Privacy Policy
RayGlow® Privacy Policy
Raybliss Pharma Private Limited
Privacy Policy
1 Introduction
Raybliss Pharma Private Limited (CIN: U46497KA2023PTC174431), operating under the brand name RayGlow® (“Company,” “We,” “Us,” “Our”), is committed to protecting the privacy and personal data of every individual who visits our website, purchases our products, or interacts with us through any channel.
This Privacy Policy (“Policy”) describes how we collect, use, store, share, and protect your personal information when you visit or use www.rayglow.in (the “Website”), purchase RayGlow® products, participate in the 10-Day Skin Brightening Agreement Programme, subscribe to our communications, contact our support team, or interact with us via WhatsApp, email, or any other channel.
This Policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is designed to align with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) as and when its provisions become enforceable.
By accessing the Website, placing an order, or providing your personal information to us through any channel, you consent to the collection, use, and processing of your information as described in this Policy. If you do not agree with this Policy, please do not use the Website or provide any personal information to us.
2 Data Controller
The data controller responsible for your personal information is:
Raybliss Pharma Private Limited
#213, 2nd Floor, Outer Ring Road, Beside Pushpagiri Arena, Opp. Vaibhav Meadows, 1st Main Rd., 1st Block, 2nd Stage, Naagarabhaavi, Bengaluru, Karnataka 560072, India
Grievance Officer / Data Protection Contact:
Designation: Chief Executive Officer · Email: contact@raybliss.com · WhatsApp: +91 8888668860
The Grievance Officer shall address any concerns, complaints, or requests regarding personal data within thirty (30) days of receiving the communication, in accordance with applicable law.
3 Information We Collect
We collect different types of information depending on how you interact with us. The table below summarises what we collect, when we collect it, and why.
| Category | What We Collect | When | Why |
|---|---|---|---|
| Identity Data | Full name | Checkout, contact form, 10-Day Agreement registration | Order fulfilment, communication, programme registration |
| Contact Data | Email address, phone number, WhatsApp number, shipping address, billing address | Checkout, contact form, WhatsApp communication | Order delivery, support, marketing (with consent) |
| Transaction Data | Order details, order ID, products purchased, order value, payment method (prepaid/COD), discount codes used | Every purchase | Order processing, accounting, customer service |
| Payment Data | Payment status (success/failure). We do NOT collect or store card numbers, UPI IDs, or bank account details. | Every transaction | Order confirmation. All payment processing is handled by Razorpay. |
| Photographic Data | Facial selfies (night and morning), submitted with daily verification codes | 10-Day Agreement Programme only | Programme compliance verification, before/after assessment |
| Communication Data | WhatsApp messages, email correspondence, contact form submissions | Customer support, 10-Day Agreement, enquiries | Resolving queries, programme administration, record keeping |
| Technical Data | IP address, browser type and version, device type, operating system, time zone, screen resolution | Every website visit (automated) | Website analytics, security, fraud prevention |
| Behavioural Data | Pages visited, products viewed, time spent, click patterns, add-to-cart actions, checkout behaviour | Every website visit (Shopify, Google Analytics, Meta Pixel) | Website improvement, personalisation, advertising |
| Marketing Data | Newsletter subscription status, marketing preferences, WhatsApp opt-in status | Newsletter signup, checkout, WhatsApp interaction | Sending promotional communications (with consent) |
We do NOT intentionally collect any of the following: religion, caste, political opinions, sexual orientation, biometric data (beyond facial photographs submitted voluntarily for the 10-Day Agreement), financial information such as bank account numbers or card details (this is handled entirely by Razorpay), or medical records or health data.
4 How We Collect Your Information
(A) Information You Provide Directly
When you place an order on www.rayglow.in, you provide your name, email, phone number, and shipping address through the Shopify checkout process.
When you submit the contact form on the Website, you provide your name, email, and message.
When you subscribe to our newsletter, you provide your email address.
When you register for and participate in the 10-Day Skin Brightening Agreement, you provide your WhatsApp number and submit daily facial photographs with verification codes.
