POKUS TECHNOLOGIES PRIVATE LIMITED (“Pokus”, “we”, “us” or “our”) operates the Pokus website, mobile application and at-home beauty shopping service. This Privacy Policy explains what personal data we collect, why we use it, how we share and protect it, and the choices available to you.
01personal data we collect
Depending on how you use Pokus, we may collect:
- Account and contact information, including name, mobile number, email address, account identifiers and authentication records.
- Booking and delivery information, including address, location, serviceability, appointment details and delivery instructions.
- Shopping information, including products viewed, selected, tried or purchased, category and shade preferences, cart, wishlist and order history.
- Transaction information, including amount, taxes, discounts, payment status, transaction reference, invoice, refund and settlement records.
- Device and technical information, including device type, operating system, application version, IP address, device or advertising identifiers, app interactions, diagnostics and crash reports.
- Communications and support information, including messages, calls, reviews, survey responses and photographs or video submitted for support claims.
Complete card or banking credentials may be collected directly by payment-service providers such as Razorpay. Pokus does not ordinarily receive complete card credentials.
02application permissions
Depending on features used and permissions granted, the application may access location to confirm serviceability and support delivery; camera or photo library to upload product or support evidence; and notifications to send booking, delivery, payment and service updates. Permission access can be managed in device settings.
03how we collect personal data
- Directly from you when you register, book, purchase or contact support.
- Automatically through the application, website, cookies and technical logs.
- From payment providers after a transaction.
- From delivery, communication, analytics and customer-support providers.
- From another person who lawfully places a booking or order for you.
- When required or permitted by law.
04why we use personal data
- Create and secure accounts and verify telephone numbers.
- Check serviceability and schedule home-trial appointments.
- Personalise product selections and consultations.
- Process, fulfil, reconcile and support orders and payments.
- Issue invoices, replacements and refunds.
- Send booking, delivery, payment and account communications.
- Provide customer support and grievance redressal.
- Prevent fraud, abuse and unauthorised transactions.
- Maintain safety and protect customers and personnel.
- Analyse and improve the service.
- Comply with tax, accounting, consumer-protection and other legal obligations.
- Send promotional communications where consented to or permitted by law.
05consent and withdrawal
Where processing is based on consent, you may withdraw consent through an application setting, unsubscribe mechanism or by contacting support@pokus.ai. Withdrawal does not affect processing already completed lawfully. Certain information may still be required to complete an order, provide support, prevent fraud or comply with law.
Marketing consent is optional and is not required to book a trial or purchase a product.
06how we share personal data
We may share relevant personal data with payment processors including Razorpay; cloud-hosting and technology providers; authentication and notification providers; analytics, attribution and crash-reporting providers; delivery and logistics providers; customer-support and communications providers; professional advisers, auditors and insurers; government authorities where required by law; and a successor in connection with a business transfer.
Service providers may use personal data only for authorised purposes and under applicable contractual and confidentiality obligations. Pokus does not sell personal data for monetary consideration.
07payment processing
Payment providers may independently collect payment credentials and process information under their own privacy terms and regulatory obligations. Pokus generally receives transaction status, amount, payment-method category and transaction reference rather than complete card details.
08cookies and similar technologies
The website and application may use cookies, software-development kits, pixels and similar technologies to maintain sessions, remember preferences, measure performance, diagnose errors, understand usage, prevent fraud and measure marketing effectiveness. Non-essential advertising or tracking technologies will be used subject to applicable notice and consent requirements. See our Cookie Policy.
09data retention
We retain personal data only for as long as reasonably necessary to complete bookings and orders, provide support, maintain transaction and tax records, prevent fraud, resolve disputes and meet legal obligations. When data is no longer required, we will delete, anonymise or securely isolate it, subject to technical and legal limitations.
10data security
We use reasonable administrative, technical and organisational safeguards intended to protect personal data from unauthorised access, alteration, disclosure, loss or destruction. No electronic system is completely secure. Customers should protect their devices, account credentials and verification codes and notify Pokus promptly about suspected unauthorised activity.
11your choices and rights
Subject to applicable law, you may request information about personal data processed by Pokus; correction or updating; deletion or erasure; withdrawal of consent; an opt-out from promotional communication; grievance redressal; or nomination of another person to exercise applicable rights in the event of death or incapacity. We may verify identity before fulfilling a request and retain information where legally required.
To request account and data deletion, see Account & Data Deletion.
12children
Pokus is not intended to be used independently by children who cannot legally provide valid consent. Where applicable law requires consent from a parent or lawful guardian, Pokus will seek verifiable parental consent. Pokus does not knowingly use children’s personal data for behavioural monitoring or targeted advertising where prohibited.
13international processing
Some service providers may process information outside India. Where personal data is transferred or remotely accessed outside India, Pokus will take reasonable steps to use appropriate safeguards and comply with applicable restrictions.
14third-party links
Pokus may contain links to third-party websites, payment pages or services. Their privacy practices are governed by their own policies. Review those policies before providing personal information.
15changes to this policy
We may update this Privacy Policy to reflect changes in the service, technology or law. The revised policy will be published with an updated effective date. Material changes may also be communicated through the application, website or registered contact information.
16contact and grievance redressal
Consumer complaints will be acknowledged within 48 hours of receipt and resolved within one month, in accordance with applicable law. Please include your registered contact details, order or transaction number and a description of the issue.