Privacy Policy

 

Effective Date: 20th April, 2026

Pochē Aesthetics (“Pochē”, “the Company”) respects the privacy of every person who shares information through Meta lead ads, Instagram, Facebook, WhatsApp, email, phone, or any website / landing page operated by the Company.

This Privacy Policy explains what information is collected, how it is used, when it may be shared, and what choices are available to the person sharing that information.

1) Information collected

Pochē Aesthetics may collect the following information:

  • Name

  • Mobile number

  • Email address

  • Preferred class date or service date

  • City / location

  • Responses shared in enquiry forms or direct messages

  • Any other information voluntarily shared for booking, enquiry, or follow-up

When a lead is submitted through Meta lead forms, the Company may receive the details entered in that form, including any answers to qualification questions and any contact details submitted for follow-up.

2) How information is used

The Company may use the collected information to:

  • Respond to class enquiries

  • Share class details, timings, venue, fees, and availability

  • Confirm bookings and reservations

  • Send follow-up messages related to the enquiry

  • Share updates about upcoming classes, workshops, events, or services

  • Improve lead handling and customer communication

  • Maintain internal records and service history

  • Comply with applicable legal and regulatory requirements

3) Basis of processing and consent

By submitting details through a lead form, DM, WhatsApp, email, or another enquiry channel, the person provides information voluntarily for a specific purpose. Under the DPDP Act, consent must be free, specific, informed, unconditional, and given through a clear affirmative action, and it must be limited to what is necessary for that purpose. The policy therefore treats enquiry data as information shared for class or service-related communication unless a separate consent is given for marketing or other uses.

4) Sharing of information

Pochē Aesthetics may share information only when needed with:

  • Team members handling enquiries and bookings

  • Studio, event, class, or service coordinators

  • Payment or communication partners, if used

  • Technology service providers that help with CRM, messaging, lead management, email, website hosting, or analytics

  • Law enforcement or government authorities, where required by law

The Company does not sell personal data as a business model.

5) Meta / Facebook / Instagram lead ads

When leads are collected through Meta platforms, the information may be used for follow-up communication and class conversion only. 

6) Data retention

Pochē Aesthetics keeps personal data only for as long as needed for the purpose for which it was collected, for record-keeping, for service communication, or for legal compliance. Under the DPDP Act, where a request for erasure is made, the personal data should be erased unless retention is necessary for the specified purpose or for compliance with law.

7) Data security

Reasonable technical and organisational safeguards are used to protect personal data from unauthorised access, misuse, loss, alteration, or disclosure. No system can be guaranteed to be completely secure, but the Company aims to keep collected data protected through access control and careful handling.

8) Rights of the data principal

Where applicable under the DPDP Act, a person may request:

  • Correction of inaccurate personal data

  • Completion of incomplete personal data

  • Updating of personal data

  • Erasure of personal data

  • Withdrawal of consent

  • Grievance redressal through the Company’s contact channel

The DPDP Act provides these rights and also requires a clear notice describing the personal data, purpose of processing, how rights may be exercised, and how a complaint may be made to the Board. It also gives the person the right to withdraw consent, with ease comparable to the way consent was given.

9) Children’s privacy

Pochē Aesthetics does not knowingly collect personal data from children without appropriate consent where such consent is required by law. If such data is found to have been collected without proper consent, the Company may delete it.

10) Cookies and analytics

If the website uses cookies, pixels, analytics tools, or similar technologies, those tools may help understand page visits, ad performance, and user behaviour. Such tools may also be used to improve the website, measure campaign performance, and create better service experiences. 

11) Third-party links

The website, ads, or messages may contain links to third-party websites or platforms. Pochē Aesthetics is not responsible for the privacy practices of those third parties, and their own policies should be reviewed separately.

12) Changes to this policy

Pochē Aesthetics may update this Privacy Policy from time to time. The updated version will take effect from the date mentioned on the policy page.

13) Contact

For privacy-related queries, data requests, or grievance redressal, contact:

Pochē Aesthetics
contact.poche@gmail.com