Privacy Policy

1. Who We Are

QwikGlam is an on-demand beauty-services marketplace operated as a sole proprietorship based in Bengaluru, Karnataka, India (Proprietor: Mukesh Kumar; Udyam Reg. UDYAM-KR-03-0684636; GSTIN 29IZWPK7021J1ZI). In this policy, "we", "us" and "our" mean QwikGlam, and "you" means a customer or beauty professional ("artist") who uses our app or website.

QwikGlam acts as an intermediary that connects customers with independent artists; the artist, not QwikGlam, provides the beauty service. For the personal data described here, QwikGlam is a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. This is a standalone privacy notice, separate from our Terms of Service.

2. Data We Collect

We collect only what we need to run the service. We do not ask for your data for any purpose that isn't listed below.

3. How We Use Your Data

• Service delivery — matching you with a nearby artist, routing and tracking bookings, processing payments and refunds.
• Communications — OTPs, booking confirmations and updates, service-related and aftercare messages.
• Safety & fraud prevention — verifying identity, detecting unusual activity, protecting both customers and artists.
• Platform improvement — understanding feature usage and fixing issues, using aggregated/de-identified data where possible.
• Marketing — personalised offers, only with your separate, withdrawable consent.

We process your data only for these stated purposes (purpose limitation) and keep collection to the minimum needed (data minimisation).

4. Lawful Basis & Consent

We process your personal data based on the consent you give when you sign up and use specific features, and, where applicable, for legitimate uses permitted by the DPDP Act (such as fulfilling a service you requested or meeting a legal obligation). Before or at the time of collection we tell you what we collect and why.

5. Data Sharing

With your assigned artist

To fulfil a booking we share your name, service address and its map location, and booking details (including allergies you have told us about) with the artist you are matched with. Where our masked-calling service is active, calls between you and your artist are connected through it so neither side sees the other's real number; where it is not, your artist can see your mobile number during that booking so they can reach you.

With customers (artists)

If you are an artist, customers see your name, photo, rating, services and an approximate location (to about 1 km) when choosing an artist, and your live location only while you are on your way to their booking.

With our service providers (Data Processors)

We use a small set of vetted processors, each bound to use your data only on our instructions:

• MSG91 — OTP and transactional SMS delivery (DLT-registered).
• Google Firebase (FCM) — push notifications.
• Zoho Payments — secure payment processing and refunds. Card and UPI details are entered on Zoho's checkout and never reach our servers.
• Google Firebase Crashlytics — crash reports and diagnostics.
• Exotel — masked voice calls between customers and artists.
• Bunny CDN — hosting and delivery of media (e.g., Reels and images).
• Google Maps / Geocoding — maps, address lookup and routing.
• Hostinger — application and database hosting.

For legal reasons

We may disclose data where required by law, court order, or a valid request from a lawful authority, or to protect the safety of users.

We never sell your data

QwikGlam does not sell, rent, or trade your personal data to advertisers or any third party for their own marketing.

6. Data Retention

We keep your personal data only while your account is active or as long as needed for the purposes above. Booking and payment records are retained for up to 7 years to meet Indian tax and accounting requirements. When you delete your account, we erase or irreversibly anonymise your personal data and keep only the de-identified transaction records required by law (which can no longer be linked to you). Artists: if you have earned through QwikGlam, your legal name and PAN are kept with those earnings records for the same period, because tax deducted at source is reported against them.

7. How to Delete Your Account

You can permanently delete your account and personal data in two ways:

• In the app — customers: My Profile → Delete Account; artists: Profile → Delete my account.
• On the web (including if you've uninstalled the app) — visit https://qwikglam.com/account-deletion/ and verify your number with an OTP.

What is deleted: your name, email, phone, profile photo, saved addresses, skin profile (including allergies), device & notification tokens, chats, favourites and activity history — and for artists, KYC documents, bank details, location history, portfolio and reels. What is retained (de-identified): anonymised booking and payment records, for the legal retention period above. Any wallet balance is not forfeited — contact support to have it refunded. Please complete or cancel active bookings before deleting. The web form is for customer accounts; artists without the app can email privacy@qwikglam.com and we will delete the account within 30 days.

8. Your Rights Under the DPDP Act

As a Data Principal you have the right to:

• Access — obtain a summary of the personal data we process about you and how we use it.
• Correction & erasure — correct inaccurate data (via My Profile) and request deletion of data no longer needed.
• Grievance redressal — raise a complaint with our Grievance Officer and receive a timely response.
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, email privacy@qwikglam.com. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

9. Cookies & Tracking

We use essential cookies for session management (e.g., qg_customer_token, qg_trusted_device). We do not use third-party advertising cookies. Our app and website record how they are used — screens opened, buttons tapped, searches and reel activity — linked to your account when you are signed in, so we can improve the service. This record stays with QwikGlam: we use no third-party advertising or analytics SDKs, and we never sell it or use it for third-party advertising.

10. Data Security

We protect your data with TLS encryption in transit, token-based authentication (we do not store passwords), strict server-side access controls, and rate limiting against abuse. Sensitive artist KYC documents are stored in a private, access-controlled location and are never served from a public URL. No system is perfectly secure, but we work to safeguard your information and to respond quickly to any incident.

11. Cross-Border Transfers

Some of our processors may store or process data on servers located outside India. Where this happens, we transfer data only in accordance with the DPDP Act and any restrictions notified by the Government of India, and we require those processors to protect your data to the standards described here.

12. Data Breach Notification

If a personal-data breach occurs, we will take prompt remedial action and notify the Data Protection Board of India and affected users as required by the DPDP Rules, 2025.

13. Children's Privacy

QwikGlam is intended for users aged 18 and over. We do not knowingly collect the personal data of children, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a minor has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. For significant changes we will notify you by email or in-app notification before they take effect, and we will update the "Last updated" date above.