Privacy policy

We collect what we need to get your order to you and improve what we make. We do not sell your data. We never put product names on the outside of a parcel or on a shipping label.

Because of what we sell, some of what you tell us — that you are trying to conceive, that you are managing a hormonal condition — is sensitive. We treat it that way, we ask before we use it, and you can withdraw that permission whenever you like.

This policy explains how APRP CONSUMERS PVT LTD (trading as Allove) collects, uses, stores and protects your personal data when you use shopallove.in or buy from us. We are the Data Fiduciary for that data under the Digital Personal Data Protection Act, 2023.

1. What we collect

INFORMATION YOU GIVE US

  • Name, email address, phone number, and shipping and billing addresses.
  • Order history and payment confirmation details. We never see or store your full card number.
  • Account login details, if you create an account.
  • Anything you tell us in a support conversation, a review, a quiz or an onboarding questionnaire.
  • Marketing preferences.

INFORMATION WE COLLECT AUTOMATICALLY

  • Device type, browser, IP address and approximate location.
  • Pages viewed, products browsed, time on site and referral source.
  • Cookie and similar identifiers — see section 4.

INFORMATION FROM OTHERS

  • Delivery status from our courier partners.
  • Payment confirmation and fraud signals from our payment gateway.
  • Aggregated advertising data from platforms such as Meta and Google, where you have permitted it on those platforms.

2. Your consent, and taking it back

We process your data on the basis of the consent you give when you place an order, create an account or subscribe — and on the legitimate uses the DPDP Act permits, such as fulfilling a transaction you have asked for.

You can withdraw consent at any time by writing to info@allove.in. Withdrawing consent for marketing stops the marketing. Withdrawing consent entirely means we can no longer process orders for you, and we will tell you plainly what that affects before we act on it.

3. Who we share it with

We share only what is necessary, only with providers bound by confidentiality obligations, and never for their own marketing:

  • Payment gateways, to process your payment.
  • Courier and logistics partners, to deliver your order. They receive your name, address and phone number — never the product names.
  • Our e-commerce platform and hosting providers.
  • Analytics providers, in aggregated or pseudonymised form.
  • Professional advisers, auditors and regulators, where the law requires it.

We do not sell your personal data. We have never done this and we are not going to.

4. Cookies

We use cookies to keep your cart working, remember your preferences, understand how the site is used, and — where you allow it — measure advertising. You can refuse non-essential cookies through the banner when you first visit, or clear and block them in your browser. Essential cookies cannot be switched off without breaking checkout.

5. Marketing communications

We only email or message you with marketing if you have opted in. Every marketing email has an unsubscribe link that works immediately. Transactional messages — order confirmation, dispatch, delivery, refund — are not marketing and will continue as long as you have an open order.

6. Discreet delivery is a privacy commitment, not a feature

Every Allove orders ships in plain, unbranded outer packaging. No product names appear on the outside of the parcel. Shipping labels and courier manifests carry no descriptive line items. Bank and card statements show our entity name, not the product. This applies to every order, every time, and you do not have to ask.

7. Data security

The site runs over encrypted connections. Access to customer data inside our organisation is limited to people who need it to do their job. Payment data is handled entirely by PCI-DSS compliant gateways and never touches our systems.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

8. How long we keep it

  • Order and transaction records: as long as tax and company law requires, currently eight years.
  • Account data: while your account is active, and for a reasonable period afterwards.
  • Marketing data: until you unsubscribe, then removed from active lists.
  • Support conversations: three years, so we can pick up a history if you write in again.
  • Health-related information you volunteered: deleted on request, or when it is no longer needed for the purpose you gave it for.

9. Your rights

Under the DPDP Act, 2023 you have the right to:

  • Ask what personal data we hold about you and how we have used it.
  • Have inaccurate or incomplete data corrected or updated.
  • Have your data erased, where we are not legally required to keep it.
  • Withdraw consent you have previously given.
  • Nominate someone to exercise these rights on your behalf if you are unable to.
  • Raise a grievance with us on info@allove.in to exercise any of these. We respond within 30 days.

10. Changes to the Policy

We reserve the right to update, change or modify this Privacy Policy at any time. The Privacy Policy shall come to effect from the date of such update, change or modification. If you continue to access or use the Website even after any such changes have been made, it would be deemed to be your implied consent to the changed Privacy Policy.

11. Contact our Grievance officer

In accordance with the Consumer Protection (E-Commerce) Rules, 2020, the name and contact details of the Grievance Officer are provided below:

Name: Mr. Rahul Pandey

Address: Tower A - 1709-1711, 17th floor - Sec 75, Spectrum Mall- Noida, 201301

Email: info@allove.in

Any feedback or comments about this Privacy Policy will be welcome, and can be sent to info@allove.in. We will employ all commercially reasonable efforts to address the same.