Privacy Policy
Last Updated: 18 December 2025
This Privacy Policy ("Policy") is issued by CosmaCube™ ("CosmaCube", "we", "our", "us") and governs the collection, use, processing, storage, disclosure, and protection of personal data of individuals who access, browse, or otherwise interact with the website www.cosmacube.com, including all related digital interfaces, features, and services (collectively referred to as the "Platform"). CosmaCube™ recognises the importance of safeguarding personal data and is committed to complying with all applicable data protection laws in India, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules framed thereunder.
1. Definitions
For the purposes of this Policy, "Personal Data" shall mean any data about an individual who is identifiable by or in relation to such data, including but not limited to name, contact details, address, online identifiers, and any other information capable of identifying such individual, whether directly or indirectly. "Data Principal", "Data Fiduciary", "Processing", and other capitalised terms shall have the meanings assigned to them under the DPDP Act, 2023, unless the context otherwise requires.
2. Scope and Applicability
This Policy applies to all Data Principals who visit, browse, register, or purchase products through the Platform, or who otherwise share personal data with CosmaCube™ in connection with its business activities. This Policy does not apply to personal data collected offline (unless explicitly stated), third-party websites or applications linked from the Platform, or individuals residing outside the territorial jurisdiction of India.
3. Consent and Acceptance
By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy and consent to the collection and processing of your personal data in accordance with this Policy and applicable laws. Where consent is required under law, CosmaCube™ shall process personal data only upon obtaining such consent, and you may withdraw your consent in accordance with Section 11 of this Policy.
4. Account Registration and Login Mechanism
CosmaCube™ currently follows an email-based authentication mechanism. Users may create and access accounts on the Platform using their email address only. Mobile number–based login, OTP authentication, or phone number verification is not implemented at present. Accordingly, mobile numbers are never used for login, account access, or authentication purposes.
5. Categories of Personal Data Collected
CosmaCube™ limits the collection of personal data to what is reasonably necessary for the purposes outlined in this Policy.
a) Account and Identification Data: Email address collected for account creation, identification, and login.
b) Order, Shipping, and Billing Data: Full name, email address, mobile number, shipping address, billing address, city, state, and PIN code, collected at the time of placing an order. Mobile numbers are collected solely to enable order fulfillment, delivery coordination, and customer support, including facilitating communication between customers and authorised courier partners during delivery.
c) Payment and Transaction Data: All payments on the Platform are processed through PCI-DSS compliant third-party payment gateway service providers. CosmaCube™ does not store or retain credit card details, debit card details, UPI information, or bank account credentials.
d) Technical, Device, and Usage Data: Information such as IP address, browser type and version, operating system, device identifiers, cookies, and analytics data may be collected automatically to ensure Platform security, functionality, and performance optimisation.
6. Methods of Collection
Personal data may be collected through various means, including but not limited to: (i) online forms on the Platform; (ii) order placement and checkout processes; (iii) email communications; (iv) customer support interactions; (v) cookies and similar tracking technologies; and (vi) authorised third-party service providers engaged by CosmaCube™.
7. Purposes of Processing
CosmaCube™ processes personal data for purposes including but not limited to: order processing and delivery; payment processing and refunds; customer support and grievance redressal; sending transactional communications; improving products, services, and user experience; internal analytics and business operations; fraud prevention and security monitoring; and compliance with applicable legal and regulatory obligations.
8. Legal Basis for Processing
Personal data is processed on the basis of contractual necessity, compliance with legal obligations, legitimate business interests, and consent of the Data Principal, as applicable under the DPDP Act.
9. Disclosure and Sharing of Personal Data
CosmaCube™ does not sell, rent, or commercially exploit personal data of its users. Personal data may be disclosed to authorised third parties including courier and logistics partners, payment gateway providers, IT infrastructure service providers, analytics partners, or government authorities, strictly on a need-to-know basis and subject to confidentiality and data protection obligations.
10. Data Retention and Storage
Personal data shall be retained only for such period as is necessary to fulfil the purposes for which it was collected, or as required under applicable laws. Thereafter, such data shall be deleted, anonymised, or archived in accordance with legal and compliance requirements.
11. Data Security Measures
CosmaCube™ implements reasonable technical and organisational safeguards including SSL encryption, secure servers, access controls, malware protection, and internal confidentiality measures to protect personal data against unauthorised access, disclosure, alteration, or loss. Notwithstanding the foregoing, no electronic transmission or storage mechanism is completely secure, and CosmaCube™ cannot guarantee absolute security of personal data.
12. Rights of Data Principals
In accordance with the DPDP Act, 2023, Data Principals have the right to access, correct, update, erase personal data (subject to legal obligations), withdraw consent, raise grievances, and nominate another individual to exercise their rights in the event of incapacity or death.
13. Third-Party Links
The Platform may contain links to third-party websites or applications. CosmaCube™ does not control and shall not be responsible for the privacy practices or content of such third parties.
14. Amendments to the Policy
CosmaCube™ reserves the right to amend or update this Policy at any time. Any changes shall be effective upon publication on the Platform with an updated "Last Updated" date. Continued use of the Platform shall constitute acceptance of the revised Policy.
15. Grievance Redressal Mechanism
Pursuant to applicable laws, CosmaCube™ has appointed a Grievance Officer to address concerns relating to personal data processing.
Grievance Officer: Mr. Rahul Bhatt
Address: H No. 37, Gadh Magari, Shobhagpura, Udaipur, Rajasthan – 313001
Mobile: 7297907739 (Official CosmaCube™ brand number, also displayed on product packaging)
Email: cosmacubeindia@gmail.com
Final Legal Clarification: Users authenticate accounts using email addresses only. Mobile numbers are collected strictly as part of order and delivery information to facilitate courier communication and customer support and are not used for login, registration, or authentication.
If you have any questions or concerns about our privacy policy or the handling of your personal information, please contact our customer support team.