Privacy Policy
Last Updated: 13.05.2026
At Scoville & Co., we believe that privacy is a matter of trust, not obligation. This Privacy Policy explains how we collect, use, store, and protect the limited personal information you share with us when you visit our Website or make a purchase.
This Policy is aligned with applicable Indian data protection law, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is drafted with a view to compatibility with international privacy standards including the General Data Protection Regulation (GDPR) for users in the European Economic Area.
1. Information We Collect
1.1 Information You Provide Directly
- Email address — collected when you subscribe to our newsletter, register an account, or place an order
- Name and delivery address — collected when you place an order (stored only as necessary to fulfil it)
- Order and payment-related information — we collect order data but do not store full payment card details
1.2 Information Collected Automatically
- Device information: browser type, operating system, device identifiers
- Website analytics data: pages visited, session duration, referral source, click behaviour
- IP address and approximate geographic location (country/city level)
- Cookie and tracking data — governed separately by our Cookies Policy
1.3 What We Do Not Collect
We do not collect, store, or process sensitive personal data such as government identity numbers, financial account details, biometric data, or health information. We do not knowingly collect personal data from individuals under the age of 18.
2. How We Use Your Information
We use the information we collect solely for the following purposes:
- To process and fulfil your orders and communicate about them
- To send you transactional communications (order confirmation, shipping updates)
- To send promotional newsletters or brand communications, where you have expressly subscribed or consented
- To improve our Website and customer experience through anonymised analytics
- To detect, investigate, and prevent fraudulent transactions or misuse of the Website
- To comply with applicable legal obligations
3. We Do Not Sell Your Data
Scoville & Co. does not, and will not, sell, rent, lease, or otherwise commercially transfer your personal information to any third party. Your data is not a product.
4. Third-Party Service Providers
We may share limited personal information with trusted third-party service providers who assist in operating our Website and fulfilling orders. These include payment processors, logistics and courier partners, email marketing platforms, and website analytics providers. All third parties are engaged under contractual obligations that require them to process your data only as instructed and in accordance with applicable law.
We do not authorise any service provider to use your personal data for their own marketing or independent purposes.
5. Data Retention
We retain your personal data for as long as is reasonably necessary to fulfil the purposes described in this Policy, or as required by applicable law. Order-related data is typically retained for a minimum of three (3) years for accounting and tax purposes. Email addresses associated with newsletter subscriptions are retained until you unsubscribe.
6. Your Rights
Subject to applicable law, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal information we hold about you
- Right to correction — to request correction of inaccurate or incomplete information
- Right to deletion — to request that we delete your personal data, subject to legal retention obligations
- Right to withdraw consent — to unsubscribe from marketing communications at any time
- Right to object — to object to certain processing activities
To exercise any of these rights, please write to us at atelier@scovilleandco.com. We will respond within a reasonable timeframe and no later than thirty (30) days.
7. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. However, no method of transmission over the internet is entirely secure. We encourage you to use strong passwords and exercise care when sharing personal information online.
8. International Transfers
Where personal data is transferred to service providers outside India — for instance, analytics or email platform providers — we ensure that adequate safeguards are in place, consistent with applicable data protection law.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised Policy will be posted on this page with an updated date. We recommend reviewing this Policy periodically.
10. Contact
For privacy-related enquiries, please contact:
Privacy Officer | Scoville & Co. | atelier@scovilleandco.com | Address: 601/1, Labh Krupa, Navagaon, Dahisar West, Mumbai - 400 068