ON ALL My Orl-Care PRODUCTS
This Diwali, treat yourself to festive sweets and give your smile the care it deserves with My Orl-Care!
Effective Date: 1st July 2025
At MYORL-Care Pvt. Ltd. ("MyOrl-Care", "we", "us", or "our"), we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, process, store, share, and protect your personal data when you visit www.myorlcare.com, purchase our products, communicate with us, or use our services.
This Privacy Policy has been prepared with reference to applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, as and when their relevant provisions become applicable.
We may collect the following categories of personal data:
a. Personal and Contact Information
Full name
Email address
Mobile number
Billing and shipping addresses
b. Order and Transaction Information
Products purchased
Order details and purchase history
Payment transaction references and payment status
Refund, return, and delivery information
Payments may be processed through authorised third-party payment gateways. We do not intentionally collect or store complete debit or credit card details on our own systems.
c. Technical and Usage Information
IP address
Browser type and device information
Website browsing activity
Cookies and similar tracking technologies
Website preferences and interactions
d. Customer Support Information
Information you voluntarily provide when contacting our customer support team, submitting feedback, making enquiries, or requesting assistance.
We aim to collect only the personal data reasonably necessary for the purposes described in this Privacy Policy.
We may collect and process your personal data for the following purposes:
Order Processing: To confirm, process, dispatch, deliver, and manage orders.
Payment Processing: To facilitate payments, refunds, and related transactions.
Customer Support: To respond to enquiries, complaints, returns, and service requests.
Order Communication: To send order confirmations, shipping updates, and delivery notifications.
Website Improvement: To analyse website performance, enhance functionality, and improve customer experience.
Marketing Communications: To send promotional offers, newsletters, product updates, or marketing messages where permitted by applicable law and based on consent where required.
Security and Fraud Prevention: To detect suspicious transactions, prevent unauthorised access, and protect our website and customers.
Legal Compliance: To comply with applicable laws, tax requirements, accounting obligations, and lawful government requests.
We will process personal data only for lawful purposes and on an applicable legal basis, including consent or certain legitimate uses recognised under the DPDP Act, as applicable.
Where consent is required under applicable law, we will seek your consent through a clear and appropriate notice explaining the personal data collected and the specific purposes for which it will be used.
Consent will be requested through an affirmative action and will not be inferred solely from silence or inactivity.
You may withdraw your consent for consent-based processing at any time by contacting us at:
Email: [email protected]
Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.
Please note that withdrawing consent for information necessary to provide a requested service may affect our ability to continue providing that service.
We may retain or process certain personal data despite withdrawal where required or permitted under applicable law.
We do not sell or rent your personal data to third parties.
We may share relevant personal data with trusted service providers only where reasonably necessary for legitimate business and operational purposes, including:
E-commerce and website hosting providers, including Shopify.
Authorised payment gateways and payment processing partners.
Logistics, courier, and delivery service providers.
Customer support and communication service providers.
Marketing, analytics, and technology service providers, subject to applicable consent and legal requirements.
Professional advisers, auditors, and regulatory or government authorities where legally required.
We seek to ensure that service providers processing personal data on our behalf are subject to appropriate contractual obligations and security measures.
We remain responsible for fulfilling applicable data protection obligations relating to processing carried out on our behalf.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.
Such measures may include, as appropriate:
Secure connections and encryption.
Access controls and authentication.
Restricted access to customer information.
Monitoring and security reviews.
Appropriate safeguards when working with third-party service providers.
Although we take reasonable precautions, no internet-based system can guarantee absolute security.
In the event of a personal data breach, we will take appropriate corrective action and provide notifications to affected individuals and relevant authorities where required under applicable law.
Our website may use cookies and similar technologies to:
Enable essential website functionality.
Maintain shopping cart and checkout functionality.
Remember user preferences.
Analyse website traffic and performance.
Measure marketing effectiveness.
Deliver personalised advertisements where permitted.
Some cookies may be placed by third-party analytics, advertising, payment, or technology service providers.
Where required by applicable law, we will obtain appropriate consent before using non-essential tracking technologies.
