Privacy Policy
1. About this Privacy Policy
Bling Brands Private Limited (“aroline”, “Company”, “we”, “us” or “our”) respects your
privacy, operates and provides the services through the www.aroline.com website
(“Website” or “Service”). This Privacy Policy explains how we collect, use, disclose,
retain and protect personal data when you interact with Aroline.
This Policy applies to:
- the Aroline website at www.Aroline.com and related pages, forms and account
features;
- orders placed directly with Aroline, including payment, delivery, returns, exchanges
and refunds;
- customer support, product authentication, warranty registration, feedback and
promotional communications;
- our dealings with job applicants, vendors, contractors and business contacts; and
- visits to Aroline premises where access records or CCTV are used.
When you purchase Aroline products through a third-party marketplace, that marketplace
processes certain personal data under its own privacy policy. Aroline is responsible
only for processing that it determines or carries out itself.
This Privacy Policy is used to inform website visitors regarding our policies relating
to the collection, use and disclosure of Personal Information when anyone chooses to use our Service through the Aroline website.
We process personal data in accordance with applicable Indian law. We are also aligning
our practices with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the
Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) and Information Technology
(Reasonable Security Practices and Procedures and Sensitive Personal Data or
Information) Rules, 2011 (“SPDI”), to the extent their provisions are in force and
applicable.
The terms used in this Privacy Policy have the same meanings as those defined in our
Terms and Conditions, unless otherwise defined in this Privacy Policy. This Privacy
Policy was prepared with reference to standard privacy policy and disclaimer templates.
By using the Website or placing an order, you acknowledge that you have been provided
with this Policy. This acknowledgement is not blanket consent. Where consent is
required, we request it separately through an affirmative and purpose-specific
mechanism.
2. PERSONAL DATA WE COLLECT
The categories below apply only where relevant to your interaction with us. We seek to
collect only the personal data reasonably necessary for the stated purpose.
For a better experience while using our Service, we may require you to provide certain
Personal Information, including, without limitation, your name, phone number and postal
address. We collect and use such information for purposes including providing, operating
and improving the Service, processing and fulfilling requests or orders, communicating
with you, and contacting or identifying you where necessary.
We collect and process information only when necessary and in accordance with applicable law. Where required, we will obtain consent in the manner prescribed by law.
2.1 Identity and contact information
- name, email address, mobile number, billing address, shipping address and preferred
contact method;
- age or date of birth, gender, size or similar profile information where you choose
to provide it and it is relevant to a feature or request; and
- identity or authority information needed to verify a rights request, prevent fraud
or comply with law.
2.2 Account and preference information
- account identifiers, login credentials in protected form, saved addresses, wish
lists and order history;
- communication choices, product interests and feedback; and
- fitness objectives, dietary preferences or similar optional information only where a
specific Aroline feature requests it and explains the purpose.
2.3 Order, payment and fulfilment information
- products purchased, order number, invoice, price, payment status, delivery,
tracking, cancellation, return, exchange, refund, warranty and product-
authentication details; and
- limited payment-related information received from payment providers, such as
transaction reference, payment method and status. Aroline does not ordinarily store
complete card numbers, CVV values or banking credentials.
2.4 Communications and support information
- emails, contact-form submissions, chats, messages, call notes, complaint details,
images, videos, invoices and other material you send to us; and
- call recordings, where calls are recorded and you are informed as required by
applicable law.
2.5 Device, website and cookie information
- IP address, browser type, device type, operating system, language, approximate
location derived from IP, referring page, pages viewed, clicks, session times and
diagnostic data; and
- cookie identifiers, consent choices and similar technology data described in Section
8.
2.6 Business, recruitment and premises information
- for vendors and business contacts: work contact details, role, organisation, GST
details, PAN, bank details, agreements and payment records;
- for job applicants: CV, education, work history, portfolio, interview notes,
compensation expectations and information supplied by references; and
- for premises visitors: visitor records and CCTV images where such systems are used.
3. HOW WE COLLECT PERSONAL DATA
We collect personal data:
- directly from you when you create an account, place an order, register a warranty,
authenticate a product, contact us, enter a promotion, subscribe to marketing, apply
for a job or work with us;
- automatically when you use the Website, through cookies, logs and similar
technologies;
- from service providers involved in payments, fraud checks, logistics, customer
support, communications, website hosting and analytics;
- from third-party marketplaces when needed to fulfil a Aroline order, warranty,
return or support request; and
- from publicly available or lawfully obtained business sources, where appropriate.
4. WHY WE USE PERSONAL DATA
We use personal data for the following specified purposes:
- To provide the Website, create and administer accounts, maintain shopping carts and
remember user preferences.
- To process payments, confirm and fulfil orders, arrange delivery, issue invoices,
manage cancellations, returns, exchanges and refunds, and provide order updates.
- To authenticate products, register and administer warranties, respond to questions,
resolve complaints and provide customer support.
- To personalize relevant content and product recommendations where permitted and,
where required, with your consent.
- To measure Website performance, understand use, troubleshoot issues and improve
products, services, operations and customer experience.
