Privacy Policy

1. Introduction & Who We Are

Welcome to CTBeauties.com ("the Platform", "we", "us", "our"). CTBeauties is the Data Fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for the purposes described in this Privacy Policy. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you use our website and services.

2. Information We Collect

We collect information to provide and improve our service to you. The types of information we collect are:

• Account Information: When you register for an account, we require a valid email address and a password. Your email address is used for account verification, communication, and notifications related to your account activity.
• Profile & Ad Content: When you post a profile, we collect all the information you provide, including text, descriptions, contact details, location, and any images you upload. This information is intended to be public.
• User-Generated Content: We collect information you generate on the site, such as comments you post on profiles and profiles you add to your "favorites" list.
• Payment Information: When you purchase coins or a promotion, our payment processor (Paytm/UPI) handles your payment details directly. We do not store your card, UPI PIN, or bank credentials.
• Technical Data: We automatically collect certain information when you visit our site, such as your IP address, browser type, device information, and browsing activity. This helps us to maintain security and improve our service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Our Services: To manage your account, provide you with access to your user dashboard, and display your profile ads and content as you direct.
• For Moderation and Security: To enforce our Terms and Conditions, including our policy on unique content. We review content to prevent duplicate posts, spam, and illegal activity.
• To Communicate With You: To send you important notifications about your account, such as content approval status, warnings for policy violations, or other service-related announcements.
• To Improve the Platform: To analyze how users interact with our site so we can enhance user experience and develop new features (only where you have given cookie consent, see Section 7).

4. Data Sharing and Disclosure

Your privacy is crucial. We do not sell your personal data. We only share information with the following categories of recipients:

• Publicly Shared Information: Content you post in your profiles, including images and descriptions, is public and can be viewed by any visitor to the Platform. Do not post any information you are not comfortable sharing publicly.
• Service Providers (Data Processors): We use Cloudflare Turnstile for bot/spam protection on our forms, Google Analytics for traffic analysis (only if you accept analytics cookies), and Paytm/UPI as our payment processor for coin and promotion purchases. These providers process data only on our instructions and for the stated purpose.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court, police, or a government agency).
• To Enforce Rights: We may share information to enforce our Terms and Conditions, protect the safety of our users, or defend against legal claims.

5. Your Data Rights and Choices

Under the DPDP Act, you have the right to:

• Access and Update Your Data: You can access and edit most of your account and profile information directly through your user dashboard.
• Delete Your Data: You can delete individual profile posts at any time through your dashboard. You can also permanently erase your entire account yourself, at any time, from Account Settings → Delete Account. This immediately removes your listings and anonymizes your account record. You do not need to email support to exercise this right, though you may do so if you prefer.
• Withdraw Consent: You may withdraw consent for optional processing (e.g., analytics cookies) at any time; this does not affect the lawfulness of processing already carried out.
• Object to Processing / Grievance Redressal: You can raise a grievance about how we handle your data using the contact details in Section 9. If you are not satisfied with our response, you may approach the Data Protection Board of India.

6. Data Retention

• Account & profile data: retained while your account is active, and deleted/anonymized immediately when you use the self-service "Delete Account" option, or within 30 days of a support-based deletion request.
• Technical/security logs (IP address, access logs): retained for up to 12 months for fraud prevention and security investigation.
• Analytics data: retained by Google Analytics per its own retention settings, only for users who accepted analytics cookies.

7. Our Use of Cookies

We use two categories of cookies:

• Essential cookies: required for core functions like keeping you logged in, CSRF protection, and remembering your preferences. These cannot be switched off as the service will not function without them.
• Optional analytics cookies (Google Analytics): only loaded after you click "Accept" on the cookie banner shown on your first visit. If you click "Reject Analytics", these cookies are never loaded. You can change your choice at any time by clearing your browser's site data for this domain and revisiting the site.

8. Data Security & Breach Notification

We implement reasonable technical and organizational security measures (including bot-protection via Cloudflare Turnstile and access controls) designed to protect your information from unauthorized access, alteration, and disclosure. However, no method of transmission over the Internet is 100% secure. In the event of a personal data breach that affects you, we will notify the Data Protection Board of India and affected users as required under the DPDP Act.

9. Grievance Officer & Contact

For any question, complaint, or request relating to this Privacy Policy or your personal data (including access, correction, or deletion requests), please contact our Grievance Officer – Support Team at [email protected]. We will acknowledge your request within 2 business days and resolve it within 30 days.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this page periodically for any changes.