When you communicate with us via WhatsApp (+91 8888668860 or +91 9797979246) or email (contact@raybliss.com), you provide the content of those communications.
(B) Information Collected Automatically
When you visit www.rayglow.in, certain information is collected automatically through cookies and similar tracking technologies:
Shopify Analytics: As the Website is built on Shopify, Shopify automatically collects technical and behavioural data to provide its e-commerce services, including session data, cart data, and checkout analytics.
Google Analytics: We use Google Analytics to understand how visitors interact with the Website, including pages visited, time spent, bounce rate, traffic sources, and device information. Data is processed by Google LLC.
Meta Pixel (Facebook Pixel): We use Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram, create custom audiences for ad targeting, and deliver retargeting advertisements. It collects data such as pages visited, products viewed, add-to-cart events, and purchase events, transmitted to Meta Platforms, Inc.
(C) Information from Third Parties
We may receive information about you from third-party services we use:
Razorpay: Payment confirmation status (success/failure/pending). Razorpay does not share your card or bank details with us.
Courier Partners (Delhivery, DTDC, India Post): Delivery status updates, delivery timestamps, delivery confirmation.
Wati (WhatsApp Business API): Message delivery status, read receipts, and conversation logs for messages sent through the Wati platform.
5 Cookies and Tracking Technologies
The Website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device when you visit a website. Cookies help us provide a better experience and understand how the Website is used.
Types of cookies used on www.rayglow.in:
| Cookie Type | Provider | Purpose | Duration |
|---|---|---|---|
| Essential / Functional | Shopify | Session management, cart functionality, checkout, security, login state. The Website cannot function properly without these. | Session to 2 years |
| Analytics | Google Analytics | Tracking page views, session duration, traffic sources, device info, user behaviour on site. | Up to 2 years |
| Advertising / Retargeting | Meta (Facebook/Instagram) | Tracking website activity for ad measurement, building custom audiences for retargeting, serving relevant ads. | Up to 2 years |
Managing Cookies: You can control or delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be alerted when a cookie is being set. Disabling essential cookies may affect the functionality of the Website, including the checkout process.
To learn more about managing cookies, visit www.allaboutcookies.org or your browser’s help documentation.
6 How We Use Your Information
We use your personal information for the following purposes:
(A) Order Fulfilment and Delivery
Processing your orders, collecting payment (via Razorpay), arranging delivery through our courier partners (Delhivery, DTDC, India Post), sending order confirmation and shipping updates via email and/or WhatsApp, and handling any delivery issues or replacement requests.
(B) 10-Day Skin Brightening Agreement
Administering the Programme, receiving and reviewing daily photographic submissions, issuing daily verification codes, assessing before-and-after photographs for refund eligibility, and processing refund requests in accordance with the 10-Day Agreement Terms and Conditions.
(C) Customer Support
Responding to your enquiries submitted via the contact form, email, or WhatsApp. Resolving complaints, replacement requests, and other support matters.
(D) Marketing Communications
Sending promotional messages, product updates, offers, and skincare content via WhatsApp (through Wati) and/or email newsletter, where you have given consent or have not opted out. You may unsubscribe at any time (see Clause 10).
(E) Website Improvement and Analytics
Analysing website traffic and user behaviour through Shopify Analytics and Google Analytics to improve the Website’s functionality, content, and user experience.
(F) Advertising and Retargeting
Using Meta Pixel data to measure the effectiveness of our Facebook and Instagram campaigns, create custom audiences for retargeting (e.g., showing ads to people who visited but did not purchase), and create lookalike audiences to reach potential customers with similar characteristics.
(G) Legal and Regulatory Compliance
Complying with applicable laws, regulations, legal processes, or enforceable governmental requests. Maintaining records for tax, accounting, and audit purposes as required under Indian law.
(H) Fraud Prevention and Security
Detecting, preventing, and addressing fraud, unauthorised transactions, and other illegal activities. Protecting the security and integrity of the Website.
