Privacy policy

Last updated 2 October 2026

NUREN ("we") runs the NUREN website and apps. This policy explains what personal data we collect when you shop with us, why, who we share it with and the choices you have, in line with the Digital Personal Data Protection Act, 2023. We collect only what we need to run the shop, and we never sell your data.

What we collect

• Account: your name, mobile number and/or email, and your Google account email if you sign in with Google.
• Profile: your date of birth, to confirm you're 18 or older, and — only if you choose to tell us — your gender, to show you better-fitting styles. You can change or remove your gender at any time in your account.
• Orders: delivery addresses, the items you buy, order and return history, and messages you send us.
• Payments: the payment method type and reference numbers from our payment partner (for example "UPI · okicici" or the last digits of a card). We never receive your full card number, CVV, UPI PIN or banking passwords.
• Reviews: ratings, text and photos you choose to post, shown with your first name and last initial.
• Technical: your IP address and device information, used to keep sign-in secure and stop abuse; and, in the app, a notification token if you allow notifications.

Why we use it

• To create your account and sign you in with one-time codes.
• To confirm you're 18 or older: NUREN accounts are for adults only. If a date of birth shows someone is younger, we sign them out and don't keep their details.
• To take payment, deliver your order, and handle cancellations, exchanges and refunds.
• To send order updates by email or app notification (these are part of the service).
• To send offers and news — only if you opt in. You can opt out at any time in your account.
• To prevent fraud, keep the shop secure, and meet our legal and tax obligations (for example invoices).

Who we share it with

Only with the partners who help us run the shop, and only what each needs:

• Razorpay — to process online payments and refunds.
• Courier and shipping partners — your name, phone and address, to deliver parcels and collect returns.
• Amazon Web Services — hosting our website and sending emails (servers in Mumbai, India).
• Meta (WhatsApp) — your mobile number, to deliver sign-in codes on WhatsApp.
• Notification providers — to deliver app notifications.
• Google — only if you choose "Continue with Google".
• Government authorities — when the law requires it.

How long we keep it

We keep your account data while your account is open, and a record of recent sign-ins (device, time and network address) for up to 180 days to keep accounts secure. Order and invoice records are kept as long as tax and accounting laws require, even if you close your account. Sign-in codes expire within minutes and are stored only in scrambled form. Everything else is deleted or anonymised when it is no longer needed.

Your rights

You can ask us to show you the personal data we hold about you, correct or update it, or erase it (we keep only what the law requires, such as invoices). You can withdraw consent for marketing at any time, raise a complaint with our grievance officer, and nominate someone to exercise these rights for you. Most details can be edited yourself in your account; for anything else, write to us from the email or phone on your account.

Cookies

We use only the cookies the shop needs to work: to keep you signed in, remember your bag, and protect forms. We don't use advertising or cross-site tracking cookies. The sign-in cookie lasts 10 days.

To count our visitors we also set one cookie of our own holding a random number (no name, email or phone), kept for a year. With it we see how many people visit, which pages and products they look at, which site sent them and whether they use a phone or a computer; if you're signed in, it's linked to your account so we can tell whether a visit ended in an order. These counts stay with us and are deleted after 13 months; we don't store your IP address with them.

Security

Your data is encrypted in transit (HTTPS) and stored on secured servers with restricted staff access. No system is perfectly secure; if a breach ever affects your data, we will tell you and the authorities as the law requires.

Children

The shop is meant for adults. If you're under 18, please shop with a parent or guardian.

Changes

We'll update this page if our practices change, and tell you about significant changes by email or in the app.

Contact and grievances

If you have a complaint about an order, a product, a refund or how we handle your personal data, contact our grievance officer at poisesupport@gmail.com or +91 80829 51705. We acknowledge every complaint within 48 hours and aim to resolve it within one month of receiving it.