Last updated: November 4, 2026
RIWANA is a rice-based skincare brand operated by Riwana Skin Essentials LLP (“we”, “us”, “our”), registered at Ranchi, Jharkhand, India.
For anything related to this policy or your personal data, write to us at riwanadayton0023@gmail.com.
Where we rely on your consent (for example, WhatsApp updates or marketing messages), you can withdraw it at any time, without affecting any processing we already completed based on it before you withdrew.
Withdrawing consent for marketing does not affect transactional messages we’re required to send you, such as order confirmations.
We never sell your personal data. We share it only with the service providers below, each of whom processes it on our behalf to run the parts of RIWANA you use:
Some of our service providers store data outside India. In particular, Supabase hosts our database in Tokyo, Japan. Other providers listed in Section 5 may also process or store data outside India as part of their own global infrastructure. We only work with providers who maintain appropriate security standards for the data they handle.
When you book a 1-on-1 consultation, our nutrition expert sees only the information needed for that conversation — your name, contact details, and (where relevant) your quiz results.
Guidance given during a consultation is general skincare and nutrition guidance, not medical advice, diagnosis, or treatment. Please consult a qualified medical professional for any medical condition.
We keep personal data only for as long as it’s needed for the purposes described in this policy — for example, order records for as long as needed for accounting, warranty, and legal purposes, and quiz/consultation data for as long as your account is active or until you ask us to delete it.
When data is no longer needed, we delete it or anonymise it so it can no longer identify you. Data stored only in your own browser (cart, wishlist, local account) stays there until you clear your browser storage or ask us to help you remove it from any copies we hold elsewhere (e.g. our Formspree inbox).
Under India’s Digital Personal Data Protection Act, 2023, you have the right to:
To exercise any of these rights, email us at riwanadayton0023@gmail.com with your request — we’ll verify your identity and respond within a reasonable time.
We don’t use advertising or analytics cookies. What we do use is your browser’s local storage, which works like a cookie but stays only on your device, to run core site features:
Your login itself isn’t stored this way — the email + one-time code you use to sign in is handled by Supabase Auth through secure, httpOnly cookies, not local storage.
You can clear any of this at any time via your browser settings. Doing so may empty your cart or wishlist, but won’t log you out — that’s handled separately, by Supabase Auth.
RIWANA is intended for users aged 18 and above. If you are under 18, please use this site only with the involvement and consent of a parent or guardian. If we learn that we’ve collected personal data from a child without appropriate consent, we will delete it.
We use industry-standard safeguards appropriate to the data involved — encrypted connections (HTTPS) across the site, access-controlled databases, and payment processing handled entirely by Razorpay’s PCI-DSS-compliant infrastructure, so we never touch your card or UPI details.
Logging in never involves a password at all — we use one-time email codes (via Supabase Auth) instead, so there is no password of yours for us, or anyone who might compromise our systems, to lose.
If you have a complaint about how we’ve handled your personal data, please contact our Grievance Officer using the details above.
We may update this policy from time to time, for example as our services or applicable law change. We’ll update the “Last updated” date below whenever we do, and significant changes will be highlighted on this page.
Last updated: November 4, 2026