Privacy Policy – Glambees and The Dew Crew

Oct 10, 2026 · @Glambees Administrator

1. Who we are and what this policy covers

Last updated: 10 October 2026

This Privacy Policy explains how Webbick Business Services (“we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit or buy from glambees.in (and any pages we host on glambe.es), where we sell body wash, body lotion and related products under the Glambees and The Dew Crew brands.

• Registered address: Unit 101, Oxford Towers, 139/88, HAL Old Airport Road, Kodihalli, Bangalore, Karnataka, India, 560008
• GSTIN: 29JNPPK2509M1Z7
• Email: [email protected]
• WhatsApp: +91 93795 38127 (messages only, no calls)

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described here. We sell only in India and ship only within India. Our products are made for us by a third-party contract manufacturer.

By using our website, creating an account or placing an order, you confirm that you have read this policy. Where the law requires your consent for a specific use of your data (for example marketing or non-essential cookies), we ask for it separately and you can withdraw it at any time. If you do not agree with this policy, please do not use the website.

2. Information we collect

Information you give us

• Account and checkout: name, mobile number, email address, shipping address and billing address.
• Optional details: GST number (if you want a GST invoice), date of birth and gender. You may leave the date of birth and gender fields blank.
• Login details: when you log in through our authentication provider, we receive your mobile number and, once those options are enabled, your email address and basic profile details (name, email) from Google or Facebook if you choose to use them. We do not receive your Google or Facebook password.
• Reviews: your name, review text, and any photo or video you upload.
• Messages to us: the content of your emails and WhatsApp messages, and any images or videos you send us, such as unboxing videos for a claim.
• Affiliate applicants (when the programme starts): identity and payment details we need to pay and report commissions, such as PAN and bank account details.

Information collected automatically

• Device and browser type, IP address, approximate location derived from IP address, pages viewed, links clicked, referring site, and date and time of visits.
• Cookie and similar-technology data. See section 4.
• For consenting visitors, session recordings and interaction data (clicks, scrolls, form interactions) that help us fix usability problems.

Information from others

• Payment status, transaction ID and payment method type (for example UPI or card) from Razorpay or Cashfree. We never receive or store your full card number, CVV, UPI PIN or netbanking credentials.
• Delivery status updates from courier partners.

What we do not collect: we do not knowingly collect health records, biometric data or financial account credentials, and we ask you not to send them to us. Skin type or skin concerns are collected only if you choose to tell us, for example in a review or a message.

3. How and why we use your information

Automated decisions. We do not make decisions about you that have legal or similarly significant effects through solely automated means.

We do not sell your personal data.

Conversion measurement. If you consent to marketing cookies, we send hashed (one-way encrypted) email or phone details, with order events, to Meta (Conversions API) and Google (Enhanced Conversions) so they can match purchases to ads. You can decline this through the cookie banner or by emailing us.

4. Cookies, analytics and advertising

We use cookies and similar technologies (pixels, SDKs, local storage). Our cookie banner, provided by WPConsent, lets you accept or reject each category. Except for strictly necessary cookies, we place nothing on your device until you agree. You can change your choice at any time through the cookie settings link on our site, or through your browser settings.

Session recordings are used only to improve the site. We configure them to mask form inputs such as passwords and payment fields. You may receive third-party cookies from these providers, which are governed by their own privacy policies.

Some browsers and devices offer a “Do Not Track” or similar signal. Our site does not currently respond to these signals, so please use the cookie banner.

5. Marketing messages and consent

Service messages. We will always send you messages about your account, OTPs, orders, payments, shipping and returns by email, SMS and WhatsApp. These are necessary to run your order and are not marketing.

Promotional messages. We send offers, new-product news and newsletters only if you opt in. You choose separately for each of email, SMS and WhatsApp, at account creation, at checkout or in your account settings. Not opting in has no effect on your ability to shop with us.

How we send them. Emails go out through MailPoet and Brevo, SMS through MSG91 and WhatsApp through Emovur using the WhatsApp Business API. SMS follow the rules of the Telecom Regulatory Authority of India, and WhatsApp messages follow WhatsApp Business policies.

Opting out. You can withdraw consent at any time:

• Email: use the unsubscribe link in any marketing email.
• SMS: follow the opt-out instruction in the message, or write to [email protected].
• WhatsApp: reply STOP, or message us at +91 93795 38127.
• Or update your preferences in your account.

