Privacy Policy

This Policy is intended to operate in accordance with the Digital Personal Data Protection Act, 2023, the rules and provisions thereunder as and when applicable and in force, and other applicable data protection laws.
 
 
Introduction

SYBARIS (“Company”, “Website”, or “Platform”) values the privacy and trust of its users and considers the protection of personal information fundamental to its relationship with customers, partners, and visitors. This Privacy Notice and Privacy Policy (“Policy”) explains how SYBARIS collects, uses, stores, shares, and protects personal data obtained through its website https://sybaris.in or through any other mode of interaction.

By accessing, browsing, registering on, or transacting through this website, users acknowledge that they have been provided access to this Policy and are advised to read it carefully. Where consent is required for the processing of personal data under applicable law, such consent will be obtained through an appropriate consent mechanism. Use of the Website remains subject to the applicable Terms & Conditions.

---

 
1. Definitions
 

• Data: Personal, non-personal, and sensitive information which, directly or indirectly, can identify an individual.

• Cookies: Small files stored on a user’s device by the website to recognise preferences and enhance user experience.

• Data Protection Laws: Applicable laws in force relating to the processing of personal data.

• User: Any natural person accessing or using the website.

• Partners: Third parties with whom SYBARIS has contractual arrangements.

• Service Providers: Entities engaged by SYBARIS to process data for specific business purposes under a written agreement.

---

 
2. Data Collected
 
SYBARIS collects and processes information that is necessary for its business operations, including but not limited to:
 

• Contact details: Name, email, address, phone number, etc.

• Financial data: Payment method, transaction details, payment preferences, history and related details, card data is not stored directly.

• Technical information: Operating System (OS), browser details, device type, website usage data, access times, language, referring website information, and information collected through cookies or similar technologies. An incoming IP address may be processed transiently where necessary for general location determination, website security, fraud prevention, or other technical purposes. Where used solely for website analytics and general location determination, the raw IP address is not retained in the analytics records.

• Transaction details: Purchase or content use history, order details, date, and value of transactions.

• Service-related data: Membership, registration and payment information details, loyalty information, and participation in marketing programmes.

• Personal information: Date of birth, gender, and government-issued identification (where legally required), responses to campaigns, surveys or questionnaires, your reviews, feedback and opinions about our products, programmes and services, your interactions with SYBARIS (e.g. calls), etc.

• Feedback and communication: Reviews, surveys, queries, or opinions submitted to SYBARIS.

---

 
3. How Data is Collected
 
Data is collected through the following means:
 

• Direct submission: When users register, transact, communicate, fill out forms, or participate in surveys.

• Automatic collection: Through cookies, pixels, and similar technologies when users browse or interact with the website.

• Third-party sources: Business partners, analytics providers, payment processors, or other platforms where users have consented to share information.

• Recorded communications: Calls or interactions with SYBARIS may be recorded for quality, training, or security purposes.

---

 
4. Automatically Collected Data
 
When users visit the website, certain technical and usage data may be automatically processed to improve performance, security, and user experience. This may include device and operating system details, language preferences, browsing behaviour, usage statistics, and information obtained through cookies or similar technologies. An incoming IP address may also be processed transiently where necessary for general location determination, website security, fraud prevention, or other technical purposes. Where used solely for website analytics and general location determination, the raw IP address is not retained in the analytics records.

---

 
5. Use and Disclosure of Data
 
SYBARIS uses personal data for the following purposes:
 

• To perform obligations arising from contracts or transactions.

• To provide, improve, market, and personalise products and services.

• To respond to queries, feedback, or disputes.

• To analyse user behaviour and generate insights for product and service development.

• To offer benefits, promotions, and loyalty programmes.

• To enhance website functionality, security, and user experience.

• To detect, prevent, and investigate fraud or illegal activity.

• To comply with legal obligations and enforce website terms.

• To share with service providers, logistics partners, or affiliates to fulfil orders and deliver services.

 
SYBARIS may also process anonymised or aggregated data for analytical and business purposes. Data may be shared with affiliates, business partners, and authorised third parties where required for the above purposes, or when permitted or required by law.

---

 
6. Minors and Age of Consent
 

The Website is intended only for persons who are eighteen (18) years of age or older. Persons below the age of eighteen (18) should not register, transact, or submit personal data through the Website. By registering or transacting through the Website, users represent that they are at least eighteen (18) years of age.

---

 
7. Data Retention
 
Data is retained only for as long as necessary to provide services, comply with legal obligations, resolve disputes, or enforce agreements. Retention periods may vary depending on the type of data and purpose of processing. Even after deletion, certain data may remain on backup systems for audit, legal, or regulatory reasons.

---

 
8. User Rights and Choices
 
Subject to applicable data protection laws, users may exercise such rights as are available to them under applicable law, including, where applicable:
 

• Request access to information concerning the processing of their personal data.

• Request correction, completion, or updating of inaccurate or incomplete personal data.

• Withdraw consent where processing is based on consent, subject to applicable consequences of such withdrawal.

• Request erasure of personal data, where applicable.

• Raise a grievance regarding the processing of their personal data.

 

Requests may be submitted to the Grievance Officer using the details provided below. SYBARIS may request information reasonably necessary to verify the identity and authenticity of the request and may accept, restrict, or decline a request where permitted or required by applicable law, providing reasons where applicable.

 
SYBARIS shall endeavour to respond to such requests within 7–15 working days.

---

 
9. Data Storage and Transfer
 
Data collected is stored on servers and may be transferred and processed in India or other jurisdictions where SYBARIS or its partners operate, in accordance with applicable data protection laws. SYBARIS ensures adequate safeguards for all cross-border data transfers.

---

 
10. Cookies and Similar Technologies
 
Cookies are unique identifiers that we transfer to your device to enable our systems to recognize your device.
 
The website uses cookies, pixels, and similar tools to recognise users, improve website functionality, analyse traffic, and personalise content. Users can manage cookie preferences through their browser settings.
 
Please refer to your browser instructions or help pages to learn more about these functions.

---

 
11. Data Security
 

SYBARIS follows industry-standard security practices to protect data from unauthorised access, misuse, loss, or alteration. However, no transmission over the internet is fully secure and the SYBARIS cannot ensure or warrant a 100% security of the website/platform.

If you are provided with any identification code, password or any other piece of information as part of the Website’s security procedure, you should treat such information as confidential and not disclose it to any third party including to other users. Users are solely responsible for the activities that occur under their account including the confidentiality of their passwords and account details and SYBARIS is not responsible for the same.

To the maximum extent permitted by applicable law, SYBARIS shall not be liable for a security incident caused solely by events beyond its reasonable control, including force majeure events such as natural disasters, government actions, cyberattacks, or system failures, provided that nothing in this Policy shall exclude or limit any obligation or liability that cannot lawfully be excluded or limited.

---

 
12. Severability
 
If any part of this Policy is held invalid or unenforceable, the remaining provisions shall continue to be valid and enforceable to the fullest extent permitted by law.

---

 
13. Updates to this Policy
 
SYBARIS may revise this Policy periodically to reflect changes in its business, technology, or legal requirements. The updated Policy will be posted on the website and will take effect upon publication. Users are advised to review the Policy periodically.

---

 
14. Grievance Officer
 
For any concerns, complaints, or requests regarding this Policy, users may contact:
Name: Ranjani Kumari (Head – Customer Service Operations)
Email: grievance@sybaris.in
Phone: +91 87508886886
Working Hours: 11:00 a.m. – 6:00 p.m., seven days a week
Address: 11, Rogan Gran, Delhi Gate, Ghaziabad, Uttar Pradesh – 201001