Privacy policy

Last Updated: 20 September 2026

At VOLATILE, we respect your privacy and are committed to protecting the personal information you provide when you visit, browse, or purchase products through our online store.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you use our website, place an order, contact us, or otherwise interact with our services.

Our online store is powered by Shopify, which provides the e-commerce platform and technology that enables us to offer our products and process customer orders.

This Privacy Policy is intended for customers and visitors in India and is to be read together with our Terms of Service, Shipping Policy and Return & Refund Policy.

1. Who We Are

This website is operated by:

Legal Business Name: Avani Aromatics
Brand Name: VOLATILE
Business Address: Avani Aromatics, A 612, Dreamcastle, Survey No. 241/A/A, Sheikh Wasti Lane 1, Wakad, Pune, Maharashtra - 411057, INDIA
Email: care@avaniaromatics.com
Phone: +91 9270223463 

For your complaints, you may contact us using the details provided above.

For purposes of applicable Indian data-protection law, we determine why and how customer personal data is processed in connection with our business and Shopify-powered store.

2. Our E-Commerce Platform

Our online store is hosted and powered by Shopify.

Shopify provides technology and services that allow us to operate our online store, including functions relating to:

  • Website hosting;
  • Product listings;
  • Shopping cart functionality;
  • Checkout;
  • Customer accounts;
  • Order management;
  • Payment-related processing;
  • Security and fraud prevention;
  • Analytics and website functionality; and
  • Other e-commerce services.

Shopify may process personal data on our behalf in accordance with its applicable agreements and privacy documentation. Shopify's Data Processing Addendum states that, for relevant customer personal data processed through Shopify's services, the merchant acts as the data controller and Shopify acts as the data processor, subject to specified exceptions.

Shopify also processes certain information independently for its own purposes in connection with services it provides. Shopify's own Privacy Policy explains how it handles personal data relating to consumers and merchants.

3. Personal Data We Collect

Depending on how you interact with our store, we may collect the following categories of personal data.

A. Contact Information

This may include:

  • Full name;
  • Email address;
  • Mobile or telephone number;
  • Billing address;
  • Shipping address; and
  • Other contact information you voluntarily provide.

B. Order Information

When you place an order, we may collect and process:

  • Products purchased;
  • Product quantities;
  • Order number;
  • Order date;
  • Order value;
  • Billing details;
  • Shipping/delivery details;
  • Order status;
  • Return and refund information; and
  • Communications relating to your order.

C. Payment Information

Our store may use Shopify and/or third-party payment service providers to process payments.

Depending on the payment method selected, payment-related information may include:

  • Payment method;
  • Transaction reference;
  • Payment status;
  • Amount paid; and
  • Other information necessary to process or verify the transaction.

We generally do not require or store complete credit-card, debit-card or banking credentials on our own systems when payment is processed through an authorised payment provider.

Shopify's payment-related services may involve Shopify and/or third-party payment processors processing customer payment data.

D. Customer Communications

If you contact us through email, telephone, WhatsApp, contact forms, social media or other communication channels, we may retain information necessary to respond to and manage your enquiry.

E. Technical and Usage Information

When you visit our Shopify-powered website, certain information may be collected automatically through Shopify and other technologies used on our store.

This may include:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Network information;
  • Approximate location;
  • Pages visited;
  • Products viewed;
  • Shopping-cart activity;
  • Referring website;
  • Date and time of access; and
  • Other technical or usage information.

Shopify states that it collects device, browser, network and IP information and uses cookies and similar technologies in connection with its services.

4. How We Use Your Personal Data

We may use personal data for the following purposes.

Processing Orders

We use information to:

  • Receive and process orders;
  • Confirm purchases;
  • Process payments;
  • Prepare products for dispatch;
  • Arrange delivery;
  • Provide shipment tracking;
  • Process cancellations;
  • Process returns and refunds; and
  • Provide order-related communications.

Customer Support

We may use your information to:

  • Respond to enquiries;
  • Resolve complaints;
  • Assist with delivery issues;
  • Handle damaged or defective products;
  • Process return or refund requests; and
  • Communicate with you about your order.

Website Operations

We may use information to:

  • Operate our Shopify store;
  • Maintain website functionality;
  • Improve customer experience;
  • Monitor website performance;
  • Detect fraudulent activity;
  • Prevent misuse; and
  • Maintain website security.

Legal and Business Purposes

We may process personal data where necessary to:

  • Comply with applicable Indian laws;
  • Maintain accounting and business records;
  • Respond to lawful requests from authorities;
  • Establish, exercise or defend legal claims;
  • Prevent fraud; and
  • Protect our legal rights and business interests.

Marketing

Where permitted by applicable law and where required, with your consent, we may use your contact information to send:

  • Promotional offers;
  • New-product announcements;
  • Discounts;
  • Newsletters;
  • Seasonal promotions; and
  • Other marketing communications.