- To send newsletters, promotions, abandoned-cart reminders, surveys and other
marketing where you have consented or where otherwise permitted by law.
- To prevent fraud, misuse and unauthorized activity; protect customers, personnel,
systems, premises and assets; and investigate security incidents.
- To maintain business, tax, accounting, audit and compliance records; enforce
agreements; manage legal claims; and respond to lawful requests.
- To manage vendor, contractor and business relationships, recruitment and workforce
administration.
Under the DPDP Act, where applicable, our processing is based on your consent or on a
“certain legitimate use” permitted by law, including processing personal data you
voluntarily provide for the specified purpose or processing required for applicable
legal functions. If we wish to use personal data for a materially different purpose that
is not compatible with the original purpose, we will provide appropriate notice and seek
fresh consent where required.
5. MARKETING COMMUNICATIONS
We send promotional email, SMS, messaging-app communications or calls only where
permitted by law and in line with your communication choices. Where you voluntarily
provide your telephone number through our Website or web forms, you may receive service-related communications and, where permitted by applicable law and based on the consent or other lawful basis required, promotional communications, including calls and SMS, from us or our authorised third-party service providers acting on our behalf. You may opt out of promotional communications at any time by using the applicable opt-out mechanism like unsubscribe mechanism in a message, adjusting available account
preferences, or by contacting us. Opting out of marketing does not stop transactional or
service messages, such as order confirmations, delivery updates, security notices,
warranty communications or responses to your requests.
6. WHEN WE SHARE PERSONAL DATA
We do not sell personal data. We may share relevant personal data with:
- website, hosting, cloud, storage, cybersecurity and IT support providers;
- payment gateways, banks, fraud-prevention providers and payment networks;
- warehousing, packaging, courier, logistics, installation, return and fulfilment
providers;
- customer-support, CRM, email, SMS, messaging, survey and call-centre providers;
- analytics, advertising and social-media providers, subject to your consent where
required;
- product-authentication, warranty, repair and after-sales partners;
- auditors, insurers, lawyers, accountants and other professional advisers;
- government authorities, courts, regulators or law-enforcement bodies where
disclosure is required or permitted by law; and
- a buyer, investor or successor in connection with a genuine merger, financing,
restructuring, sale or transfer, subject to appropriate confidentiality and legal
safeguards.
A recipient may act as our Data Processor, as an independent Data Fiduciary or
controller, or jointly with us, depending on the service and applicable law. Where a
provider processes personal data on our behalf, we use appropriate contractual,
confidentiality and security protections.
7. THIRD-PARTY DATA STORAGE AND ERASURE
We may engage third-party companies, platforms, technology providers and individuals to facilitate, provide, maintain, analyse or otherwise assist us in operating our Service
and performing Service-related functions on our behalf. Such third-party service
providers may have access to Personal Information to the extent reasonably necessary to
perform the services assigned to them. Certain Personal Information may be stored or
processed by third-party service providers and may be subject to their terms, privacy
policies, security practices, retention periods and deletion procedures.
Where Personal Information is processed, hosted, stored or otherwise handled through a
third-party service provider, such processing may also be subject to the terms, privacy
policies, security practices, retention periods and deletion procedures of the relevant
third-party service provider, in addition to this Privacy Policy and applicable law.
We retain Personal Information only as long as necessary to provide our Services, comply
with legal, regulatory, contractual or accounting requirements, resolve disputes,
enforce our agreements and protect our legitimate interests. Where information is
processed or stored by third-party service providers, retention and deletion may be
subject to their systems, policies and legal obligations. We will take reasonable steps
to facilitate deletion, return or anonymisation when the information is no longer
required, subject to applicable legal, contractual, technical and regulatory
requirements.
To the extent permitted by law, Bling Brands Private Limited is not responsible for
third-party storage, security, availability or deletion practices that are controlled by
the relevant provider. Deletion requests may be subject to the provider's procedures,
technical limitations and legal or contractual retention requirements, and deletion may
not be immediate.
Nothing in this limits any obligation or liability that cannot lawfully be excluded
under applicable law.
8. COOKIES AND SIMILAR TECHNOLOGIES
Cookies are small files or identifiers stored on or accessed from your device. We and our providers may use:
- strictly necessary cookies for core Website functions, security, checkout, account
access and consent choices;
- preference cookies to remember language, region, settings or shopping choices;
- analytics cookies to understand use and improve Website performance; and
- advertising cookies or similar technologies to measure campaigns and show relevant
advertising.
Where required, we obtain consent before using non-essential cookies. You can use the
cookie controls made available on the Website or your browser settings to reject or
remove cookies. Blocking some cookies may affect certain Website features.
9. INTERNATIONAL PROCESSING AND TRANSFERS
Aroline and its service providers may process or store personal data in India and in
other countries where they operate. When personal data is transferred outside India, we
comply with applicable law and any requirements or restrictions specified by the Central
Government. We also use contractual and security measures appropriate to the nature of
the processing.
