Cherry Glitz Private Limited operates an online beauty and wellness marketplace connecting Customers with independent Beauty Partners across India. This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data under applicable Indian law, including the Information Technology Act, 2000, SPDI Rules, 2011, and DPDPA 2023 to the extent in force.
Last updated:
Cherry Glitz Private Limited ("Cherry Glitz", "we", "us", or "our") is a company incorporated under the Companies Act, 2013, with its registered office in Odisha, India. We operate an online beauty and wellness marketplace (the "Platform") accessible via our mobile application and website (www.cherryglitz.com) that connects users ("Customers") with independent beauty professionals, salons, spas, studios, and wellness providers ("Beauty Partners" or "Merchants") across India.
We are committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDPA"), to the extent it is in force.
This Privacy Policy ("Policy") governs the collection, use, storage, sharing, and protection of personal data when you access or use the Platform, whether as a Customer, a Beauty Partner, a job applicant, or a visitor.
"Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, contact information, device identifiers, location data, and financial information.
"Sensitive Personal Data or Information" ("SPDI") has the meaning assigned under the SPDI Rules, 2011, and includes passwords, financial information, health conditions, biometric data, and similar categories.
"Data Principal" or "you" means the individual whose personal data is being collected and processed by Cherry Glitz.
"Data Fiduciary" means Cherry Glitz, in its capacity as the entity determining the purpose and means of processing personal data.
"Processing" means any operation or set of operations performed on personal data, including collection, storage, use, sharing, disclosure, transfer, or deletion.
"Platform" means the Cherry Glitz mobile application, website, and any related technology services operated by Cherry Glitz.
"Beauty Partner" means any independent salon, spa, nail studio, tattoo artist, makeup artist, hairstylist, freelance professional, or wellness provider listed on the Platform.
"Third-Party Service Providers" means vendors and partners engaged by Cherry Glitz to provide services such as payment processing, cloud hosting, analytics, SMS delivery, and customer support.
"Consent" means a freely given, specific, informed, and unambiguous indication by the Data Principal of their agreement to the processing of their personal data.
"Cookies" means small text files placed on your device by the Platform to collect information about your browsing activity.
This Policy applies to all individuals who interact with Cherry Glitz, including:
Cherry Glitz processes your personal data for the following purposes:
Cherry Glitz processes your personal data on the following legal bases:
Consent: Where you have provided explicit consent, such as for location access, marketing communications, or social login. You may withdraw consent at any time, which shall not affect the lawfulness of processing carried out prior to withdrawal.
Contractual Necessity: Processing necessary to perform the contract between you and Cherry Glitz, including facilitating Bookings and processing payments.
Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, tax obligations, and court orders.
Legitimate Interests: Processing for purposes such as fraud prevention, Platform security, improving our services, and enforcing our policies, where such interests are not overridden by your fundamental rights.
Cherry Glitz does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We only share your data as described below.
When you make a Booking, we share your name, contact number, booking details, service address (for home service bookings), and any notes relevant to the service with the specific Beauty Partner to enable them to fulfil your appointment. Beauty Partners are required under their Partner Agreement to maintain the confidentiality of this information and not use it for any other purpose.
We engage trusted third-party vendors to support our operations. These include:
All third-party service providers are contractually obligated to use your data only for specified, limited purposes, maintain appropriate security standards, and not disclose it to any other parties.
For Legal Compliance: We may disclose your personal data to courts, law enforcement agencies, regulatory authorities, or government bodies where required by applicable law, court order, or legal process, or where necessary to protect the rights, property, or safety of Cherry Glitz, our users, or the public.
Business Transfers:In the event of a merger, acquisition, restructuring, or sale of all or part of Cherry Glitz's business or assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and the applicable privacy protections via email or a prominent notice on the Platform.
Your personal data is stored on secure servers located in India and/or in compliant cloud environments operated by our hosting partners. Cherry Glitz takes reasonable steps to ensure that cross-border data transfers, if any, are subject to equivalent privacy protections.
We retain your personal data for as long as your account is active or as necessary to: (a) provide you with the Platform's services; (b) comply with our legal obligations (e.g., financial records under tax laws); (c) resolve disputes; and (d) enforce our agreements.
Upon account deletion, we will erase or anonymise your personal data within 30 (thirty) days, except where retention is required by Applicable Law (for example, transaction records which may need to be retained for up to 7 years under Indian tax and financial laws).
Data that has been anonymised and can no longer identify you may be retained indefinitely for research, analytics, and business improvement purposes.
Under applicable Indian law, including the DPDPA 2023 (to the extent in force), you have the following rights in relation to your personal data:
Right to Access: You may request a copy of the personal data we hold about you, along with information about how it is being used and with whom it has been shared.
Right to Correction: You may request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
Right to Erasure: You may request deletion of your account and associated personal data. We will process such requests within 30 days, subject to retention obligations under Applicable Law.
Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
Right to Withdraw Consent: You may withdraw your consent for specific types of data processing (e.g., marketing communications, location access) at any time, without affecting the lawfulness of prior processing.
Right to Nominate: Under the DPDPA 2023, you have the right to nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
Right to Grievance Redressal: You have the right to lodge a complaint with our Grievance Officer (see Section 15) or with the Data Protection Board of India, once constituted under the DPDPA 2023.
