Privacy policy
Last updated: May 18, 2026
At NOVCEL, we approach skincare with formulation discipline and transparency, and we bring that same clarity to how we handle your personal information. This Privacy Policy explains what data we collect when you visit novcel.com, how we use it, who we share it with, and what choices you have.
NOVCEL is a brand owned and operated by Rofzen Private Limited, a company incorporated under the laws of India (CIN: U21002MP2025PTC078617), with its registered office at 3A, Kothi Road, Civil Line, Dewas Bada Bazar, Dewas, Madhya Pradesh – 455001, India.
When you use our website, make a purchase, or get in touch with us, you are sharing information with Rofzen Private Limited on behalf of NOVCEL. This policy governs all such interactions.
We recommend reading this in full. But if you have a specific question, you can jump to the section that covers it.
What Information We Collect
We only collect what we genuinely need. The type of information we gather depends on how you interact with us.
1.1 Information You Give Us Directly
This includes anything you actively fill in or share with us, such as:
• Your name, email address, phone number, and delivery address when you place an order or create an account
• Payment details: processed securely through our payment partners; we do not store card numbers on our servers
• Messages or queries you send to our customer support team
• Feedback, reviews, or responses to any surveys you choose to participate in
1.2 Information We Collect Automatically
When you browse novcel.com, our systems automatically gather certain technical data. This is standard practice for most websites and helps us understand how people use the site. It may include:
• Your IP address, browser type, operating system, and device information
• Pages you visit, links you click, and how long you spend on each section
• Referral sources: meaning how you arrived at our website
• Session data and timestamps
Much of this data is aggregated and non-identifiable. We use it to improve the website experience, not to track you individually.
1.3 Cookies and Similar Technologies
We use cookies, small text files stored on your device, to keep the site functioning properly and to understand traffic patterns. You can find full details in our Cookie Policy. Briefly:
• Essential cookies keep your session active and your cart intact.
• Analytics cookies (like Google Analytics) help us measure how the site performs.
• Marketing cookies may be used to show relevant content based on your browsing, only with your consent.
You can manage or withdraw cookie consent at any time through our cookie settings link in the footer.
How We Use Your Information
We use the information we collect for specific, legitimate purposes, not to build profiles for sale, and not to bombard you with irrelevant messages. Here is what we use it for:
• Processing and fulfilling your orders, including coordinating with courier partners for delivery
• Sending you order confirmations, tracking updates, and support responses
• Managing your account and keeping your records accurate
• Improving the website, product range, and customer experience based on usage patterns
• Sending promotional communications, only if you have opted in, and always with an easy opt-out option
• Complying with applicable legal obligations, including tax and consumer protection laws
• Detecting and preventing fraud or unauthorised access to our platform
We will not use your data for purposes unrelated to the above without informing you first and, where required by law, obtaining your explicit consent.
How We Use Your Information
We use the information we collect for specific, legitimate purposes, not to build profiles for sale, and not to bombard you with irrelevant messages. Here is what we use it for:
• Processing and fulfilling your orders, including coordinating with courier partners for delivery
• Sending you order confirmations, tracking updates, and support responses
• Managing your account and keeping your records accurate
• Improving the website, product range, and customer experience based on usage patterns
• Sending promotional communications, only if you have opted in, and always with an easy opt-out option
• Complying with applicable legal obligations, including tax and consumer protection laws
• Detecting and preventing fraud or unauthorised access to our platform
We will not use your data for purposes unrelated to the above without informing you first and, where required by law, obtaining your explicit consent.
Why We Are Permitted to Process Your Data
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable regulations, we rely on the following legal grounds to process your personal data:
• Contract performance: When you place an order, we need your information to deliver it.
• Consent: For marketing communications and non-essential cookies, we only act with your explicit, freely given consent.
• Legal obligation: Certain data is retained to meet statutory requirements under Indian law.
• Legitimate interest: We may process limited data to detect security threats, prevent fraud, and improve our service, always balanced against your privacy interests.
You have the right to withdraw consent at any time. Doing so will not affect any processing that already took place on the basis of that consent.
Who We Share Your Information With
We do not sell your personal data. Full stop.
There are, however, situations where we share your information with trusted third parties to help run our business. These include:
• Logistics and courier partners, to fulfil and track your orders
• Payment gateway providers, who process transactions on our behalf under strict security standards
• Technology and analytics service providers, who help us run and improve the website
• Email and communication platforms, used to send transactional and marketing messages
All third-party partners we work with are bound by confidentiality obligations and are only permitted to use your data for the specific tasks we assign to them. We do not authorise them to use your information for their own marketing or unrelated purposes.
We may also disclose information when required to do so by law, for instance, in response to a valid court order, regulatory request, or government directive. In such cases, we will disclose only the minimum necessary and, where legally permitted, notify you.
How We Store and Protect Your Data
Your data is stored on secure servers. We use appropriate technical and organisational measures to protect it from unauthorised access, loss, or misuse. These include encrypted data transmission, access controls, and regular security reviews.
No system is completely immune to risk, and we cannot guarantee absolute security over the internet. But we take our responsibility seriously and act promptly if we identify a breach that could affect your rights.
If a data breach is likely to result in a risk to your rights, we will notify the relevant authority and, where required, inform you, in accordance with applicable law.
How Long We Keep Your Information
We do not hold on to your data longer than necessary. The retention period depends on the purpose for which the data was collected:
• Order and transaction data is retained for as long as required by Indian tax and accounting laws, typically seven years.
• Account information is kept while your account remains active. If you delete your account, we will remove your personal data within a reasonable period, except where retention is required by law.
• Marketing preferences and communication records are retained until you opt out, after which they are removed from active lists.
• Support communications may be retained for up to three years to help resolve future queries or disputes.
Your Rights Under the DPDP Act, 2023
India's Digital Personal Data Protection Act gives you meaningful control over your personal data. As a NOVCEL customer, you have the right to:
• Access: Request a summary of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent: Opt out of marketing communications or withdraw cookie consent at any time.
• Nominate: Designate a nominee who can exercise these rights on your behalf in case of death or incapacity, as permitted under applicable law.
To exercise any of these rights, write to us at support@novcel.com. We will acknowledge your request within 48 hours and endeavour to resolve it within 30 days. For complex requests, we may take up to 90 days, but we will keep you informed.
If you believe we have not handled your request appropriately, you may escalate the matter to our Grievance Officer (see Section 10) or to the Data Protection Board of India, once it becomes operational.
Links to External Websites
Our website may include links to third-party websites, partner brands, payment processors, or informational resources. Once you leave novcel.com, this Privacy Policy no longer applies.
We are not responsible for the privacy practices of external websites and encourage you to review their policies before sharing any personal information.
Children's Privacy
NOVCEL's website and products are intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18.
Under the DPDP Act, anyone under 18 is considered a child, and processing their data requires verifiable parental consent. Our website does not target minors, and we do not engage in profiling or targeted advertising directed at them.
If you believe a minor has shared personal data with us without appropriate consent, please contact us at support@novcel.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time, for example, when we introduce new features, when law changes, or when we refine our data practices. When we do, we will post the revised version on this page with an updated effective date.
If any change is material meaning it significantly affects how we handle your data, we will notify you more prominently, either by email or through a notice on the website.
We encourage you to revisit this page periodically. Continued use of the website after changes are published constitutes acceptance of the revised policy.