Privacy Policy
Operating Entity: EmulsionStack · Last Updated: September 13, 2026
1. Overview & Commitment
This Privacy Policy applies to the website, applications, and services operated by EmulsionStack ("Company", "we", "us", or "our"), including our direct-to-consumer storefront CTRL + STYLE®. We respect your personal privacy and are committed to maintaining data handling standards compliant with the Information Technology Act, 2000, and relevant digital personal data protection norms.
2. Information We Collect
A. Directly Provided Data: When you subscribe to our VIP Drop waitlist, contact customer concierge, or place an order, we collect information including your name, email address, shipping destination, phone number, and preferences.
B. Automated & Device Data: When you browse our catalogue, our servers automatically log technical metadata such as browser version, IP address, device viewport, referral URL, and operating system.
C. Client Storage: We use localized browser storage (localStorage and sessionStorage) strictly to preserve your cart items, theme preferences, and saved wishlist without tracking your browsing outside of our domain.
3. Purpose & Legal Basis of Processing
- To fulfill purchase transactions, verify payments, and dispatch physical orders to your delivery address.
- To send VIP drop notifications, private catalogue links, and order tracking confirmations via verified communication channels (including Resend and WhatsApp APIs).
- To detect fraudulent activities, prevent duplicate bot spam on waitlists, and secure our administrative endpoints.
- To improve web performance, maintain zero-latency asset caching through Cloudinary CDNs, and analyze storefront navigation paths.
4. Third-Party Service Providers & Data Sharing
EmulsionStack will never sell, rent, or trade your personal information to third-party advertisers. We disclose data solely to vetted infrastructure and fulfillment partners under strict confidentiality obligations:
• Cloud Infrastructure: MongoDB Atlas (Database), Cloudinary (Media CDN).
• Communications: Resend Technologies Inc. (Automated transactional dispatch).
• Payment Gateways: RBI-licensed payment aggregators (Razorpay / Cashfree / Stripe). Card data is tokenized and never stored on our servers.
• Logistics Partners: Domestic courier partners (Delhivery, Blue Dart) for physical parcel fulfillment.
5. Data Security & Storage Protocols
All data transmitted between your browser and our servers is secured using 256-bit Transport Layer Security (TLS/HTTPS). Administrative authentication utilizes tamper-proof JSON Web Tokens (JWT) stored in HTTP-only, secure, SameSite cookies. Database records are safeguarded with strict network IP whitelisting and encryption at rest.
6. Your Privacy Rights
You retain full control over your data. At any time, you may request:
- Access to or a copy of all personal records stored in our database.
- Immediate correction or rectification of outdated contact details.
- Complete removal or deletion of your email from the VIP waitlist and subscriber directories.
7. Grievance Officer & Contact Information
In accordance with the Information Technology Act 2000 and rules made thereunder, questions or grievances regarding this policy may be addressed to our designated officer:
Entity: EmulsionStack (Trade Name: CTRL + STYLE)
Grievance Officer: Legal & Compliance Desk
Email: privacy@emulsionstack.com / concierge@ctrlstyle.com
Registered Address: 108 Brigade Road, Indiranagar, Bengaluru, KA 560038, India