Privacy policy

Privacy Policy — NEWISH

This Privacy Policy explains how personal data is collected, used, disclosed, stored and protected when you visit www.newish.in (“Website”), create an account, place an order, communicate with customer support or otherwise use the Website and related services (“Services”).

The Website is operated under the NEWISH brand by Kharesiya Brands Private Limited. NEWISH maintains its own brand identity and offers hair-care, skin-care, personal-care, wellness and personal-safety products, including carrier oils, essential oils, aloe vera gel, vegetable glycerine and personal-safety sprays. For the purposes of applicable data-protection law, Kharesiya Brands Private Limited is responsible for the processing of personal data described in this Privacy Policy.

The Website is hosted on Shopify, which provides the e-commerce platform through which the Services are made available. By using the Services or providing personal data, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will seek it through an appropriate notice or affirmative action.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through:

the Website and customer accounts;
product enquiries, orders, payments, delivery and after-sales support;
email, telephone, WhatsApp, SMS, contact forms and social-media communications;
customer reviews, feedback or complaint submissions;
customer-support interactions, including human and AI-assisted voice services; and
cookies, analytics and similar technologies used on the Website.

This Privacy Policy does not govern third-party websites, applications or services that operate independently and publish their own privacy notices.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect the following categories of personal data:

2.1 Identity and Contact Data

Name, telephone number, email address, billing address, delivery address, postal code and other information required to identify or contact you.

2.2 Account Data

Account credentials, login information, saved addresses, communication preferences, wish-list information and account settings.

2.3 Order and Transaction Data

Products viewed, added to cart or purchased; order number; invoice information; discounts; payment status; cancellation, return, replacement or refund information; and previous transactions.

2.4 Payment Data

Payment method, transaction reference, payment status and limited payment-related information received from payment service providers. Full card details, UPI credentials or banking passwords are ordinarily collected and processed directly by authorised payment providers and are not intended to be stored by us.

2.5 Delivery and Fulfilment Data

Delivery address, contact details, shipment identifiers, courier details, tracking status, proof of delivery, delivery attempts and information needed to resolve a delivery issue.

2.6 Communications and Support Data

Emails, messages, complaint details, photographs, videos, invoices, product labels, packaging information, feedback and other information supplied when you contact us. This may include information voluntarily provided about a hair-care or skin-care routine, product suitability, sensitivity, irritation, allergy concern, adverse experience, damaged or leaking product, personal-safety product, or another support issue.

Please avoid providing medical, health, biometric or other sensitive information unless it is genuinely necessary for us to understand and respond to a specific support request. Product-related support is not a substitute for advice from a qualified medical, dermatological or other professional.

2.7 Device and Usage Data

Internet Protocol address, browser type, device type, operating system, referring pages, pages viewed, date and time of access, session information and interactions with the Website.

2.8 Marketing and Preference Data

Subscription status, campaign interactions, product interests, communication preferences and information used to measure the effectiveness of advertisements or promotions.

3. How We Collect Personal Data

We may collect personal data:

directly from you when you browse, register, order, communicate or submit a claim;
automatically through cookies, pixels, logs and similar technologies;
from Shopify and applications connected to the Website;
from payment gateways, banks and fraud-prevention providers;
from courier, fulfilment and logistics providers;
from customer-support, telephony and communication providers;
from advertising, analytics and social-media partners; and
from lawful public sources or other persons where necessary to verify or fulfil a request.

If you provide personal data concerning another person, you must be authorised to provide it and must ensure that the person is informed of the relevant processing.

4. Purposes for Which We Use Personal Data

We may process personal data for the following purposes:

4.1 Providing the Services

To create and manage accounts, process orders and payments, issue invoices, arrange fulfilment and delivery, provide tracking information, process cancellations or claims and provide customer support.

4.2 Communication

To send order confirmations, payment updates, shipment notifications, service messages, responses to enquiries and other communications necessary to manage the customer relationship.

4.3 Customer Verification and Fraud Prevention

To verify identity or order ownership, prevent unauthorised disclosure of order information, detect suspicious activity, protect accounts, investigate fraud and maintain Website and payment security.

4.4 Customer Support and Quality Improvement

To answer enquiries, assist with general product-selection or usage questions, resolve complaints, review supporting evidence, monitor service quality, train authorised support personnel, improve workflows and enhance human or automated customer-support systems.

Where you voluntarily report a sensitivity, irritation, allergy concern, adverse experience or personal-safety incident, we may use the information only as reasonably necessary to document, assess, escalate or respond to the support request, comply with law and protect legal rights.

4.5 Personalisation and Analytics

To understand Website usage, remember preferences, improve navigation, identify popular products, measure performance and provide relevant product recommendations.

4.6 Marketing

To send promotional communications or display relevant advertisements where you have consented or where otherwise permitted by law. You may withdraw marketing consent or unsubscribe at any time. Withdrawal will not prevent essential order or service communications.

4.7 Legal and Regulatory Purposes

To maintain statutory records, comply with tax, accounting, consumer-protection, product-safety and other legal obligations, respond to lawful requests, establish or defend legal claims and enforce our policies.

5. Grounds for Processing

We process personal data where:

you have provided valid consent;
processing is necessary to take steps requested by you or to perform an order or service;
processing is required for a purpose or legitimate use permitted under applicable law;
processing is necessary to comply with a legal obligation; or
processing is required to protect rights, prevent fraud, address security incidents or resolve disputes.

You may withdraw consent where processing is based on consent. Withdrawal will apply prospectively and may affect our ability to provide a feature or optional service that depends on the relevant data.

