Privacy Policy

---

Effective Date: September 4, 2026
Brand: Novus
Company: Novus Cosmetic
Novus Cosmetic, operating under the brand name Novus, is dedicated to safeguarding your personal data and digital privacy under the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. We recognize that cosmetic choices are deeply personal, requiring routine transaction details alongside individualized skincare parameters, lifestyle habits, and dermatological goals. This Privacy Policy outlines how Novus Cosmetic, an operating unit of Chauhan Enterprises Holdings, collects, stores, secures, and processes your digital personal data across our online store, digital mobile experiences, skin consultation portals, and interactive diagnostic tools. Whether you are ordering cosmetic formulations, completing hair-assessment questionnaires, or interacting with our customer care representatives, we enforce stringent administrative and technical safeguards to keep your information protected against unauthorized access, loss, or misuse. All data processing activities are carried out lawfully, strictly adhering to principles of purpose limitation, data minimization, and user transparency. By accessing our services, you acknowledge the practices described herein regarding our role as a Data Fiduciary. We encourage you to review this document carefully to understand your statutory rights under Indian law and our commitment to consumer digital trust.

1. Regulatory Scope: This privacy policy governs data processing by Novus Cosmetic within the territory of India in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and associated IT rules.
   
2. Account Creation Records: To establish and manage your Novus account, we collect your full legal name, verified mobile phone number, personal email address, and encrypted login credentials to facilitate secure purchasing and service continuity across our digital platforms.
   
3. Payment Security & Gateways: Online payments via UPI, Net Banking, credit cards, or debit cards are handled entirely by RBI-authorized, PCI-DSS compliant third-party payment gateways; Novus never stores your complete card digits, PINs, or UPI passwords.
   
4. Domestic Delivery Information: We collect your complete delivery address, landmark, PIN code, and mobile contact number to generate GST-compliant tax invoices and coordinate doorstep order transit through our contracted domestic logistics partners across Indian states and union territories.
   
5. Beauty Diagnostics & Quizzes: Voluntary responses provided in our online routine finders—such as skin type, scalp condition, cosmetic targets, and hair concerns—are collected solely to generate tailored skincare formulations and product combination suggestions for your daily use.
   
6. Skin Allergies and Sensitivities: Any self-disclosed dermatological conditions, past product sensitivities, or common ingredient intolerances are processed with your affirmative consent to warn against incompatible formulations and ensure you select safe topical products.
   
7. User-Generated Content: Reviews, unboxing videos, before-and-after photographs, and beauty routine testimonials submitted voluntarily for loyalty reward credits or public showcase are published on our digital platforms strictly with your prior explicit written authorization.
   
8. Virtual Shade-Matching AR: Our interactive camera-based shade-matching tools process live video frames temporarily in real-time within your local device memory to preview shades; we never extract, store, or profile permanent facial geometry or biometric data.
   
9. Technical Device Telemetry: When browsing our catalog, our servers automatically register your IP address, browser type, operating system version, mobile network identifiers, and connection timestamps to maintain web stability, detect unauthorized intrusions, and optimize performance across devices.
   
10. Cookie Implementation: We deploy necessary session cookies to maintain your shopping cart, along with functional and analytical cookies to recognize returning shoppers, retain site preferences, and understand aggregate user traffic flow across our online cosmetic storefront.
    
11. Advertising Pixels: Third-party tracking scripts, including Meta and Google analytics pixels, help measure ad campaign efficacy and display relevant beauty advertisements across partnered platforms; you may manage these permissions via your personal browser cookie preferences.
    
12. Social Media Authentication: If you register through third-party login providers like Google or Meta, we access only the basic name, confirmed email address, and profile identifier permitted by your personal privacy permissions on that external platform.
    
13. Order Fulfillment Operations: Collected personal details are utilized directly to generate GST receipts, pick and package cosmetic products, dispatch courier parcels, issue real-time tracking SMS alerts, and process customer return or refund requests efficiently.
    
14. Formulation Personalization: We evaluate diagnostic quiz responses using algorithmic models to curate customized product recommendations, advise on step-by-step skincare routines, and suggest specific serum or shampoo formulations aligned with your unique personal beauty profile.
    
15. Promotional Email Communications: With your clear consent, we share newsletters, newly launched product notifications, and seasonal cosmetic offers via email; every communication includes an easily accessible, immediate one-click link allowing you to revoke promotional consent instantly.
    
16. Promotional SMS and WhatsApp Alerts: Direct transactional notifications, flash-sale updates, and delivery alerts are dispatched to your registered mobile number in compliance with TRAI regulations; you can opt out of non-essential marketing broadcasts anytime by replying "STOP."
    
17. Cosmetic Adverse Event Logging: In compliance with the Drugs and Cosmetics Act and Central Drugs Standard Control Organisation (CDSCO) safety guidelines, we log and investigate reported customer skin reactions to verify batch safety and maintain statutory cosmetic vigil records.
    
18. Fraud Prevention & Network Defense: We monitor automated purchase behaviors, payment attempts, and account access patterns to stop payment fraud, address bot attacks, and protect honest consumers and our brand from unauthorized digital activities.
    
19. Logistics Partner Disclosures: Your delivery address, customer name, and contact telephone number are transmitted strictly to licensed courier partners and domestic delivery networks solely to deliver physical cosmetic consignments to your specified location.
    
20. Third-Party Service Providers: We collaborate with vetted Indian and global SaaS vendors—such as cloud hosts, transactional SMS gateways, and CRM platforms—who are contractually constrained to process data exclusively under our documented instructions and security standards.
    
21. No Data Commercialization: Novus does not sell, rent, trade, or distribute your personal identity, contact database, or beauty quiz answers to unauthorized third-party brokers, advertisers, or data aggregators for monetary or separate commercial gain.
    
22. Corporate Reorganization: In the event of a merger, acquisition, restructuring, or transfer of brand assets within Chauhan Enterprises Holdings or with third parties, personal data records will be transferred securely under existing, unbroken privacy terms.
    
23. Statutory Law Enforcement Demands: We may share personal data if required under Indian law, binding court summons, directions of law enforcement agencies, or orders from judicial or regulatory authorities issued under valid legal process.
    
24. Right to Access Information: In accordance with the DPDP Act, 2023, you have the right to request a summary of your personal data processed by Novus, including the identities of third-party processors with whom it was shared.
    
25. Right to Correction and Erasure: You maintain the statutory entitlement to review, correct inaccurate personal information, update incomplete profiles, or request the permanent deletion of non-essential personal records from our active operational databases.
    
26. Right to Nominate: Under Indian data protection law, you possess the right to designate or nominate any legal representative who may exercise your consumer data privacy rights in the event of death or physical/mental incapacity.
    
27. Children's Data Protection: Novus platforms are strictly intended for adult consumers; in compliance with Section 9 of the DPDP Act, 2023, we do not knowingly process personal data of individuals under 18 years without verifiable parental consent.
    
28. Reasonable Security Safeguards: We implement comprehensive technical, physical, and administrative safeguards—including SSL/TLS encryption, restricted access protocols, and regular cybersecurity reviews—to protect your personal information against breach, unauthorized tampering, or leakages.
    
29. Retention Timeframes: Personal records are retained strictly as long as your account remains operational, for seven years to comply with Indian GST and corporate tax audit requirements, or until the original processing purpose has been met.
    
30. Grievance Officer & Inquiries: For privacy grievances or exercising your rights under the DPDP Act, contact our Grievance Officer at customercare@novuscosmetic.com; grievances are acknowledged within 24 hours and resolved within statutory Indian timelines.