Account & Data Deletion Request

SUGAR Cosmetics Vellvette Lifestyle Private Limited

Who this page is for: This page applies to registered customers and users of the SUGAR Cosmetics website (sugarcosmetics.com) and SUGAR Cosmetics mobile application, who wish to request deletion of their account and associated personal data.

1. How to request deletion

To request deletion of your SUGAR Cosmetics account and the personal data associated with it, send an email from the same email address or mobile number registered against your account to the Grievance Officer.

From your registered email, send a message to grievance.officer@sugarcosmetics.com with the subject line "Account & Data Deletion Request."
In the body, include your full name, the mobile number or email registered on your account, and your most recent Order ID (if available), and confirm whether you want full deletion (account + associated personal data) or partial deletion (only specific data — see Section 4 below).
We will acknowledge your request within 7 working days and complete it within 30 days of acknowledgement, in line with Section 13 of the Digital Personal Data Protection Act, 2023 (DPDPA).
We may contact you on your registered mobile number or email to verify your identity before processing the request. We will never ask for your OTP, password, or any payment information.
Once your request is processed, you will receive a confirmation email and your account will be deactivated. You will no longer be able to log in using your existing credentials.

2. What gets deleted

Upon successful verification of your request, the following personal data is permanently removed from our active systems within 30 days:

Data	Where it is stored
Full name, email address, phone number, delivery address, profile details	Shopify (e-commerce platform)
Order history and purchase records linked to your identity	Shopify
Saved payment tokens / saved card references (not raw card data)	Payment gateway (EaseBuzz / PayU)
Wishlist, saved addresses, and account preferences	Shopify
Marketing and advertising identifiers linked to your account (email/phone-based targeting)	Meta Ads, Google Ads platforms

Note: We do not store your raw card, UPI, or net banking details. These are collected and processed directly by our payment gateway partners, EaseBuzz and PayU — both India-based and RBI-compliant — and are never received or stored on our servers.

3. What is retained, and why

Certain business records cannot be deleted immediately because the Company is legally required to preserve them. These records are retained only in anonymised or aggregated form wherever possible — your name, contact details, and other direct identifiers are removed and are stored separately from active customer databases.

Data	Retention period & basis
Transaction and invoicing records (anonymised against your identity, retained against the order)	Up to 8 years — Section 36 of the CGST Act, 2017 and Income-tax record-keeping requirements
Returns, refund, and warranty claim records	Retained for the applicable statutory/limitation period, in anonymised form once your account is deleted
Aggregated website/app analytics (page views, product interest trends)	Retained in aggregate form only; cannot be linked back to you as an individual
System and security logs (fraud prevention, account security)	Up to 3 years, in line with CERT-In Directions, 2022

Important: The retained records described above do not contain your name, phone number, email address, or any other identifier that points to you as a named individual once your deletion request has been processed.

4. Partial deletion (without closing your account)

If you wish to remain a registered customer but want only specific data removed, you may request partial deletion using the same email channel above. Examples include:

Removing a saved address or payment token — supported.
Opting out of marketing/promotional communications — supported (you will continue to receive transactional emails related to active orders).
Removing your wishlist or browsing preferences — supported.
Order history tied to an active/ongoing order — not supported until the order is completed, as this data is required to fulfil and support your purchase.

5. Children's data

SUGAR Cosmetics does not knowingly collect or process personal data from individuals under the age of 18 without appropriate consent. If you believe a minor's data has been collected without appropriate consent, please contact the Grievance Officer using the details below so we can review and address it.

6. Escalation

If you are not satisfied with how your request has been handled, you have the right to escalate your complaint to the Data Protection Board of India, constituted under the Digital Personal Data Protection Act, 2023.

7. Contact

All deletion requests must be sent to the Grievance Officer. Requests sent through other channels (social media, app reviews, in-store) cannot be processed, as we are unable to verify your identity through those channels.

Grievance Officer Shalini Singh Customer Delight Team | Assistant Manager Vellvette Lifestyle Private Limited

Email: grievance.officer@sugarcosmetics.com

Registered Address: Survey No. 15/8, 17/2, 4/1, 4/3, 36, 15/1/B, Talavali, Bapgoan Road, Bhiwandi, District Thane, Maharashtra — 421302, India

Acknowledgement: within 7 working days Resolution: within 30 days

For our full privacy practices, see our Privacy Policy.

Compliant with: IT Act, 2000 · IT (Reasonable Security Practices and Sensitive Personal Data) Rules, 2011 · Digital Personal Data Protection Act, 2023