7 Legal Basis for Processing
We process your personal information on the following legal grounds:
| Legal Basis | Applies To |
|---|---|
| Contractual Necessity | Processing orders, delivering products, administering the 10-Day Agreement, processing refunds and replacements. Necessary to fulfil our contractual obligations to you. |
| Consent | Sending marketing communications via WhatsApp and email newsletter. Collecting and processing photographic data for the 10-Day Agreement. Setting advertising and analytics cookies (Meta Pixel, Google Analytics). |
| Legitimate Interest | Website analytics and improvement, fraud prevention and security, essential Shopify cookies for website functionality. |
| Legal Obligation | Maintaining tax and accounting records, responding to lawful government requests, complying with applicable Indian laws. |
Where we rely on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8 Who We Share Your Information With
We do NOT sell, rent, or trade your personal information to any third party for their independent marketing purposes.
We share your personal information only with the following categories of third-party service providers, and only to the extent necessary for the specified purposes:
| Third Party | What We Share | Purpose |
|---|---|---|
| Shopify Inc. | All order data, customer data, website activity data | E-commerce platform hosting, order processing, website functionality. (shopify.com/legal/privacy) |
| Razorpay Software Pvt. Ltd. | Transaction amount, order ID, customer email/phone for payment link delivery | Payment processing. PCI-DSS compliant. We never receive or store card/bank details. (razorpay.com/privacy) |
| Delhivery / DTDC / India Post | Customer name, shipping address, phone number, order ID | Product delivery, shipping tracking, delivery confirmation |
| Wati (Clare.ai) | Customer phone/WhatsApp number, message content | WhatsApp Business API for marketing messages and support automation |
| Google LLC (Analytics) | Anonymised/pseudonymised website usage data (IP, pages visited, session data) | Website analytics. (policies.google.com/privacy) |
| Meta Platforms, Inc. | Website activity events (page views, add to cart, purchases) via Meta Pixel | Ad measurement, retargeting, custom audiences. (facebook.com/privacy) |
We may also disclose your personal information if required by law, court order, or government authority, or if we believe in good faith that such disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our customers.
9 Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Order & transaction data | Retained indefinitely | Legal and accounting compliance, customer service, reorder history, warranty/replacement reference |
| Customer identity & contact data | Indefinitely or until deletion requested | Customer relationship management, future order fulfilment, support |
| 10-Day Agreement photographs | Deleted after Programme completion and refund resolution, unless consent given for longer | Stored temporarily for Programme administration; deleted once outcome is finalised |
| WhatsApp logs (via Wati) | Up to 12 months | Customer support reference, dispute resolution |
| Newsletter subscription data | Until you unsubscribe | Sending marketing communications |
| Cookie & analytics data | As per cookie duration (session to 2 years) | Website analytics, advertising |
| Contact form submissions | Up to 24 months | Query resolution, follow-up, pattern tracking |
When personal data is no longer required for the purposes stated above or upon valid deletion request, we shall delete or anonymise the data in a reasonable timeframe, subject to our legal and regulatory obligations.
10 Your Rights
Under applicable Indian law, including the provisions of the DPDP Act, 2023 (as and when enforceable), you have the following rights in relation to your personal data:
Right to Access: Request confirmation of whether we hold personal data about you, and a summary of such data and the processing activities related to it.
Right to Correction: Request correction of any inaccurate or incomplete personal data, or that we update outdated data.
Right to Erasure / Deletion: Request deletion of your personal data, subject to our legal and regulatory obligations to retain certain records (e.g., tax and accounting records, order history required by law).
Right to Withdraw Consent: Where we process data based on consent (e.g., marketing, advertising cookies), withdraw that consent at any time.
Right to Grievance Redressal: File a complaint with our Grievance Officer (see Clause 2) or with the Data Protection Board of India (once established under the DPDP Act) if you believe your data has been processed in violation of applicable law.
How to Exercise Your Rights
To exercise any of the above rights, contact us at: Email: contact@raybliss.com · WhatsApp: +91 8888668860 · Subject line: “Privacy Request – [Your Full Name]”.
We shall acknowledge your request within forty-eight (48) hours and respond substantively within thirty (30) days.
