Information you provide directly

• Name, email address, phone number when you create an account or place an order
• Billing and shipping address
• Payment information (processed securely through our payment gateway — we do not store card details)
• Business name, GST number, and designation for institutional or B2B orders
• Messages you send us via contact forms or email

Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent, and navigation patterns via cookies and analytics tools
• Referral source (how you arrived at our site)

Information from third parties

• Payment gateway transaction references
• Shipping partner delivery status updates

• To process and fulfil your orders, including shipping and invoicing
• To communicate order confirmations, shipping updates, and support responses
• To manage your account and purchase history
• To issue GST-compliant tax invoices
• To respond to enquiries, complaints, and refund requests
• To improve our website, products, and customer experience
• To send you relevant product information or offers — only where you have consented
• To comply with applicable Indian laws and regulatory obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We share your data only to the extent necessary to fulfil your order or comply with law:

• Payment gateways — to process transactions securely
• Shipping and logistics partners — to deliver your order
• Accounting and invoicing software — for GST-compliant billing
• Website analytics providers (e.g. Google Analytics) — for aggregated, anonymised usage data
• Legal or regulatory authorities — where required by Indian law, court order, or government direction

All third-party service providers we work with are required to handle your data in a manner consistent with this policy.

We retain your personal data for as long as necessary to provide our services and meet legal obligations:

• Order records and invoices are retained for a minimum of 8 years in compliance with Indian tax and accounting laws
• Account information is retained while your account is active and for a reasonable period thereafter
• Marketing consent records are retained until you withdraw consent
• Analytics data is retained in anonymised, aggregated form

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Erase your personal data where we no longer have a lawful basis for processing it
• Withdraw consent for marketing communications at any time
• Nominate a person to exercise your rights in the event of your death or incapacity

To exercise any of these rights, write to us at care@allesclinx.com. We will respond within 30 days.

We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include SSL encryption on all data transmissions, access controls, and secure hosting.

However, no method of internet transmission is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a data breach that is likely to cause you harm, we will notify you as required under applicable law.

Our website and products are intended for adult individuals and institutional buyers. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the revised policy.