Privacy Notice
This notice explains, in plain language, what personal data Papillon collects through this website, why, and how you can control it. It is written with India’s Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 in mind. Version 2026-11-draft
1. Who we are
Papillon (“we”) is based in Chandigarh, India, and provides business, technology and digital services — including the Papillon Beauty Business Platform — to businesses in India and elsewhere. Legal entity name: [confirm registered name].
2. What we collect, why, and what it enables
We collect only what you type into our two forms. Nothing is collected from you automatically for advertising or tracking.
| Form | Personal data collected | Purpose | What it enables |
|---|---|---|---|
| Contact enquiry | Name, company, email, phone, country, service of interest, your message, preferred contact method | To reply to your enquiry | A response from our team about the service you asked about |
| Demo request | Name, business name, business type, number of locations, email, phone, current software, areas you want to improve | To arrange and run a product demonstration | A demonstration of the Beauty Business Platform tailored to your business |
We use the details only for the purpose shown against each form. If we ever want to use them for something else, we will ask you first.
3. Your consent, and how to withdraw it
We process these details only if you tick the consent box on the form. You can withdraw your consent at any time, as easily as you gave it, by writing to the contact in section 9 or by using our Contact page. After withdrawal we stop using your details for that purpose and erase them unless the law requires us to keep them.
4. Your rights
- Ask for a summary of the personal data we hold about you and who we have shared it with.
- Ask us to correct, complete or update your data, or to erase it.
- Raise a grievance with us about how we handle your data (section 9).
- Nominate another person to exercise these rights for you if you die or cannot act yourself.
We will respond within [number of days — no more than the period set by law].
5. Complaining to the Data Protection Board of India
If you are not satisfied after using our grievance contact, you may make a complaint to the Data Protection Board of India. Please contact us first so we can try to put things right.
6. How long we keep your data
We keep enquiry and demo-request details only for as long as needed to respond to you and follow up on that request, then erase them. Retention period: [e.g. 12 months after last contact — confirm]. Some records and logs may need to be kept for a minimum period the law requires.
7. Where your data goes
Form submissions travel over an encrypted connection (HTTPS) to FormSubmit, a form-delivery service, which forwards them by email to Papillon’s business inbox (Google Mail). We do not sell personal data. We share it only with the service providers that help us receive and manage enquiries — currently FormSubmit and Google — who handle it on our behalf. These providers may process data outside India: FormSubmit does not publish where its operator or servers are located. [update this section when submissions move to Papillon’s own platform, and confirm who can access the inbox from outside India]
8. Cookies and your device
This website does not set cookies and does not use advertising or analytics trackers. When you visit, or if you install the site as an app, your browser may keep a local copy of our public files (pages, images, fonts) so the site loads faster and opens without a connection. That copy never contains anything you type into a form. If we add analytics in future, we will ask before using anything that is not essential and will update this notice.
9. Contact and grievance officer
Name: [name / designation]
Email: [privacy contact email]
Postal address: [address]
10. Children
Our services are for businesses. These forms are not meant for children, and we do not knowingly collect personal data of anyone under 18 through them. If you believe a child has sent us details, tell us and we will delete them.
11. Changes to this notice
If we change this notice we will update the version above. If a change affects how we use details you already gave us, we will ask for your consent again where the law requires.
Working draft: this notice must be reviewed by a qualified legal professional, with the highlighted fields completed, before the website goes live.