We will act on your request within a reasonable time, and in any case before the next promotional campaign. After you opt out, you will still receive service messages.

6. Who we share data with, and where it goes

We share personal data only with service providers who need it to do their job for us, and who are required to protect it. We do not sell your data.

We may also disclose data:

• to government bodies, courts or law-enforcement agencies when the law requires it;
• to our professional advisers, accountants and insurers under confidentiality;
• to protect our rights, property or safety, or those of our customers; and
• to a buyer or successor if our business or its assets are sold or transferred, in which case this policy continues to apply to your data until you are told otherwise.

Transfers outside India. Some of the providers above process data in the United States or the European Union. We transfer personal data abroad only as the DPDP Act allows, which means we do not send it to any country the Government of India has restricted. We use providers that offer contractual safeguards for the data they handle. By consenting to our cookie banner and using our services, you understand that your data may be handled outside India as described here.

A provider’s own use of data, for example Google or Meta using cookie data for their own purposes, is governed by that provider’s privacy policy. We encourage you to read them.

7. How long we keep data, and how we protect it

We keep personal data only as long as we need it for the purpose it was collected, or as the law requires. After that we delete or anonymise it.

Where the law requires us to keep a record, we will keep it even if you ask for erasure, and we will use it only for that legal purpose.

Security. We use reasonable security safeguards appropriate to the data we hold: encrypted connections (HTTPS), access controls limited to staff who need the data, OTP-based login, and security services from Cloudflare and our hosting provider. Payment details are handled by Razorpay and Cashfree, which follow payment-industry security standards. No online system is completely secure, so we cannot guarantee absolute security. Please keep your login details and OTPs private.

If something goes wrong. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

8. Your rights, children, and how to reach us

Your rights. Under the DPDP Act you may:

• ask for a summary of the personal data we hold about you and the providers we share it with;
• ask us to correct, complete or update your data;
• ask us to erase your data, unless we must keep it by law (see section 7);
• withdraw any consent you have given, as easily as you gave it. Withdrawal does not affect what we did before you withdrew, and it may mean we cannot provide the service that depended on that consent;
• nominate another person to exercise these rights if you die or become unable to; and
• have your grievance heard and resolved.

To use a right, email [email protected] from the email or mobile number on your account. We may ask you to verify your identity first. We aim to respond within 30 days. You can also delete your marketing consent or close your account from your account settings where available.

Children. Our website and products are intended for people aged 18 and over. You must be at least 18 to create an account or place an order. We do not knowingly collect personal data from anyone under 18. A parent or guardian may buy through their own account. If you believe a child has given us data, write to us and we will delete it.

Grievance Officer. For questions, complaints or requests about your personal data or this policy:

• Designation: Customer Relations Head, Webbick Business Services
• Email: [email protected]
• Address: Unit 101, Oxford Towers, 139/88, HAL Old Airport Road, Kodihalli, Bangalore, Karnataka, India, 560008

We will acknowledge your complaint within 48 hours and aim to resolve it within one month. WhatsApp (+91 93795 38127) is available for messages, but please use email for formal complaints and requests so there is a record.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is operational, after first raising the matter with us.

9. Reviews, affiliates, links and changes

Reviews and public content. Reviews you post, including your name and any photo or video, are public. Anyone can see, copy or share them, and we cannot control what others do with them. Please do not include phone numbers, addresses or other sensitive details. To have a review removed, email [email protected]. We may use a third-party review service such as Judge.me in future. If we do, we will update this policy first, and that service will handle review data under its own privacy policy.

Affiliates. If you join our affiliate programme, we will collect the details needed to verify you, track referrals and pay commissions. We will update this policy with the specifics before the programme starts.

Third-party websites. Our website may link to sites we do not run, including social media pages. We are not responsible for their privacy practices. Please read their policies.

Changes to this policy. We may update this policy when our practices or the law change. The “Last updated” date at the top shows the latest version. If we make a material change, we will tell you by email or a notice on the website, and where the law requires it, we will ask for your consent again. Continued use of the website after an update means you accept the updated policy, except where the law requires fresh consent.

Governing law. This policy is governed by the laws of India. Subject to any rights you have under consumer-protection law, the courts at Bengaluru, Karnataka have jurisdiction over disputes arising from it.

Contact. Webbick Business Services, Unit 101, Oxford Towers, 139/88, HAL Old Airport Road, Kodihalli, Bangalore, Karnataka, India, 560008. Email: [email protected].