This privacy policy explains how Averix Overseas Private Limited (“Aromia”, “we”, “us”) collects and uses personal data when you use thearomia.com (the “website”). We process personal data in line with applicable Indian law, including the Information Technology Act, 2000 and its rules and the Digital Personal Data Protection Act, 2023.
What we collect
- Orders: your name, email address, phone number, delivery and billing address, the products you buy and payment status. We do not see or store your card, UPI PIN or bank login details — payments are handled by our payment gateway.
- Account: if you create an account — name, email, optional phone, saved addresses, wishlist and order history. Passwords are stored only as one-way encrypted hashes.
- Messages: what you send us through the contact form, email, phone, WhatsApp or the chat assistant.
- Newsletter: your email address, if you subscribe.
- Cookie choice: when you accept or decline optional cookies we record your choice together with your IP address, browser type and the date and time, so that we can show we respected your choice.
- Usage data: with your consent, anonymous information about how the store is used (for example which products are viewed or added to the bag). Basic server logs (IP address, date and time, page requested) are kept for security.
Why we use it
- To process, deliver and support your orders, refunds and returns
- To run your account and wishlist
- To reply to your questions
- To send newsletters, only if you subscribed (you can unsubscribe at any time)
- To keep the website secure and prevent fraud
- To meet legal, tax and accounting obligations
Who we share it with
We share only what is necessary with: our payment gateway (to take payment), courier partners (to deliver your order), our hosting and email providers (to run the website and send emails), and government authorities where required by law. We do not sell your personal data.
Cookies
We use essential cookies to keep the website working (for example your bag and sign-in). Optional analytics cookies are used only if you accept them. See our cookie policy.
How long we keep it
Order and invoice records are kept for as long as required by tax and accounting law (generally up to 8 years). Account data is kept while your account is active. Cookie-choice records are kept for up to 2 years. Messages are kept for up to 2 years.
Your rights
You can ask us to access, correct or delete your personal data, withdraw consent (for example to the newsletter or analytics cookies), or nominate another person to exercise your rights. Write to us at averixoverseas@gmail.com. We may need to verify your identity, and we may keep data we are legally required to keep.
Security
The website uses HTTPS encryption, hashed passwords, access controls for staff and regular backups. No system is perfectly secure, but we take reasonable steps to protect your data.
Children
This website is intended for adults. We do not knowingly collect personal data from children under 18.
Grievance officer
For any complaint about how we handle your personal data, contact our Grievance Officer: Averix Overseas Private Limited, Office at #05, 2nd Floor, Salarpur Road, Kurukshetra, Haryana · averixoverseas@gmail.com · +91 74046 90885. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.
Changes
We may update this policy from time to time. The latest version will always be on this page with its “last updated” date.