You can manage or disable cookies through your browser settings or any cookie preference controls made available on our website.
Disabling certain cookies may affect website functionality.
Subject to applicable law, including the relevant provisions of the DPDP Act when in force, you may exercise the following rights:
a. Right to Access Information
Request information about the personal data being processed and the processing activities covered by applicable law.
b. Right to Correction and Updating
Request correction of inaccurate or misleading personal data, completion of incomplete personal data, and updating of your information.
c. Right to Erasure
Request deletion of personal data where applicable, unless continued retention is necessary for an authorised purpose or required by law.
d. Right to Withdraw Consent
Withdraw consent previously given for processing based on consent.
e. Right to Grievance Redressal
Raise concerns regarding the processing of your personal data and seek resolution through our grievance redressal mechanism.
f. Right to Nominate
Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under applicable law.
To exercise these rights, contact:
Email: [email protected]
Phone: +91-9028089555
We may request reasonable information to verify your identity before processing a request.
We will respond to requests and grievances within the timelines prescribed by applicable law.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required under applicable law.
This may include retaining information for:
Order fulfilment and customer support.
Returns, refunds, and warranty-related matters.
Accounting, taxation, and statutory compliance.
Fraud prevention, dispute resolution, and lawful claims.
When personal data is no longer required for its specified purpose, and no legal requirement justifies continued retention, we will delete or securely dispose of it in accordance with applicable law.
Where personal data has been shared with service providers processing it on our behalf, we will take appropriate steps concerning deletion as required by law.
Our website and products are intended to be purchased by adults.
Where processing involves personal data relating to a child, we will comply with applicable requirements under the DPDP Act and related rules, including obtaining verifiable parental or lawful guardian consent where required.
We will not knowingly undertake prohibited tracking, behavioural monitoring, or targeted advertising directed at children.
If you believe that a child has provided personal data without the necessary authorisation, please contact us at [email protected].
Some of our technology, payment, hosting, analytics, and other service providers may process or store personal data outside India.
Where such processing or transfer takes place, we will comply with applicable Indian data protection laws, including any restrictions or requirements notified by the Government of India.
We will take reasonable steps to ensure that personal data shared with relevant service providers receives appropriate protection.
We may contact you regarding:
Product launches and updates.
Promotional offers and discounts.
Newsletters and educational content.
Customer engagement campaigns.
We will obtain consent for promotional communications where required under applicable law.
You may opt out of marketing emails by using the unsubscribe link provided in such messages or contacting [email protected].
Opting out of marketing communications will not prevent us from sending essential transactional communications relating to orders, payments, deliveries, or customer service.
Our website may contain links to third-party websites, marketplaces, payment gateways, or other services.
These third parties may operate under their own privacy policies and data processing practices.
We encourage you to review their privacy policies before providing personal information.
We are not responsible for the independent privacy practices of third-party websites or services that are outside our control.
If you have any questions, complaints, or concerns regarding the collection, use, processing, or protection of your personal data, you may contact our privacy and grievance support team.
MYORL-Care Pvt. Ltd.
Email: [email protected]
Phone: +91-9028089555
Website: www.myorlcare.com
We will acknowledge and address privacy-related grievances in accordance with applicable legal requirements and prescribed timelines.
Where the DPDP grievance redressal provisions apply, we will make available the applicable grievance response period, which will not exceed the legally prescribed maximum of 90 days.
If your grievance remains unresolved after using our grievance redressal mechanism, you may have the right to approach the Data Protection Board of India in the manner provided under applicable law.
We may revise or update this Privacy Policy periodically to reflect:
Changes in applicable laws or regulations.
Changes to our business operations.
Updates to website functionality and services.
Changes in our data processing and security practices.
The revised Privacy Policy will be published on our website with an updated effective date.
Where required by applicable law, we will provide additional notice or seek fresh consent for changes to personal data processing.
For any questions regarding this Privacy Policy or your personal data, please contact:
MYORL-Care Pvt. Ltd.
Website: https://www.myorlcare.com
Email: [email protected]
Phone: +91-9028089555
We are committed to protecting customer privacy and maintaining transparency in our personal data processing practices.