6. How We Disclose Personal Data

We may disclose personal data, only as reasonably necessary, to:

Shopify, which hosts and supports the Website;
payment gateways, banks and payment service providers;
warehouses, fulfilment partners, couriers and shipping aggregators;
customer-support, voice-AI, telephony, email, SMS and WhatsApp service providers;
cloud hosting, cybersecurity, fraud-prevention, analytics and technology providers;
advertising and marketing partners where permitted;
manufacturers, testing facilities, product specialists or insurers where reasonably necessary to investigate a product-quality or safety complaint;
professional advisers, auditors, insurers and service consultants;
government authorities, courts, regulators or law-enforcement agencies where legally required; and
a purchaser, successor or relevant adviser in connection with a lawful merger, restructuring, financing or transfer of business.

Service providers are expected to process personal data for authorised purposes and subject to applicable contractual and legal obligations. We do not authorise them to use customer data for unrelated purposes merely because they receive access to it.

7. Shopify and Other Platforms

Shopify processes personal data to provide the Website, checkout, account, security, analytics and other platform functions. Information submitted through the Website may be transmitted to Shopify and to applications or service providers used for store operations.

Shopify and other providers may independently process certain information under their own privacy notices. You should review those notices where a third-party service is used directly by you.

8. Cookies and Similar Technologies

The Website may use cookies, pixels, local storage and similar technologies for:

essential Website and checkout functions;
account login and security;
remembering preferences and cart contents;
analytics and performance measurement;
fraud prevention; and
advertising and campaign measurement.

You may manage cookies through available Website controls or browser settings. Disabling essential cookies may prevent parts of the Website or checkout from functioning correctly. Where consent is required for non-essential cookies, an appropriate consent mechanism may be provided.

9. Marketing Communications

We may send marketing messages where you have subscribed, consented or where otherwise permitted under applicable law. You may opt out by using the unsubscribe link, available preference controls or the contact details displayed on the Website.

Even after opting out of marketing, you may continue to receive non-promotional communications relating to orders, payments, delivery, account security, complaints, product-safety matters or legal notices.

10. Voice Calls, Recordings and Transcripts

Calls may be handled by human agents, automated systems or AI-assisted voice agents. Where enabled, recordings and transcripts may be used to:

identify and assist the customer;
retrieve and communicate order or shipment information;
document instructions, complaints, product concerns and escalation requests;
investigate disputes, fraud, product-safety concerns or service failures;
monitor service quality and compliance; and
improve authorised customer-support processes and systems.

The voice agent must not be treated as having authority to provide medical or legal advice or to approve an exception, refund, replacement, product claim or legal claim unless such approval is expressly confirmed through an authorised channel.

We may use third-party telephony, voice-processing or AI service providers to facilitate these interactions. Such providers may process call-related data on our behalf subject to applicable law and contractual arrangements.

11. Data Security

We use reasonable technical, organisational and access-control measures intended to protect personal data against unauthorised access, misuse, alteration, disclosure or loss. These measures may include restricted access, authentication controls, service-provider safeguards, monitoring and secure communication protocols.

No internet transmission or storage system can be guaranteed to be completely secure. You should protect account credentials, avoid sharing passwords or OTPs, and use secure channels when sending sensitive information.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer support, product-quality or safety complaint handling, accounting, taxation, fraud prevention, dispute resolution, legal compliance and enforcement of rights.

Retention periods may differ by data category. Data may be deleted, anonymised or securely archived when it is no longer required, subject to legal obligations, unresolved complaints, litigation holds or legitimate record-keeping requirements.

13. International Processing

Shopify and certain service providers may store or process information outside India. Where personal data is transferred or processed outside India, we will take reasonable steps to ensure that the transfer is undertaken in accordance with applicable Indian law and any restrictions notified by the Government of India.

14. Your Rights

Subject to applicable law, verification and lawful exceptions, you may request:

access to a summary of personal data being processed and relevant processing information;
correction, completion or updating of inaccurate or incomplete personal data;
erasure of personal data that is no longer required or lawfully retained;
withdrawal of consent for consent-based processing;
grievance redressal concerning the processing of personal data; and
nomination of another individual to exercise applicable rights in the event of death or incapacity, where provided by law.

We may request information reasonably necessary to verify your identity and protect your account before acting on a request. We will respond in accordance with applicable legal requirements.

15. Duties of Users

You must provide authentic information, avoid impersonation, not suppress material information while seeking correction or grievance redressal, and not submit false or frivolous complaints. You must comply with applicable law when exercising privacy rights.

16. Children’s Personal Data

The Website is intended for purchases and interactions by adults. The Website is not directed to children, and products should be purchased by an adult or used under appropriate adult supervision where applicable. Please do not submit a child’s photograph, health information or identifying details unless genuinely necessary for resolving a support or product-safety request.

A minor should not create an account, place an order or independently submit personal data. Where processing of a child’s personal data is necessary and subject to legal requirements, we may seek verifiable consent from a parent or lawful guardian. We do not knowingly undertake targeted advertising directed at children where prohibited by law.

17. Third-Party Links

The Website may contain links to external websites or social-media platforms. We do not control their privacy practices. Personal data provided directly to an external platform is governed by that platform’s privacy notice.

18. Grievance Redressal

You may submit a privacy question, request or grievance through the contact details displayed in the Contact Information or Contact Us section of the Website. Please provide sufficient details to identify the relevant account or interaction without disclosing unnecessary sensitive information.

We may verify your identity before responding. If you are dissatisfied with the response, you may pursue remedies available under applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, business practices, service providers, product categories or Website functionality. The revised policy will be posted on the Website with an updated date. Where required by law, additional notice or consent will be obtained.

20. Contact

Questions, requests and grievances concerning this Privacy Policy may be submitted through the customer-support and contact details displayed on the Website.