To exercise any of these rights, please contact us at legal@cherryglitz.com. We will respond to all verified requests within 30 (thirty) days. We may need to verify your identity before processing certain requests.
Cherry Glitz uses cookies, web beacons, pixel tags, SDKs, and similar tracking technologies on the Platform to enhance your experience, analyse usage, and deliver relevant content.
You may manage or disable cookies through your browser or device settings. Disabling essential cookies may affect the functionality of the Platform. Disabling marketing cookies will not affect your ability to use the Platform but may result in less relevant advertising.
We may work with third-party advertising and analytics partners (including Google, Meta, and similar platforms) who may set their own cookies and tracking technologies on your device when you access our Platform. These are governed by the respective third parties' privacy policies.
Cherry Glitz requests access to your device's GPS location to display nearby Beauty Partners, enable address-based Bookings, and improve service recommendations. Location access is requested only with your explicit consent and will be clearly disclosed at the time of the request.
You may revoke location access at any time through your device settings. If you deny or revoke location access, you may still use the Platform by entering your address or location manually.
We do not share your precise real-time location with any third party other than the Beauty Partner required to fulfil a confirmed Booking, and only to the extent necessary for that purpose.
All payment transactions on the Platform are processed through Razorpay or such other PCI-DSS Level 1 compliant payment gateway as designated by Cherry Glitz. Cherry Glitz does not store, process, or have access to full payment card numbers, CVV codes, or banking passwords.
Payment data shared with our gateway partners is governed by their respective privacy policies and security standards.
Cherry Glitz stores only limited payment metadata (such as the last four digits of a card, payment method type, and transaction reference numbers) to facilitate refunds, dispute resolution, and accounting purposes.
You are advised not to share your UPI PIN, OTP, bank passwords, or card CVV with anyone, including Cherry Glitz employees or support staff. Cherry Glitz will never ask for such information.
The Cherry Glitz Platform is not intended for use by individuals under the age of 18 (eighteen) years. We do not knowingly collect, store, or process personal data from minors.
If we become aware that a minor has provided personal data to us, we will promptly delete such data and deactivate the associated account. Parents or legal guardians who believe their child has submitted personal data to Cherry Glitz should immediately contact us at hello.cherryglitz@gmail.com.
13.1 Cherry Glitz implements industry-standard technical, organisational, and physical security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These include:
In the event of a personal data breach that is likely to result in a risk to your rights, Cherry Glitz will notify the relevant authorities and, where required, affected individuals, in accordance with applicable law.
While we take all reasonable precautions, no method of data transmission or storage over the internet is 100% secure. You are responsible for keeping your account credentials confidential. If you suspect unauthorised access, please contact us immediately at hello.cherryglitz@gmail.com.
The Platform may contain links to third-party websites, social media platforms, or services. Cherry Glitz is not responsible for the privacy practices, security, or content of such third-party services. We encourage you to review the privacy policies of any third-party services you interact with.
If you sign in to the Platform via Google, Facebook, or Apple, your interaction with those services is governed by their respective privacy policies. Cherry Glitz only receives the limited information described in Section 3.3.
In accordance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020, Cherry Glitz has designated a Grievance Officer to address privacy-related concerns:
Cherry Glitz primarily stores and processes your data in India. Some of our Third-Party Service Providers may process data outside India (for example, cloud infrastructure or analytics tools with servers in other countries).
Where personal data is transferred outside India, Cherry Glitz shall ensure that such transfers are made in compliance with applicable Indian law, including any restrictions or conditions prescribed under the DPDPA 2023 or notifications issued by the Central Government.
Some beauty and wellness services may involve the collection of health-related information (such as skin conditions, allergies, medical history relevant to a treatment, or pregnancy status). Such information falls within the definition of Sensitive Personal Data or Information under the SPDI Rules, 2011.
We collect health or sensitivity-related information only where you voluntarily provide it for the purpose of enabling a safer or more appropriate service delivery (for example, disclosing a skin allergy to a salon before a facial treatment).
Such information shall only be shared with the relevant Beauty Partner for the purpose of fulfilling the specific Booking and shall be treated with the highest degree of confidentiality. We shall not use health-related information for marketing, profiling, or any other purpose without your explicit consent.
With your consent, Cherry Glitz may send you promotional messages, offers, newsletters, and updates about new features, Beauty Partners, or services via SMS, email, WhatsApp, or push notifications.
18.2 You may opt out of marketing communications at any time by:
Opting out of marketing communications will not affect your receipt of transactional communications (such as booking confirmations, payment receipts, and account alerts), which are necessary for the provision of the service.
19.1 Cherry Glitz may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or other factors. We will notify you of any material changes via:
Material changes shall take effect no earlier than 7 (seven) days after the notice is issued, unless a shorter period is required by Applicable Law.
Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request account deletion.
The most current version of this Policy shall always be available at www.cherryglitz.com/privacy-policy.
This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the SPDI Rules, 2011, the Digital Personal Data Protection Act, 2023 (to the extent in force), and all other applicable statutes.
Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Odisha, India.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:
Aggregated / Anonymised Data: We may share aggregated, de-identified, or anonymised data - which cannot reasonably be used to identify you - with business partners, advertisers, researchers, or for public reporting. Such sharing does not constitute a disclosure of personal data.
With Your Consent: We may share your personal data with other parties where you have provided explicit consent to such sharing, for example when you participate in a co-branded promotion or third-party integration.