10. HOW LONG WE RETAIN PERSONAL DATA
We retain personal data only for as long as reasonably necessary for the purpose for
which it was collected, to provide requested goods or services, to meet legal and
accounting requirements, to resolve disputes, to prevent fraud and abuse, and to
establish, exercise or defend legal claims. Retention periods may be extended where a
legal hold, investigation or proceeding applies.
| Record category | General retention approach | Typical period |
|---|---|---|
| Account and profile information | While the account is active and for a reasonable period after the last interaction, unless earlier deletion is required or a longer period is justified. | Up to 3 years after the last interaction |
| Orders, invoices and statutory records | For tax, accounting, audit, consumer-protection and corporate recordkeeping requirements, including any legal hold. | Generally up to 8 financial years; longer if law or proceedings require |
| Customer support, returns, warranty and authentication records | For service delivery, quality control, fraud prevention, dispute handling and warranty administration. | Up to 3 years after closure, or the warranty/claim period if longer |
| Marketing records and preferences | Until consent is withdrawn or the communication is no longer relevant. A minimal suppression record may be kept to respect an opt-out. | Until opt-out, plus a limited suppression record |
| Website, security and transaction logs | For security monitoring, troubleshooting, fraud prevention and applicable legal requirements. | Typically up to 1 year, unless needed longer for an incident or claim |
| Recruitment information | For the relevant hiring process and future roles where permission has been given. | Up to 2 years after the process ends |
| CCTV footage, where used | For premises safety, loss prevention and incident investigation. | Normally up to 30 days; longer if an incident requires preservation |
11. SECURITY AND PERSONAL DATA BREACHES
We maintain reasonable technical and organisational safeguards appropriate to the
nature, scope and risk of the processing. These may include access controls, encryption
or other protective measures, logging and monitoring, backups and recovery measures,
personnel training, and service-provider security review.
No method of transmission or storage is completely secure. If a personal data breach or
qualifying cyber incident occurs, we assess, contain, remediate and document it, and
make notifications or reports to affected individuals and competent authorities within
the timelines required by applicable law.
12. YOUR CHOICES AND RIGHTS
Subject to applicable law and verification of your request, you may have the right to:
- request a summary of personal data being processed and information about processing
activities;
- request correction, completion or updating of inaccurate or incomplete personal
data;
- request erasure of personal data that is no longer required, subject to legal
retention and other permitted grounds;
- withdraw consent with ease comparable to how consent was given;
- opt out of marketing communications and manage non-essential cookie choices;
- raise a grievance about our handling of personal data; and
- nominate another individual to exercise applicable rights in the event of death or
incapacity, where the DPDP Act provides this right.
Withdrawing consent does not affect processing already carried out before withdrawal. It
may limit our ability to provide a feature or service that genuinely depends on that
information. We may ask for information reasonably necessary to confirm your identity
and protect your account before acting on a request.
13. CHILDREN'S PERSONAL DATA
The Website is intended for adults. A person under 18 should use the Website or place an
order only through a parent or lawful guardian. We do not knowingly process a child's
personal data without verifiable consent from a parent or lawful guardian where such
consent is required.
We do not knowingly undertake tracking or behavioural monitoring of children or targeted
advertising directed at children where prohibited by applicable law. If you believe a
child has provided personal data contrary to this Policy, please contact us so that we
can take appropriate action.
14. THIRD-PARTY SITES AND MARKETPLACES
The Website may link to third-party websites, applications, payment services, social-
media platforms or marketplaces. Their privacy practices are governed by their own
notices. We encourage you to review those notices before providing personal data.
Aroline is not responsible for a third party's independent processing.
15. PRIVACY REQUESTS AND GRIEVANCE REDRESSAL
You may submit a privacy request or grievance using the details below. Please describe
your request clearly and include the email address or mobile number associated with your
interaction. Do not send passwords, full card numbers, CVV values or other unnecessary
credentials.
If you have any concern, complaint or grievance regarding the collection, use, storage,
disclosure or processing of your Personal Information, you may contact our designated
privacy or grievance contact using the details provided below.
We shall acknowledge and address such grievances within the time period prescribed under applicable law. Where applicable provisions of the Digital Personal Data Protection Act, 2023 and the rules made thereunder apply, grievances shall be handled in accordance with the grievance redressal mechanism prescribed thereunder.
We aim to acknowledge privacy grievances promptly and respond within 30 days, or within any different period required by
applicable privacy law. Consumer complaints relating to products, orders, delivery, returns or refunds will be acknowledged
within 48 hours and redressed within one month in accordance with applicable e-commerce rules.
16. Changes to this Privacy Policy
We may update this Policy to reflect changes in law, technology, our services or our processing practices. The updated version
will be posted on the Website with a revised effective date. Where a change materially affects your rights or how we use personal data, we will provide additional notice or seek consent where required.
17. Contact and corporate details
Bling Brands Private Limited
Corporate Identification Number: U51909KA2021PTC155593
4th Floor, Boldfit, Gopalan Innovation Mall, 22 Bannerghatta Main Road, JP Nagar 3rd Phase, Bengaluru, Karnataka 560076, India
Website: www.aroline.com
Email: support@aroline.in
Telephone: +91 70223 98012