You may opt out of marketing communications at any time.

5. Legal Grounds for Processing

We process personal data only for lawful purposes recognised under applicable Indian law.

Depending on the circumstances, processing may be based on:

  • Your consent;
  • Your request to purchase or receive products/services;
  • Compliance with legal obligations;
  • Necessary business and security purposes where permitted by law; or
  • Other lawful grounds recognised under applicable legislation.

Where we rely on consent, we will seek consent in a manner required by applicable law.

The Digital Personal Data Protection Act, 2023 provides a framework for processing digital personal data, including requirements concerning consent and certain legitimate uses.

6. Consent

Where consent is required, we will seek consent in a clear and appropriate manner.

Where processing is based on consent, you may withdraw your consent.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

However, withdrawing consent may affect our ability to provide certain services where the relevant information is necessary for that service.

For example, if you withdraw consent for information that is necessary to process and deliver an order, we may not be able to complete that order.

7. Shopify and Customer Data

Because our store operates through Shopify, certain customer information is processed through Shopify's systems.

This may include information relating to:

  • Customer accounts;
  • Orders;
  • Checkout;
  • Shopping-cart activity;
  • Product purchases;
  • Customer communications;
  • Website activity;
  • Device information;
  • Cookies; and
  • Other information necessary to provide Shopify's e-commerce services.

Shopify's current consumer privacy documentation states that Shopify may receive information about customers' interactions with merchants, including browsing activity, products viewed or purchased, billing and shipping information and transaction details, depending on the Shopify services being used.

Shopify's own privacy practices are governed by Shopify's applicable privacy documentation.

Shopify Privacy Policy:
Shopify Privacy Policy

8. Payment Providers

Payments may be processed through Shopify-supported payment services and/or third-party payment gateways.

Depending on the payment method and services enabled on our store, payment information may be processed by the relevant payment provider.

Payment providers may process information for purposes including:

  • Completing transactions;
  • Authentication;
  • Fraud prevention;
  • Payment security;
  • Refund processing; and
  • Compliance with applicable legal and regulatory requirements.

Each payment provider may have its own privacy policy governing its processing activities.

9. Shipping and Delivery Providers

To deliver your order, we may share necessary information with courier and logistics providers.

This may include:

  • Customer name;
  • Delivery address;
  • Mobile number;
  • Order number;
  • Package information; and
  • Other information reasonably necessary to complete delivery.

We share only information reasonably necessary for fulfilment of the order and related services.

10. Other Service Providers

Depending on the services integrated with our Shopify store, personal data may be processed by third-party providers for purposes such as:

  • Website hosting and technology;
  • Payment processing;
  • Shipping;
  • Email;
  • SMS;
  • WhatsApp/customer communications;
  • Analytics;
  • Advertising;
  • Fraud prevention;
  • Website security;
  • Customer support; and
  • Business administration.

The specific third-party services used by our store may change from time to time.

We seek to use appropriate service providers and require appropriate handling of personal data where applicable.

11. Cookies and Similar Technologies

Our Shopify store uses cookies and similar technologies.

These technologies may be used for purposes including:

  • Keeping products in your shopping cart;
  • Maintaining your session;
  • Remembering preferences;
  • Processing orders;
  • Improving website functionality;
  • Understanding website usage;
  • Analytics;
  • Security and fraud prevention; and
  • Marketing or advertising, where applicable.

Shopify itself uses cookies and similar technologies in connection with its services.

The cookies used on our store may include cookies placed by Shopify and, depending on the integrations we use, third-party providers.

Where applicable, Shopify provides merchants with customer-privacy settings that can be configured for different regions, including cookie-banner and consent functionality.

You may also be able to control cookies through your browser settings.

Disabling certain cookies may affect some functions of our website.

12. Analytics and Advertising

If we use analytics, advertising pixels or similar technologies, information about website visits, product views, shopping behaviour and interactions may be processed for purposes such as:

  • Understanding website performance;
  • Measuring advertising campaigns;
  • Improving products and services;
  • Understanding customer behaviour; and
  • Showing relevant advertisements.

The specific analytics or advertising services used may change over time.

Where consent is required by applicable law, we will obtain the relevant consent before using applicable tracking technologies for such purposes.

13. Marketing Communications

If you have opted in to receive promotional communications, we may contact you by:

  • Email;
  • SMS;
  • WhatsApp; or
  • Other available communication channels.

You may unsubscribe from marketing communications at any time.

However, opting out of marketing communications will not normally prevent us from sending essential transactional communications such as:

  • Order confirmation;
  • Payment confirmation;
  • Dispatch notification;
  • Delivery updates;
  • Refund information; or
  • Important service communications.

14. Sharing of Personal Data

We do not sell your personal data as an independent product.

