Thank you for choosing to be part of our community at StyleBook ("Company," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us at [email protected]
This privacy notice describes how we might use your information if you:
In this privacy notice, if we refer to:
The purpose of this privacy notice is to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. If there are any terms in this privacy notice that you do not agree with, please discontinue use of our Services immediately.
We are the Data Fiduciary for this information under the Digital Personal Data Protection Act, 2023, and we also follow the Information Technology Act, 2000 and the rules made under it. Our Services are offered in India, and your personal information is stored and processed on servers located in India.
In this privacy notice, we cover:
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services (such as by posting messages in our online forums or entering competitions, contests or giveaways) or otherwise when you contact us.
The personal information that we collect depends on the context of your interactions with us and the Services , the choices you make and the products and features you use. The personal information we collect may include the following:
Personal Information Provided by You. We collect names; phone numbers; email addresses; mailing addresses; usernames; passwords; job titles; contact or authentication data; and other similar information.
Business Information Provided by an SMB.If you register a business on the Services, we also collect your business name, address and location, business photographs and description, working hours and holidays, the services, packages, prices and offers you publish, the staff details you enter (including name, mobile number, role, photograph, working hours and commission rate), the customer records you create, and the payment records you enter for your own bookkeeping. Where you enter details of your staff or your customers, you are responsible for having the right to do so.
All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.
In Short: Some information - such as your Internet Protocol (IP) address and/or browser and device characteristics - is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services and other technical information. This information is primarily needed to maintain the security and operation of our Services , and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
In Short: We collect information regarding your geolocation, mobile device, push notifications, when you use our App.
If you use our App, we also collect the following information:
Each permission listed above is optional, and you may refuse it or withdraw it at any time in your device settings. Refusing a permission only disables the feature that needs it. Our Apps do not request access to your SMS messages, your call logs, your calendar, your microphone or your device sensors, and do not connect to your social media accounts.
This information is primarily needed to maintain the security and operation of our App, for troubleshooting and for our internal analytics and reporting purposes.
In Short: We do not store your payment credentials. Our payment gateway handles them.
Where a business purchases a paid subscription, the payment is processed by our authorised payment gateway partner, a payment aggregator regulated by the Reserve Bank of India. We do not collect or store your card number, expiry date, CVV, UPI PIN, bank account number or net banking password. These are entered directly with the payment gateway and its banking partners and are governed by their policies and by the applicable regulations.
What we do store is the record of the transaction: the amount, the date, the plan, the status, a payment reference from the gateway and, where you have set up automatic renewal, a mandate reference. We also store any tax registration number you give us for your invoices.
We will never ask you for your UPI PIN, your card CVV, your net banking password, or a one-time password (OTP). If anyone contacts you claiming to be from StyleBook and asks for these, please do not share them, and report it to us at [email protected] and to your bank.
In Short: We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.
We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.
We use the information we collect or receive:
In Short: We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.
We may process or share your data that we hold based on the following legal basis:
More specifically, we may need to process your data or share your personal information in the following situations:
In Short: We only share information with the following third parties.
We only share and disclose your information with the following third parties. If we have processed your data based on your consent and you wish to revoke your consent, please contact us using the contact details provided in the section below titled "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?".
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (like web beacons and pixels) on our Website to access or store information. These are used to keep the Website working and secure, and to understand in aggregate which pages are visited so that we can improve the Website. Most Web browsers are set to accept cookies by default; you can set your browser to remove or reject cookies, but if you do, certain features of the Website may stop working. Our mobile Apps do not use cookies.
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than thirty six (36) months past the termination of the user's account, except for invoices, payment records and tax documents, which we are required to retain for longer under applicable tax law, and any information needed for an ongoing dispute or investigation.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. Traffic between our Apps, our Website and our servers is encrypted using HTTPS/TLS, access to production data is restricted to those who need it, and we use one-time password (OTP) verification on your mobile number for account access. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cyber-criminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
If a personal data breach occurs, we will notify the affected users and the Data Protection Board of India within the timelines required by applicable law.
In Short: You may review, change, or terminate your account at any time, and you have rights over your personal information under applicable data protection law.
Under the Digital Personal Data Protection Act, 2023 you have the right to request access to and a copy of your personal information; to request its correction, completion or updating; to request its erasure; to withdraw a consent you have given; to nominate another person to exercise these rights on your behalf in the event of your death or incapacity; and to a grievance redressal mechanism. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws, normally within 30 days, and we may need to verify your identity first.
In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
If you are a resident in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
If you are a resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.
If you have questions or comments about your privacy rights, you may email us at [email protected]
If you would at any time like to review or change the information in your account or terminate your account, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with applicable legal requirements.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.
Opting out of email marketing: You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list - however, we may still communicate with you, for example to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes. To otherwise opt-out, you may:
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with a Service , you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services , but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
The Services are intended for users who are 18 years of age or older. StyleBook does not knowingly collect any Personal Identifiable Information from children under the age of 18, and we do not use anyone's information for tracking, behavioural monitoring or targeted advertising directed at children. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records and close the account.
You may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please email us at [email protected], use the Delete My Account option in the App, or use the contact details below.
If you have questions or comments about this notice, you may email us at [email protected], call us on 79 7700 7711 (All days, 10:00 AM to 7:00 PM IST), or write to us at C 204-205, 1st Floor, Disma Complex, Kalamboli, Navi Mumbai, Maharashtra – 410218, India.
In accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, any complaint about your personal information or about this notice may be raised with our Grievance Officer, who is also the person able to answer questions on our behalf about how we process personal data:
Please write "Personal data request" in your subject line and include your registered mobile number so that we can verify and locate your record. We will acknowledge your complaint within 48 hours and resolve it within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
