Privacy policy

Thank you for visiting remalague.com (the “Website”). In this Privacy Policy, “REMALAGUÉ”, “we”, “our” and “us” refer to REMALAGUÉ by TARADHAN ENTERPRISES and its affiliates (the “Data Fiduciary”), and “you” (or “Data Principal”) refers to the user of the Website.

This Privacy Policy is an electronic record under the Information Technology Act, 2000 and the rules made under it, and does not require any physical or digital signature. It is published in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and is also intended to serve as a notice under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (as and when applicable). It should be read together with the Terms of Use available on the Website.

Please read this Privacy Policy carefully. By using the Website or providing us your information, you agree to and consent to the collection, use, storage and disclosure of your information as described here. If you do not agree, please do not use the Website. REMALAGUÉ is committed to protecting your privacy and handling your information carefully and lawfully.

1. Information we collect

You can browse the Website without telling us who you are. Once you give us personal information, you are no longer anonymous to us. The information we collect falls into two categories.

Personal Information is information that can identify or contact you. We collect the following categories of Personal Information (an itemised description as required under applicable law):

• Identity and contact details: your name, address, telephone number and e-mail address;
• Demographic details: your date of birth and gender (where you choose to provide them);
• Transaction and account information: your transaction history on the Website, including purchases and order details;
• Payment details: bank account, credit or debit card or other payment instrument details (which are sensitive personal data or information under the SPDI Rules). These are typically processed securely through third-party payment gateways and are not stored by us beyond what is necessary;
• Other information you provide: any other information you voluntarily provide when registering, contacting us, posting a review, or participating in surveys or contests.

We collect Personal Information when you register on the Website, place an order, take part in a survey or contest, post a review, contact our customer service, or otherwise deal with us. We may also receive information about you from third parties such as social media services, business partners and commercially available sources. If you log in through, or connect the Website to, a social media service, we may receive your user name, profile picture, e-mail address, friends list and any information you have made public there, and you authorise us to collect and use it as described in this Privacy Policy.

Non-Personal Information does not by itself identify you. It is collected automatically, may be stored in server logs, and includes your IP address, device identifier, approximate geographic location, internet or telecom service provider, browser type, operating system, the website you visited before ours, the pages you view and the date, time and duration of your visit.

2. Why we use your information (purposes of processing)

We process your information only for the specific purposes described below (and as otherwise permitted or required by law). Where required under the DPDP Act, processing is based on your free, specific, informed, unconditional and unambiguous consent given by a clear affirmative action, or on other legitimate grounds permitted by law.

We use your information to:

• Account and order fulfilment: create and manage your account, process and deliver your orders, and communicate order status;
• Payments and fraud prevention: process payments securely and detect/prevent fraud or unauthorised transactions;
• Customer support: provide customer support and respond to your queries, complaints or requests;
• Personalisation and improvement: personalise and improve the Website, our products and services, and user experience;
• Marketing communications: send you offers and marketing communications (only with your separate consent or where permitted; you can opt out at any time);
• Analytics: carry out analytics and measure the performance of the Website; and
• Legal and compliance: comply with legal obligations, enforce our terms, and protect our rights, property or safety or that of our users or others.

We may combine information you give us with information from other sources for these purposes. We do not use your personal data for purposes other than those specified above without obtaining fresh consent where required.

3. Cookies and analytics

Cookies are small data files that your browser stores on your device so that we can recognise your browser, remember your preferences and keep you signed in. We use temporary and permanent cookies, and we keep them only as long as necessary.

The Website uses Google Analytics, which uses cookies to help us understand how visitors use the Website. We may also use third-party service providers who serve advertisements on our behalf and may collect Non-Personal Information about your visits and interactions with the Website.

You can block or delete cookies, or set your browser to alert you before accepting them, through your browser settings. You can opt out of Google Analytics using Google’s opt-out browser add-on. If you disable cookies, some features of the Website, such as signing in, may not work. To learn more about cookies, visit www.allaboutcookies.org.

4. Who we share your information with

We do not sell or rent your personal information to third parties for their marketing purposes without your explicit consent. We share information only as described below.