We may disclose personal data where reasonably necessary for:

  • Order fulfilment;
  • Payment processing;
  • Shipping and delivery;
  • Website operation;
  • Customer support;
  • Security and fraud prevention;
  • Analytics and marketing, where applicable;
  • Legal compliance; or
  • Other lawful business purposes.

Categories of recipients may include:

  • Shopify;
  • Payment processors;
  • Courier and logistics providers;
  • Website and technology providers;
  • Communication providers;
  • Analytics and advertising providers;
  • Professional advisors; and
  • Government or law-enforcement authorities where legally required.

15. International Data Processing

Shopify and certain third-party service providers may process or store personal data outside India.

Shopify operates services and infrastructure across multiple jurisdictions. The location of data processing may depend on the services used and applicable arrangements.

Where personal data is transferred outside India, we will comply with applicable Indian legal requirements relating to such transfers.

The DPDP Act provides that the Central Government may restrict the transfer of personal data to certain countries or territories outside India, subject to the framework provided by the Act.

16. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration or disclosure.

Because our store is powered by Shopify, Shopify's security measures also form part of the technical infrastructure supporting our store.

Shopify states that it maintains security measures designed to protect the security and integrity of its platform and systems, while also noting that no internet transmission or electronic storage system can be guaranteed to be completely secure.

We cannot guarantee absolute security of information transmitted over the internet.

17. Data Retention

We retain personal data only for as long as reasonably necessary for legitimate business or legal purposes.

This may include retaining information for:

  • Order fulfilment;
  • Customer support;
  • Returns and refunds;
  • Accounting;
  • Taxation;
  • Legal compliance;
  • Dispute resolution;
  • Fraud prevention; and
  • Establishing or defending legal claims.

When information is no longer required for a lawful purpose, we will take reasonable steps to delete, anonymise or otherwise dispose of it in accordance with applicable law.

Certain records may need to be retained for periods required by applicable Indian laws.

18. Your Privacy Rights

Subject to applicable law and the commencement of relevant provisions, you may have rights concerning your personal data, including rights relating to:

  • Access to information about your personal data;
  • Correction of inaccurate or incomplete information;
  • Erasure of personal data where legally applicable;
  • Withdrawal of consent where processing is based on consent;
  • Grievance redressal; and
  • Nomination of another person to exercise applicable rights where permitted by law.

The DPDP Act provides for rights including access to information, correction and erasure, grievance redressal and nomination, subject to the conditions specified in the Act.

19. How to Make a Privacy Request

You may contact us at:

Email: care@avaniaromatics.com
Phone : +91 9270223463

Your request should include:

  • Your name;
  • Email address or mobile number associated with the order/account;
  • Description of the request; and
  • Any information reasonably necessary to verify your identity.

We may verify your identity before processing a request involving personal data.

We will process valid requests in accordance with applicable law.

Shopify also provides merchants with tools to assist with certain customer data requests, including access and deletion requests processed through Shopify.

20. Children's Privacy

Our online store is intended for customers who are legally capable of entering into transactions.

We do not knowingly process children's personal data in violation of applicable Indian law.

Where applicable law requires verifiable parental or guardian consent for processing a child's personal data, we will follow the applicable requirements.

The DPDP framework contains specific requirements concerning children's personal data.

21. Data Breach

We maintain safeguards designed to protect personal data.

If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the incident and make notifications required under applicable law.

The DPDP Rules, 2025 contain specific requirements relating to personal data breaches, including notification obligations, subject to their applicable commencement dates.

22. Third-Party Websites

Our website may contain links to third-party websites or services.

These may include:

  • Payment providers;
  • Social media platforms;
  • Shipping services;
  • Other websites; and
  • Third-party applications.

We are not responsible for the privacy practices of independent third-party websites.

We recommend reviewing their respective privacy policies before providing personal information.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business;
  • Changes to our Shopify store;
  • New applications or integrations;
  • Changes in the information we collect;
  • Changes in our privacy practices;
  • Changes in applicable Indian law; or
  • Changes to regulatory requirements.

The updated version will be published on this page with a revised “Last Updated” date.

Where required by applicable law, we will provide appropriate notice or obtain consent for material changes.

24. Governing Law

This Privacy Policy is governed by the laws applicable in India.

Nothing in this Privacy Policy is intended to exclude or restrict any rights available to individuals under applicable Indian data-protection or consumer-protection laws.

25. Contact Us

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Legal Business Name: Avani Aromatics
Brand Name: VOLATILE
Business Address: Avani Aromatics, A 612, Dreamcastle, Survey No. 241/A/A, Sheikh Wasti Lane 1, Wakad, Pune, Maharashtra - 411057, INDIA
Email: care@avaniaromatics.com
Phone: +91 9270223463

We value your trust and are committed to handling your personal data responsibly.