Home / Privacy policy

Privacy policy

This is a structural draft. Have Indian legal counsel finalise it before publishing — it must reflect the Digital Personal Data Protection Act, 2023, since OnlyHair collects health-adjacent quiz data.

Sections to complete

  • What personal and health-adjacent data is collected: quiz answers, order and shipping data, payment data via processor.
  • How data is used: personalisation, order fulfilment, marketing with opt-out.
  • Data sharing with third parties: payment processors, shipping partners, analytics.
  • Data retention periods.
  • User rights under the DPDP Act: access, correction, erasure, grievance redressal.
  • Cookie policy.
  • Contact details for the Data Protection Officer or grievance officer.

What this site stores today

The registration form on this site stores your name, email, phone, city, gender, age group and main hair concern, along with your IP address and the date you registered. Your password is stored only as a one-way hash. Contact form messages and newsletter sign-ups are stored until you ask us to delete them.

To request a copy or deletion of your data, email support@onlyhair.in.