Policies
Privacy policy
This explains what personal data The Scent Theory collects, why, and the choices you have. We collect only what we need to sell and deliver your order.
Last updated 3 October 2026
What we collect
- Order details: your name, email, mobile number, delivery address and what you bought.
- Account details: if you create an account, your name, email and a securely hashed password (we never store it in readable form).
- Payment: handled entirely by Razorpay. We receive only a payment reference and status — never your card, UPI or bank details.
- Newsletter: your email, if you choose to subscribe.
- Scent finder: the words you type into the AI scent finder.
How we use it
To process and deliver your order, send order and delivery updates, issue invoices, handle returns and refunds, answer your questions, prevent fraud, meet legal and tax obligations, and — only if you subscribed — send our newsletter.
Who we share it with
Only with the services that help us run the shop, and only what each one needs:
- Razorpay — to take payments and issue refunds.
- Shiprocket and its courier partners — your name, phone and address, to deliver your order.
- Our email provider — to send order emails.
- Google (Gemini) — what you type into the scent finder, to suggest fragrances. Please don’t enter personal details there.
- Our hosting and database providers, which store the site’s data securely.
We don’t sell your data, and we share it with authorities only when the law requires.
Cookies
We use only essential cookies: one keeps your bag, and one keeps you signed in. We don’t use advertising or tracking cookies.
How long we keep it
Order and invoice records are kept as long as Indian tax and accounting law requires. Account details stay until you ask us to delete your account. You can unsubscribe from the newsletter at any time.
Your choices
You can ask us to show, correct or delete the personal data we hold about you, or to stop sending you emails. Write to thescenttheoryin@gmail.com and we’ll respond within 30 days.
Security
The site is served over HTTPS, passwords are hashed, and payments never touch our servers.
Changes
If we change this policy, we’ll update this page and the date above.