Privacy Policy

This website, www.decalcify.in, is operated by Ritual Catalyst Pvt. Ltd. ("Decalcify", "we", "us" or "our"), the owner of the DeCalcify™ brand of hard-water scalp and pre-wash care products. This Privacy Policy explains what personal information we collect when you browse our website or buy from us, why we collect it, and the choices you have. By using this website you agree to the practices described here.

We follow a minimal-data approach and only collect what we need to serve you:

• Contact information — your name, email address and phone number, provided when you place an order, join a pre-order or early-access list, or send us a consultation request.
• Shipping address — the delivery and billing address you provide at checkout.
• Order history — the products you ordered, order value, date, delivery status and any communication about your order.
• Information you choose to share — such as your city, water type or scalp concerns when you use our water-hardness checker or consultation form.
• Technical and usage data — IP address, browser type, device information, pages requested and timestamps, recorded automatically by our hosting infrastructure (see Section 5).

We do not collect or store your full card number, CVV, UPI PIN, net-banking password or other sensitive payment credentials on our servers.

Online payments are processed by third-party payment gateways such as Razorpay. When you pay, you interact directly with the gateway's secure interface, and your card, UPI or net-banking details are handled by the gateway in accordance with PCI-DSS standards and applicable Reserve Bank of India guidelines.

We receive only the limited information needed to confirm and reconcile your order — for example, a transaction ID, payment status, amount, payment method type and the contact details you entered. The gateway's own privacy policy governs how it processes your payment data.

We use only essential cookies and similar browser storage that are strictly necessary for the website to function — for example, remembering the items in your cart during a visit, keeping the checkout process secure and remembering basic preferences.

We do not use essential cookies to build advertising profiles. You can block or delete cookies in your browser settings, but parts of the website (such as the cart and checkout) may not work correctly without them.

Our website is hosted on Netlify. Like most web hosts, Netlify automatically records standard server and request logs — such as IP address, requested URL, referrer, user agent and time of request — to deliver the website, protect it against abuse and diagnose technical issues. These logs are retained for a limited period under Netlify's own data retention practices and are used by us only for security, performance and troubleshooting.

We use your personal information only for the following purposes:

• To process, confirm, ship and deliver your orders, including Cash on Delivery orders.
• To send order confirmations, shipping updates and invoices by email, SMS or WhatsApp.
• To respond to consultation requests, questions, complaints and return requests.
• To notify you about pre-orders, restocks or offers — only where you have signed up, and you can opt out at any time.
• To detect and prevent fraud, abuse and security incidents.
• To comply with tax, accounting and other legal obligations.

We do not sell or rent your personal information. We share it only with trusted service providers who help us run our business, and only to the extent necessary:

• Payment gateways (such as Razorpay) to process payments and refunds.
• Courier and logistics partners to deliver your order.
• Hosting and technology providers (such as Netlify) that operate our website.
• Government, regulatory or law-enforcement authorities where required by law or a valid legal order.

Some of these providers may process data on servers located outside India. Where this happens, we take reasonable steps to ensure your information is protected in line with this policy and applicable Indian law.

We implement reasonable security practices and procedures, as required under Section 43A of the Information Technology Act, 2000 and the associated rules, including encrypted (HTTPS) connections and restricted access to personal information on a need-to-know basis.

We keep your personal information only for as long as needed to fulfil the purposes described in this policy, or as required by law (for example, invoice and tax records under the GST laws). When it is no longer needed, we delete or anonymise it. No method of transmission over the internet is completely secure, but we work to protect your information and will notify you and the relevant authorities of a personal data breach where required by law.

Subject to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (as and when its provisions come into force), you have the right to:

• Access a summary of the personal information we hold about you.
• Correct or update inaccurate or incomplete information.
• Request erasure of your information, unless we are required to retain it for a legal or regulatory purpose.
• Withdraw consent at any time, including unsubscribing from marketing messages. Withdrawal does not affect processing already carried out.
• Nominate another person to exercise these rights in the event of death or incapacity.
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before acting on your request.

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age without verifiable parental consent. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated version will be posted on this page with a revised "Last updated" date. Continued use of the website after changes are posted means you accept the updated policy.

In accordance with the Information Technology Act, 2000 and the rules made under it, questions, requests or complaints about this Privacy Policy or your personal information may be addressed to our Grievance Officer:

• Grievance Officer, Ritual Catalyst Pvt. Ltd.
• Gurgaon (Gurugram), Haryana, India
• Email: support@decalcify.in

We will acknowledge your grievance within 24 hours and aim to resolve it within 15 days of receipt.