Privacy Policy – The Spa Origin

Effective Date: August 17, 2025

Website: https://thespaorigin.in

Brand / Business: The Spa Origin ("We", "Us", "Our")

At The Spa Origin, we value your trust and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your data when you visit or make a purchase on our website, in compliance with applicable Indian data protection laws (including the Digital Personal Data Protection Act, 2023 and Information Technology Rules).

1. Information We Collect

To process your orders and provide a seamless shopping experience, we collect:

  • Information You Provide Directly:

    • Order Details: Full name, shipping address, billing address, phone number, and email address.

    • Customer Support: Any messages or correspondence you send us via email or contact forms.

  • Payment Information:

    • All transaction processing (UPI, credit/debit cards, net banking, wallets) is securely handled directly by PCI-DSS compliant third-party payment gateways (e.g., Razorpay / PayU / Cashfree). The Spa Origin does not store your full card details, CVV, or banking passwords.

  • Automatically Collected Data:

    • Technical identifiers, including IP address, browser type, device info, time zone, and cookies to analyze traffic and maintain your cart session.

2. How We Use Your Data

We process your personal information strictly for legitimate operational purposes:

  • Fulfilling, packing, shipping, and delivering your purchased items.

  • Sending transactional notifications (order confirmations, dispatch alerts, and delivery updates) via SMS, Email, or WhatsApp.

  • Processing returns or replacements under our policy.

  • Preventing fraud, security breaches, and unauthorized transactions.

  • Sending promotional newsletters (only if you explicitly opt-in).

3. Data Sharing & Third Parties

We never sell, rent, or trade your personal information to third parties for commercial marketing purposes. We share data only with necessary service providers bound by strict confidentiality:

  • Logistics & Delivery Partners: (e.g., Delhivery, Shiprocket, Blue Dart) – to deliver packages to your address.

  • Payment Processors: To authorize payment authorization and issue refunds or store credits when applicable.

  • Analytics Tools: (e.g., Google Analytics, Meta Pixel) – to understand aggregated traffic trends.

  • Legal Compliance: If required by court order, law enforcement, or Indian statutory authorities.

4. Your Rights & Consent Management

Under Indian data protection laws, you have the following rights regarding your personal data:

  • Right to Access & Correct: You may request access to or correction of any inaccurate personal data we hold about you.

  • Right to Withdraw Consent: You may opt-out of marketing emails at any time by clicking "Unsubscribe" at the bottom of our emails or contacting support.

  • Right to Erasure: You can request the deletion of your account and personal data (except where retention is legally required for tax/accounting records).

5. Data Security & Storage

We employ SSL encryption, secure servers, and strict internal access controls to protect your personal data from unauthorized access or disclosure. All data is securely stored within server infrastructure serving the Indian region.

6. Cookies Policy

Our Site uses essential cookies to track items in your shopping cart and maintain session integrity. You can choose to block cookies via your browser settings, though doing so may limit your ability to check out properly.

7. Grievance Redressal & Contact Info

In accordance with Indian Information Technology rules and the DPDP Act, if you have any questions, concerns, or grievances regarding this Privacy Policy or your data, please contact our Grievance Officer: