Privacy policy

Last Updated: 05-07-2026

This Privacy Policy (“Policy”) is a legally binding agreement between you (“you”, “your”, “User”, “Data Subject”) and Brass Essence (“we”, “our”, “us”). It describes how we collect, use, share, retain, and protect your personal data when you access or use our website www.brassessence.in (the “Site”) or transact with our services.

By accessing or using the Site, making a purchase, or otherwise providing us your information, you accept and consent to the practices described in this Policy.

If you do not agree with the terms of this Policy, please do not use our Site or provide any personal information.

1. Definitions

In this Policy:

“Personal Data” means any information relating to an identified or identifiable natural person.

“Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or transfer.

“Sensitive Personal Data / Sensitive Personal Information” means data requiring heightened protection, such as health or biometric data, under applicable law.

“Data Controller” means Brass Essence, which is responsible for deciding the means and purposes of processing Personal Data.

“Data Processor” means any third party that processes data on behalf of the Data Controller.

“Third Party” means any person or entity other than you or us.

2. Scope & Applicability

2.1 This Policy applies to all Personal Data collected through or in connection with:

Your use of the Site, mobile site, or web application;
Your registration, account creation, or subscription;
Your purchases, returns, or customer support interactions; and
Any other offline or online interactions where you provide personal information.

2.2 This Policy does not apply to data collected by third-party websites, applications, or services that you may access through links from our Site, except where we own or control those services. We are not responsible for the privacy practices of those third parties.

3. Information We Collect

3.1 Information You Provide Directly

Name, email address, phone number, billing address, and shipping address;
Account credentials, preferences, and profile information;
Communication records, customer support emails, feedback, product reviews, and surveys;
Photographs or other media submitted for reviews, contests, or personalised orders, where applicable.

Payment information is processed securely through trusted PCI-compliant payment gateway partners. Brass Essence does not store your complete credit card number, debit card number, UPI PIN, CVV, or banking credentials on its servers.

3.2 Automatically Collected or Derived Information

IP address, device identifiers, browser type, and operating system;
Usage information including pages visited, time spent, click paths, and search terms;
Cookies, web beacons, log files, and similar tracking technologies;
Geolocation data where you grant permission;
Referral and advertising identifiers.

3.3 Information from Third Parties

Address validation or shipping information from courier services;
Information from marketing partners, analytics providers, and social media platforms;
Publicly available sources, such as social media or business registries, to supplement our records or detect fraud;
Information from payment verification and fraud-screening services.

4. Legal Basis for Processing

We process your Personal Data under the following legal bases, as applicable under Indian law or other relevant jurisdictions:

Performance of Contract: To process orders, deliver products, provide after-sales support, and manage returns or exchanges.
Consent: Where you provide additional information or opt in to marketing, reviews, or mailing lists.
Legitimate Interests: For fraud prevention, system security, improving user experience, compliance, and permitted direct marketing.
Legal Obligation: To satisfy applicable tax, regulatory, legal, and record-keeping requirements.

5. Purposes of Processing & Use

We may use your Personal Data for the following purposes:

To authenticate and manage your account;
To process your orders, returns, exchanges, and related service requests;
To provide customer support, respond to enquiries, and handle complaints;
To send order confirmations, shipping updates, invoices, and other transactional communications;
To send marketing communications where permitted and where you have opted in;
To conduct internal analytics, understand usage patterns, improve our products, and enhance our Site;
To detect, prevent, or mitigate fraud, security breaches, and abuse;
To comply with legal obligations, audits, record-keeping requirements, and dispute resolution;
To facilitate a corporate reorganisation, sale, or merger, subject to appropriate confidentiality obligations.

6. Cookies, Tracking & Analytics

6.1 We use cookies, web beacons, local storage, and similar technologies, collectively referred to as “Tracking Technologies,” to understand your interaction with the Site and personalise your experience.

6.2 Categories of cookies may include:

Essential / Strictly Necessary Cookies: Required for the operation of the Site and processing of transactions.
Performance / Analytics Cookies: Help us understand how the Site is used, including page views and sessions.
Functional Cookies: Remember preferences such as language, login state, or other settings.
Advertising / Targeting Cookies: Used to deliver relevant promotions, measure advertising performance, and support retargeting.

6.3 Most browsers allow you to refuse cookies or receive alerts when cookies are being set. However, disabling certain cookies may reduce functionality or negatively affect your experience on the Site.

7. Sharing & Disclosure of Data

We may share your Personal Data under the following circumstances:

Service Providers / Processors: Including payment gateways, logistics providers, hosting providers, analytics services, and marketing partners that assist us under contractual confidentiality obligations.
Affiliates / Subsidiaries: For legitimate internal operational purposes in accordance with this Policy.
Legal or Safety Reasons: To comply with judicial or governmental orders, defend legal rights, investigate fraud, prevent misuse, or protect users and the public.
Corporate Transactions: If we sell, merge, or reorganise any part of our business, subject to appropriate data-protection safeguards.
Aggregate / Anonymised Data: We may share information that cannot reasonably identify you.

We will not sell your Personal Data to third parties for their independent direct-marketing purposes.

8. International / Cross-Border Transfer

Your data may be stored or processed outside your country of residence, including in countries with data-protection laws that differ from those in your country.

When we transfer Personal Data internationally, we take reasonable steps to ensure appropriate safeguards are in place, including contractual safeguards, approved transfer mechanisms, and confidentiality obligations.

By providing your data, you acknowledge and consent to such transfers, subject to applicable law.

9. Data Retention

We retain your Personal Data only for as long as reasonably necessary to fulfil the purposes described in this Policy or to comply with applicable legal, tax, accounting, consumer-protection, and regulatory requirements.

Specific retention periods may apply to:

Order and transaction records;
Customer enquiries and support records;
Marketing information, subject to your right to opt out;
Cookies and tracking information.

When Personal Data is no longer required, we will take reasonable steps to securely delete, dispose of, or anonymise it.

10. Security of Data

We implement reasonable technical, administrative, and physical safeguards designed to protect your Personal Data against unauthorised access, loss, misuse, alteration, disclosure, or deletion.

These safeguards may include encryption in transit and at rest, network and application firewalls, access controls, security reviews, and personnel confidentiality obligations.

However, no electronic system or method of transmission is completely secure. We cannot guarantee absolute security. If you believe your information may have been compromised, please contact us immediately.

11. Your Rights & Choices

Subject to applicable law, you may have the following rights concerning your Personal Data:

Access / Portability: Request a copy of the Personal Data we hold about you.
Correction / Update: Request correction of incomplete or inaccurate information.
Erasure / Deletion: Request deletion of your information unless retention is required by law.
Restriction / Blocking: Request that processing be limited in certain circumstances.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: Withdraw consent for activities based on consent.
Opt Out: Opt out of marketing communications and certain cookies or tracking activities.

To exercise these rights, contact us at support@brassessence.in. We may require identity verification before processing your request. We aim to respond within a reasonable timeframe, ordinarily within 30 days or sooner where required by law.

12. Children’s Privacy

Our Site and services are not intended for children under the age of 18, or any higher minimum age required under applicable law.

We do not knowingly collect Personal Data from minors without appropriate parental or guardian consent. If we become aware that such information has been collected, we will take reasonable steps to delete it promptly.

13. Grievance Redressal Mechanism

If you have questions, concerns, complaints, or believe your privacy rights have been violated, you may contact our Grievance Officer.

Grievance Officer
Brass Essence

📧 Email: support@brassessence.in

📍 Address:
A Budgeet Hardware
No. 69/3, 8th Cross, Ashok Nagar,
B.S.K. 1st Stage,
Bengaluru – 560050, Karnataka, India.

We aim to acknowledge complaints within 7 working days and resolve them within 30 days, subject to applicable law.

14. Changes to This Policy

We may update this Policy from time to time for legal, operational, or business reasons. Any changes will be posted on the Site with a revised “Last Updated” date.

In certain cases, we may notify you of significant changes by email or another appropriate method. Your continued use of the Site after changes are published constitutes your acceptance of the updated Policy.

15. Severability & Interpretation

If any provision of this Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision will be severed or modified to the minimum extent required, and the remaining provisions will continue in full force.

The headings used in this Policy are for convenience only and do not affect its interpretation.

16. Governing Law, Jurisdiction & Dispute Resolution

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Any dispute arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Bengaluru, Karnataka.