Privacy Policy
This Privacy Policy describes how Hairmett collects, uses, and protects your personal data when you visit our website, place an order, or interact with us on Instagram. It is compliant with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
By using hairmett.com or placing an order with us, you consent to the practices described below.
1. Information We Collect
1.1 Information You Provide
- Full name
- Phone number and / or Instagram handle
- Delivery address
- Helmet size (S / M / L / XL / XXL)
- Photos shared for fit or feedback purposes
- Referral source (how you found Hairmett)
- Demographic information voluntarily provided (e.g. age range, gender, city)
- Payment confirmation (processed via Razorpay — we do not store card or UPI credentials)
1.2 Information Collected Automatically
This data is collected via cookies and analytics tools including Google Analytics and Meta Pixel (See Section 6):
- Browser type, device, and operating system
- Pages visited, time on site, and navigation patterns
- IP address and approximate location
- Referral URLs and traffic sources
1.3 Payment Data
All payments are processed by Razorpay, a PCI-DSS compliant gateway. Hairmett does not store, access, or process raw payment credentials. Razorpay’s privacy policy applies to their handling of payment data: razorpay.com/privacy.
2. How We Use Your Information
- To process and fulfil your orders
- To communicate about order status, shipping, and delivery
- To respond to queries and support requests
- To improve our products and customer experience
- To understand how customers discover and use Hairmett
- To send product updates or offers — only with your consent
- To comply with applicable legal obligations
We do not use your data for automated decision-making or profiling that has legal or similarly significant effects.
3. Legal Basis for Processing
Under the DPDP Act, 2023, we process your data on the following grounds:
- Consent: You have given explicit consent by submitting an order or inquiry.
- Contractual necessity: Processing is required to fulfil your purchase.
- Legitimate interest: Analytics and product improvement, balanced against your privacy rights.
- Legal obligation: Where required by law (e.g. GST records, dispute resolution).
4. Data Sharing
We do not sell, rent, or trade your personal data. Data is shared only with:
- Razorpay: For payment processing.
- Logistics and courier partners: Name, address, and phone number only.
- Analytics providers: Google Analytics, Meta Pixel (anonymised where possible).
- Legal authorities: Only where required by law or court order.
All third-party partners are required to handle your data in accordance with applicable data protection law.
5. Data Retention
Data no longer required is securely deleted or anonymised. We hold data according to these timelines:
6. Cookies and Tracking
Our website uses the following types of cookies:
- Essential cookies: Required for the website to function.
- Analytics cookies: To understand how visitors use our site (Google Analytics).
- Marketing cookies: To show relevant ads (Meta Pixel).
You can manage or disable cookies through your browser settings. Disabling essential cookies may affect site functionality. Non-essential cookies are only placed with your consent where required by law.
7. Your Rights
Under the DPDP Act, 2023, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data (subject to legal retention requirements)
- Withdraw consent at any time, without affecting prior lawful processing
- Nominate a person to exercise your rights on your behalf
To exercise any of these rights, contact us at hairmett.shop@gmail.com. We will respond within 30 days of a verifiable request.
8. Data Security
We implement appropriate technical and organisational safeguards, including:
- Secure HTTPS connections on our website
- Access controls limiting who can view customer data
- Encrypted payment processing via Razorpay
No method of internet transmission is 100% secure. In the event of a data breach posing risk to your rights, we will notify you and the Data Protection Board of India as required by law.
9. Children’s Privacy
Hairmett’s products and services are not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, contact us and we will promptly delete it.
10. Third-Party Links
Our website may link to third-party platforms such as Instagram and Razorpay. We are not responsible for their privacy practices. We encourage you to review their policies independently.
11. Changes to This Policy
We may update this policy from time to time. The “Last Updated” date at the top will reflect any changes. Continued use of our website after updates constitutes acceptance of the revised policy. For material changes, we will provide prominent notice on our website.
12. Contact Us
Hairmett
Email: hairmett.shop@gmail.com
Instagram: @hairmett