Privacy Policy

1. Scope and Purpose

The domain name www.cutiskart.com and the CutisKart mobile application are owned and operated by Cutis Pharma, a unit of Cutis, with its registered office in Bengaluru, India. This Privacy Policy governs your use of our website, mobile application, and internet-based platform (each individually, "Website" and "App" respectively, and together, "the Platforms"), and describes how we collect, use, process, store, handle and disclose information you provide while using the Platforms.

CutisKart is fully committed to respecting your privacy and implementing reasonable and appropriate measures to protect your personal information. We comply with applicable data protection, privacy and information technology laws in India, including:

• The Information Technology Act, 2000 ("IT Act")
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), to the extent applicable
• The Digital Personal Data Protection Act, 2023 ("DPDP Act")
• The Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), to the extent and from the date applicable to CutisKart

This Privacy Policy is effective from 01/09/2026. Any capitalised term not defined here derives its meaning from the Terms of Use.

2. General Terms

1. 1Please read this Privacy Policy carefully before using the Website or App.
2. 2By clicking "I Accept", or when otherwise accessing or using the Platforms, you confirm that you have read, understood and agree to be bound by this Privacy Policy and expressly consent to the collection, use, storage, handling and disclosure of your information as described herein.
3. 3You represent that any information provided by you is voluntary, true, accurate, and complete to the best of your knowledge.
4. 4By accessing or using the Platforms, you confirm that you have the capacity to enter into a legally binding contract under Indian law, including the Indian Contract Act, 1872.
5. 5You represent that you are duly authorised by any third party (including a person under the age of 18 years) whose information you share with us.
6. 6If you access or use the Website or App from outside India, you do so at your own risk and are responsible for ensuring compliance with applicable laws in your jurisdiction.
7. 7If you do not agree with this Privacy Policy, please do not use the Website or App.

3. Information We Collect

3.1 Account Information

A User may have limited access to certain features without creating an account. To access certain features, including placing orders and availing delivery services, you may be required to create an account.

3.2 Personal Information

During your use of the Platforms, you may provide, or we may collect, personal information including:

3.3 Cookies and Tracking Technologies

Like most websites, we may use cookies and other tracking technologies to collect and analyse information about traffic, remember your preferences, and improve your experience. You may configure your browser to block cookies; however, certain features may not function properly.

3.4 Automatic Technical Information

We may automatically collect technical information such as your IP address, operating system, browser type, device identifiers, and usage interactions with the Platforms.

4. Use of Information

CutisKart collects and uses your information only to the extent necessary for the following purposes:

• To register and maintain your account, process and fulfil your orders, arrange delivery of products, and facilitate billing and payments
• To improve the functionality of the Website and App, and customise your experience
• To address your requests, queries and complaints, and provide customer support
• To analyse data, track trends, build recommendation systems, and optimise the Platforms
• To send reminders or notifications in relation to your orders, recurring purchases or other products and services
• To send information about special promotions, offers and new features
• To detect, prevent, investigate and monitor fraudulent or unlawful activities
• To comply with applicable laws, rules, regulations and regulatory requirements

5. Access, Disclosure and Sharing of Your Information

CutisKart does not sell, rent or exchange your personally identifiable information with third parties for their independent commercial purposes. However, we may share your personal information with:

• Courier and logistics partners for processing and delivering your orders
• Payment service providers and payment gateways, including Razorpay and GoKwik, for processing payments
• Analytics, technology and other service providers for maintaining and improving the Platforms
• Government, regulatory, judicial or law enforcement authorities where required under applicable law

We take reasonable steps to ensure that third parties processing your personal information maintain appropriate confidentiality and security measures.

6. Photo & Media Access

7. Retention of Information

We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to:

• Provide and administer your account and process your orders
• Maintain business and transaction records
• Prevent fraud or misuse and resolve disputes
• Comply with applicable legal, regulatory, accounting or reporting requirements

If you close your account or request deletion, we may retain certain information where required or permitted by applicable law. Subject to applicable law, we will take reasonable steps to delete or anonymise your personal information within 90 days of receiving a valid deletion request.

The storage, retention, deletion and anonymisation of your personal information shall be carried out in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

8. Our Security Policy

CutisKart implements appropriate technical and organisational security measures to protect your personal information, including:

• 256-bit SSL/TLS encryption for data transmission
• Secure servers with restricted access controls
• Regular security audits and vulnerability assessments
• PCI-compliant payment processing, where applicable

You may access, review, correct, update or request deletion of your personal information by logging into your account, through the account settings on the Website or App, or by contacting us at contact@cutiskart.com. Our App also provides an account deletion facility through Settings → Delete Account.

9. Your Rights in Relation to Your Information

Subject to applicable law, you may have certain rights in relation to your personal information, including:

• The right to access, review, correct, update or request deletion of your personal information
• The right to withdraw consent where processing is based on consent
• The right to nominate any other individual who may exercise your rights as a Data Principal in the event of your death or incapacity, in accordance with Section 14 of the Digital Personal Data Protection Act, 2023

To exercise these rights, contact us at contact@cutiskart.com.

10. Updates to the Privacy Policy & Promotional Communication

CutisKart may update this Privacy Policy from time to time. Any revised version will be published on the Website and App, and will be effective from the date specified therein. Your continued use of the Platforms following the effective date of the revised Privacy Policy constitutes your acknowledgment of the changes.

You may opt out of receiving promotional communications at any time by using the unsubscribe mechanism in the relevant communication or by contacting us at contact@cutiskart.com. You will continue to receive essential transactional and service communications even after opting out.

11. Miscellaneous

The Website and App may contain hyperlinks to external websites. CutisKart is not responsible for the privacy practices of any external website. We recommend reviewing the applicable privacy policies of any third-party services before providing personal information.

You shall not host, display, upload, modify, publish, transmit, store, update or share any information on the Platforms that is unlawful, defamatory, obscene, pornographic, invasive of another person's privacy, or otherwise contrary to applicable law.

12. Contact Information & Grievances

If you have any questions, concerns or requests regarding this Privacy Policy or your personal information, you may contact us at:

Grievance Officer

13. Indemnity

You agree to indemnify and hold harmless CutisKart, its affiliates, directors, officers, employees and representatives from and against any claims, losses, liabilities, damages, costs or expenses arising out of or in connection with: (i) any information or content voluntarily provided by you to third parties through the Platforms; (ii) your violation of this Privacy Policy, the Terms of Use or applicable law; or (iii) your unauthorised, unlawful or improper use of the Platforms.

14. Severability

Each provision of this Privacy Policy shall be treated as separate and independent. If any provision is determined by a court or competent authority to be invalid, illegal or unenforceable, the remaining provisions shall continue to remain valid and enforceable.

15. Disclaimer

While CutisKart takes reasonable measures to protect your personal information, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure. We cannot guarantee that your personal information will never be accessed, disclosed, altered or otherwise compromised in circumstances beyond our reasonable control.

16. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to its conflict of laws principles. Subject to applicable law, the courts located in India shall have exclusive jurisdiction over any dispute arising out of or in connection with this Privacy Policy.