Privacy Policy

1. Who We Are

QwikGlam is an on-demand beauty-services marketplace operated as a sole proprietorship based in Bengaluru, Karnataka, India (Proprietor: [PROPRIETOR LEGAL NAME]; Udyam Reg. [UDYAM NO.]; GSTIN [GSTIN]). In this policy, "we", "us" and "our" mean QwikGlam, and "you" means a customer or beauty professional ("artist") who uses our app or website.

QwikGlam acts as an intermediary that connects customers with independent artists; the artist, not QwikGlam, provides the beauty service. For the personal data described here, QwikGlam is a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. This is a standalone privacy notice, separate from our Terms of Service.

2. Data We Collect

We collect only what we need to run the service. We do not ask for your data for any purpose that isn't listed below.

3. How We Use Your Data

• Service delivery — matching you with a nearby artist, routing and tracking bookings, processing payments and refunds.
• Communications — OTPs, booking confirmations and updates, service-related and aftercare messages.
• Safety & fraud prevention — verifying identity, detecting unusual activity, protecting both customers and artists.
• Platform improvement — understanding feature usage and fixing issues, using aggregated/de-identified data where possible.
• Marketing — personalised offers, only with your separate, withdrawable consent.

We process your data only for these stated purposes (purpose limitation) and keep collection to the minimum needed (data minimisation).

4. Lawful Basis & Consent

We process your personal data based on the consent you give when you sign up and use specific features, and, where applicable, for legitimate uses permitted by the DPDP Act (such as fulfilling a service you requested or meeting a legal obligation). Before or at the time of collection we tell you what we collect and why.

5. Data Sharing

With your assigned artist

To fulfil a booking we share your name, service address and booking details with the artist you are matched with, and your live location only while a booking is active. We do not share your phone number with artists — calls between you and your artist are connected through a masked-calling service so neither side sees the other's real number.

With our service providers (Data Processors)

We use a small set of vetted processors, each bound to use your data only on our instructions:

• MSG91 — OTP and transactional SMS delivery (DLT-registered).
• Google Firebase (FCM) — push notifications.
• Payment gateway — secure payment processing and refunds. We do not store full card details; these are handled by the PCI-DSS-compliant gateway.
• Exotel — masked voice calls between customers and artists.
• Bunny CDN — hosting and delivery of media (e.g., Reels and images).
• Google Maps / Geocoding — maps, address lookup and routing.
• Hostinger — application and database hosting.

For legal reasons

We may disclose data where required by law, court order, or a valid request from a lawful authority, or to protect the safety of users.

We never sell your data

QwikGlam does not sell, rent, or trade your personal data to advertisers or any third party for their own marketing.

6. Data Retention

We keep your personal data only while your account is active or as long as needed for the purposes above. Booking and payment records are retained for up to 7 years to meet Indian tax and accounting requirements. When you delete your account, we erase or irreversibly anonymise your personal data and keep only the de-identified transaction records required by law (which can no longer be linked to you).

7. How to Delete Your Account

You can permanently delete your account and personal data in two ways:

• In the app — My Profile → Delete Account.
• On the web (including if you've uninstalled the app) — visit https://qwikglam.com/account-deletion/ and verify your number with an OTP.

What is deleted: your name, email, phone, profile photo, saved addresses, device & notification tokens, chats, favourites and activity history. What is retained (de-identified): anonymised booking and payment records, for the legal retention period above. Please complete or cancel active bookings before deleting.

8. Your Rights Under the DPDP Act

As a Data Principal you have the right to:

• Access — obtain a summary of the personal data we process about you and how we use it.
• Correction & erasure — correct inaccurate data (via My Profile) and request deletion of data no longer needed.
• Grievance redressal — raise a complaint with our Grievance Officer and receive a timely response.
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, email privacy@qwikglam.com. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

9. Cookies & Tracking

We use essential cookies for session management (e.g., qg_customer_token, qg_trusted_device). We do not use third-party advertising cookies, and any analytics we use is aggregated and de-identified.

10. Data Security

We protect your data with TLS encryption in transit, token-based authentication (we do not store passwords), strict server-side access controls, and rate limiting against abuse. Sensitive artist KYC documents are stored in a private, access-controlled location and are never served from a public URL. No system is perfectly secure, but we work to safeguard your information and to respond quickly to any incident.

11. Cross-Border Transfers

Some of our processors may store or process data on servers located outside India. Where this happens, we transfer data only in accordance with the DPDP Act and any restrictions notified by the Government of India, and we require those processors to protect your data to the standards described here.

12. Data Breach Notification

If a personal-data breach occurs, we will take prompt remedial action and notify the Data Protection Board of India and affected users as required by the DPDP Rules, 2025.

13. Children's Privacy

QwikGlam is intended for users aged 18 and over. We do not knowingly collect the personal data of children, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a minor has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. For significant changes we will notify you by email or in-app notification before they take effect, and we will update the "Last updated" date above.