Opting Out of Marketing
You may opt out of marketing communications at any time through any of the following methods:
WhatsApp marketing: Reply “STOP” to any marketing message from our WhatsApp number, or inform us via WhatsApp that you wish to be removed.
Email newsletter: Click the “Unsubscribe” link at the bottom of any marketing email.
Contact us directly at contact@raybliss.com with the subject line “Unsubscribe.”
Opting out of marketing communications will NOT affect transactional communications such as order confirmations, shipping updates, and 10-Day Agreement correspondence, which are necessary for fulfilment of our contractual obligations to you.
11 Data Security
We implement reasonable security practices and procedures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Specific security measures include:
SSL/TLS Encryption: All data transmitted between your browser and www.rayglow.in is encrypted using SSL/TLS (HTTPS), including checkout, payment, and account pages.
PCI-DSS Compliant Payments: All payment processing is handled by Razorpay, which is PCI-DSS Level 1 compliant. We never receive, process, or store card numbers, CVV codes, or bank account details on our servers.
Shopify Security: The Website is hosted on Shopify’s infrastructure, which maintains SOC 2 Type II compliance and implements industry-standard security measures including firewalls, intrusion detection, and regular security audits.
Access Controls: Access to customer personal data within our organisation is restricted to authorised personnel on a need-to-know basis only.
While we take all reasonable measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to notifying affected individuals and the appropriate authorities in the event of a data breach, in accordance with applicable law.
12 Third-Party Links and Services
The Website may contain links to third-party websites, platforms, or services (e.g., Instagram, Facebook, payment gateway pages). This Privacy Policy does not apply to those third-party sites. We encourage you to read the privacy policies of any third-party service you interact with.
We are not responsible for the privacy practices, content, or security of any third-party website or service.
13 Children’s Privacy
The Website and RayGlow® products are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age.
If we become aware that we have inadvertently collected personal data from a child under 13, we shall delete such data promptly. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at contact@raybliss.com.
For individuals aged 13 to 18, we recommend that a parent or legal guardian supervise any interaction with the Website and consent to any purchase or data submission.
14 International Data Transfers
Some of the third-party service providers we use (including Shopify, Google, and Meta) may process your data on servers located outside India, including but not limited to the United States, Canada, and the European Union.
Where your data is transferred outside India, we ensure that such transfers are made to organisations that maintain adequate data protection standards as required by applicable Indian law, or that appropriate contractual safeguards are in place.
By using the Website and providing your personal information, you consent to the transfer and processing of your data outside India as described in this Policy.
15 Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we shall update the “Last Updated” date at the top of this Policy and, where appropriate, notify you via email or a prominent notice on the Website.
We encourage you to review this Policy periodically. Your continued use of the Website after the posting of changes constitutes your acceptance of the updated Policy.
The latest version of this Privacy Policy shall always be available at www.rayglow.in/privacy.
16 Related Policies
This Privacy Policy should be read in conjunction with the following policies, all available on www.rayglow.in:
Terms of Service: www.rayglow.in/terms
Return, Replacement and Cancellation Policy: www.rayglow.in/return-policy
10-Day Skin Brightening Agreement Terms and Conditions: www.rayglow.in/10-day-agreement
Shipping Policy: www.rayglow.in/shipping-policy
17 Governing Law and Dispute Resolution
This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the IT Rules, 2011, and the Digital Personal Data Protection Act, 2023 (as and when applicable).
Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, India.
Nothing in this clause restricts your right to file a complaint with the Data Protection Board of India (once established) or approach any consumer forum under the Consumer Protection Act, 2019.
18 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
Raybliss Pharma Private Limited
Grievance Officer: Chief Executive Officer
#213, 2nd Floor, Outer Ring Road, Beside Pushpagiri Arena,
Opp. Vaibhav Meadows, 1st Main Rd., 1st Block, 2nd Stage,
Naagarabhaavi, Bengaluru, Karnataka 560072, India
Email: contact@raybliss.com
WhatsApp: +91 8888668860 / +91 9797979246
Website: www.rayglow.in
Customer support hours: Monday to Saturday, 10:00 AM to 6:00 PM IST.

