except Public, National & Festival Holidays
KEEP YOUR EYE OUT FOR CHANGES TO OUR PRIVACY NOTICE:
We may change this privacy statement from time to time. If we make any changes to this policy, we will change the "last updated date" below. You agree that your continued use of our platform after such changes have been published will constitute your acceptance of such revised policy. We will notify you and seek additional consent before using your personal data for a new purpose that is inconsistent with the original purpose for which we collected it.
Last updated date: 28th July 2025
CONSENT
I acknowledge and agree to the terms contained in this data privacy notice, which shall be effective for the entire duration of my relationship with Pureplay skin sciences (India) Private limited as a user of this online portal & app and until Pureplay skin sciences (India) Private limited retains records of the captured personal information as specified above.