Privacy Policy

1. Who we are

iWishAura is operated as a business registered at:

iWishAura
D 102, DLF New Town Heights, Sector 91,
Gurgaon, Haryana – 122505, India

For any privacy questions, write to hello@iwishaura.com. This policy applies to iwishaura.com and any linked ordering, checkout, or WhatsApp-based order confirmation flow we use to fulfil your order.

2. Information we collect

2.1 Information you give us directly

• Contact details: name, email address, phone number.
• Delivery details: shipping city and, at fulfilment, your full delivery address.
• Order details: which Aura Box, variant (Unisex / For her / For him), occasion, Zodiac edition selection, gift toggle, and any personal note or comment you add for the recipient.
• Corporate enquiries: company name, contact person, business email, phone, quantity, and occasion, if you submit the corporate/bulk gifting form.
• Communications: anything you send us by email, WhatsApp, Instagram, or LinkedIn when you contact us.

2.2 Information collected automatically

• Device and browser type, approximate location (city/region level, from your IP address), pages viewed, and referring page, collected through standard web server logs and analytics.
• Your progress through the reservation form, stored temporarily in your browser's local storage so you don't lose your place if you navigate away mid-checkout.

2.3 Information from third parties

Our payment gateway (Razorpay) shares limited transaction confirmation data with us — such as payment status and a payment reference ID — so we can match your payment to your order. We do not receive or store your full card, UPI, or net-banking credentials; those are handled entirely by the payment gateway under its own security standards.

3. How we use your information

We do not use your information to make any automated decision that produces a legal or similarly significant effect on you.

4. Our legal basis for processing

We process your personal data because it is necessary to perform the contract we enter into when you place a reservation or order (Section 8, Information Technology Act, 2000 and applicable rules), because you have given consent (for example, by submitting a form or opting into updates), or because we have a legitimate business interest in operating, securing, and improving the Services, balanced against your rights.

5. When we share information

We do not sell, rent, or trade your personal information. We share it only in these situations:

• Service providers: payment processing (Razorpay), delivery/logistics partners, email and communication tools, and hosting providers — each only receives what they need to do their job, and is contractually restricted from using it for anything else.
• Legal requirements: if required by law, regulation, court order, or a valid request from a government or law-enforcement authority.
• Business transfers: if iWishAura is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same protections described here.
• With your consent: in any other case, only after you've clearly agreed.

6. Payments

All payments on iwishaura.com are processed by Razorpay, a licensed and RBI-regulated payment aggregator. When you pay, you are subject to Razorpay's own privacy policy and security practices in addition to ours. iWishAura never sees or stores your complete card number, CVV, UPI PIN, or net-banking credentials — these go directly to the gateway over an encrypted connection.

7. Cookies & tracking

iwishaura.com uses your browser's local storage to remember your progress through the reservation form (selected box, variant, and details entered) so that a refresh or accidental navigation doesn't lose your progress. This data stays on your device and is cleared when you complete or restart a reservation.

As the site grows, we may introduce standard analytics or advertising cookies (for example, to understand which pages are popular or to run remarketing). If we do, this policy will be updated and, where required by law, we will ask for your consent through a cookie banner before setting any non-essential cookie.

8. Data retention

We retain order and transaction records for as long as needed to fulfil your order, handle any warranty, return, or dispute, and to meet our tax, accounting, and legal record-keeping obligations under Indian law (generally up to 8 years for financial records). Marketing contact details are kept until you unsubscribe or request deletion. Corporate enquiry details are kept for the duration of the business relationship and a reasonable period after, for follow-up and record purposes.

9. How we protect your data

We use reasonable technical and organisational measures — including encrypted connections (HTTPS), restricted access to customer data, and reputable third-party processors for payments and hosting — to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your rights & choices

• Access & correction: you can ask us what personal data we hold about you and request corrections to inaccurate information.
• Deletion: you can request that we delete your personal data, subject to our legal obligation to retain certain records (such as transaction history) for a defined period.
• Marketing opt-out: every marketing email includes an unsubscribe link, or you can simply email us to opt out at any time.
• Withdraw consent: where we rely on your consent (for example, for marketing), you can withdraw it at any time without affecting the lawfulness of processing carried out before your withdrawal.

To exercise any of these rights, email hello@iwishaura.com with the subject line "Privacy Request." We aim to respond within 30 days.

11. Children's privacy

Our Services are intended for users who are at least 18 years old, or who are using the site with the involvement of a parent or guardian (for example, a minor receiving a gift chosen and purchased by an adult). We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information without appropriate consent, please contact us and we will delete it.

12. International data transfer

iWishAura is based in India and primarily serves customers in India. If we use service providers located outside India (for example, cloud hosting or email infrastructure), your information may be processed outside India. Where this happens, we take reasonable steps to ensure it continues to be protected in line with this policy and applicable Indian law, including the Digital Personal Data Protection Act, 2023, once its provisions come into force.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, the details of the Grievance Officer are provided below. If you have any concerns about how your personal data has been handled, or any complaint about our Services, please reach out:

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days of receipt, as required under applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time as our Services, legal obligations, or business practices evolve. The "Last updated" date at the top of this page will always reflect the most recent revision. Material changes will be highlighted on this page or communicated by email where appropriate. Continued use of the Services after a change means you accept the revised policy.

15. Contact us

Questions about this policy or how we handle your data? Reach us at hello@iwishaura.com or write to us at the registered address above.