• Service providers: companies and individuals who perform functions on our behalf, such as website hosting, payment processing, delivery/logistics, sending e-mails and postal mail, data analysis, marketing assistance and customer service. They receive only the information needed for their functions and may not use it for other purposes. We require them, by contract, to maintain reasonable security standards.
• Promotions and contests: if we run a contest or promotion with a third party, this will be stated on the Website and your information will be shared with that party only to the extent necessary. When we send offers on behalf of another party, we do not give that party your name or address.
• Business transfers: if we buy, sell or restructure businesses, customer information may be transferred as a business asset, and will remain subject to this Privacy Policy.
• Legal and protective disclosures: we may disclose information to government, supervisory, fiscal or investigative authorities when required by law, or when we believe disclosure is necessary to enforce our agreements, prevent fraud or protect the rights, property or safety of REMALAGUÉ, our users or others.
• With your consent: in any other case, we will tell you before your information goes to a third party and give you the choice not to share it.

Third-party advertisers and links. The Website may include third-party advertising and links to other websites. We do not give them your personally identifiable information. However, they may receive your IP address and may use cookies, web beacons and similar technologies to measure and personalise ads. We do not control these, and their privacy practices are not covered by this Privacy Policy, so please review their own policies.

Storage and transfer: Your information is stored mainly in electronic form, and some data may be stored in physical form. We may engage third parties, in or outside India, to store or process your information, and we require them on a commercially reasonable basis to adopt reasonable security standards. Cross-border transfers are undertaken in accordance with applicable law.

5. Security

We use administrative, technical and physical safeguards, including secure servers, firewalls and encryption (such as TLS/SSL for payment details), access controls and other reasonable security measures, to protect your information against unauthorised access, loss, destruction, alteration or disclosure. Payment card details are processed through secure third-party payment gateways. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

We may ask for proof of identity before disclosing personal information to you. If we become aware of a personal data breach, we will respond and notify affected users and the relevant authorities (including the Data Protection Board of India, as applicable under the DPDP Act) as required by law.

6. Your responsibilities

You must provide information that is accurate, complete and current, and you confirm that you have the right to provide it to us. Please keep your registered details up to date. Keep your login ID and password confidential and do not share them with anyone. You are responsible for all activity under your account, and we are not responsible for access gained through credentials obtained from you. If you believe your credentials have been compromised, or you have any security concern, please contact us immediately at care@remalague.com

7. Retention

We keep your information only for as long as needed for the purposes described in this Privacy Policy, to provide our services, to comply with legal, tax, accounting or regulatory requirements (for example, order and transaction records may be retained for periods required under applicable tax and company law), or as otherwise permitted by law, and delete or anonymise it afterwards. When you withdraw consent or request erasure, we will erase the relevant personal data unless retention is required or permitted by law.

8. Your rights and choices

Under applicable law (including the SPDI Rules and the DPDP Act, as applicable), you may:

• choose not to provide information, although some features or services may then be unavailable;
• access, review, correct, complete or update your information through your account or by contacting us;
• withdraw your consent at any time (withdrawal is as easy as giving consent). Upon withdrawal, we will stop processing the relevant data except where we are required or permitted by law to retain it;
• request erasure of your personal information (subject to legal retention requirements and the effect this may have on our ability to serve you);
• opt out of marketing e-mails and messages through your communication preferences or the unsubscribe link in any message. Legal or transactional notices will still apply to you; and
• nominate another person to exercise your rights on your behalf in the event of your death or incapacity (as provided under the DPDP Act).

To exercise any of these rights, please contact us using the details in Section 10. We will respond within the timelines required by applicable law.

9. Children

The Website is not intended for persons under 18 years of age, and we do not knowingly collect their personal information. Under applicable law, processing of children’s personal data requires verifiable parental/guardian consent. If you believe a child has provided us information, please contact us and we will delete it.

10. Grievance officer and contact

In accordance with the Information Technology Act, 2000, the SPDI Rules, and the DPDP Act (as applicable), you may contact our Grievance Officer with any complaint, concern, or request regarding your information or the exercise of your rights. We will acknowledge your grievance and aim to resolve it within the timelines prescribed by applicable law (and in any event aim to do so within one month of receipt where possible).

Grievance Officer

REMALAGUÉ (By Taradhan Enterprises)

Address: Taradhan, A/26 Khandelwal Colony, Durg, Chhattisgarh 491001

E-mail: grievanceofficer@remalague.com

You may also write to us at care@remalague.com for general privacy-related queries.

11. Governing law and changes

This Privacy Policy is governed by the laws of India, and the courts at Durg, Chhattisgarh shall have exclusive jurisdiction.

We may update this Privacy Policy from time to time. Changes will be posted on the Website with a revised “Last updated” date, and your continued use of the Website after the changes take effect means you accept the updated policy. Where required by law, we will seek fresh consent for material changes that affect the processing of your personal data.

If you have any questions about this Privacy Policy, please contact us using the details above.