Policy

Privacy Policy

Last updated · 25 May 2026 · v1.0

Who we are

Wytte ("we", "us") is a brand operated from India, building modern oral cosmetics. This policy covers wytte.co, blog.wytte.co, and any other Wytte web property that links here.

The data controller for the purposes of applicable privacy law (including the Digital Personal Data Protection Act, 2023 in India, and GDPR/UK GDPR where it applies) is Wytte. Contact: hello@wytte.co.

What we collect

We collect the smallest amount of data needed to run the journal, fulfil orders when we launch, and reply to messages.

If you join the newsletter

  • Your email address (required).
  • Your first name (optional, if you give it).
  • The page you signed up from, time of signup, marketing consent flag.
  • Anonymous metadata: user-agent string, referrer URL.

If you contact us

  • Your name, email, the message itself, the inquiry category you picked.

If you visit the journal

  • Server-side logs (IP, user-agent, requested URL, timestamp) retained briefly for security and abuse prevention.
  • Anonymous, aggregated analytics — only if you opt in via the cookie banner.

If you buy a product (post-launch)

  • Order details, shipping address, contact info, payment confirmation (we never store full card numbers — payment is handled by our PCI-compliant payment processor).

Why we collect it

  • To send what you asked for — newsletter, reply to your message, your order.
  • To improve the journal — only with consent, anonymous aggregates of what's being read.
  • To prevent abuse — short-term security logs.
  • To comply with law — tax records, returns paperwork, regulator requests when valid.

Legal bases: your consent (newsletter, analytics, marketing), contract performance (orders), legitimate interest (security, fraud prevention), and legal obligation (tax/finance records).

Who we share it with

We do not sell your data. We share the minimum needed with vetted processors who help us run the site and the business:

  • Newsletter storage — currently a secured Google Sheet operated by Wytte. Migrating to a dedicated email service before launch; the same policy will apply.
  • Hosting — Vercel (static site hosting) and DNS provider.
  • Payment (post-launch) — PCI-compliant payment processors. Payment data goes to them, not us.
  • Shipping (post-launch) — courier providers receive name, address, and phone needed to deliver.
  • Regulators — when legally compelled.

We require processors to maintain industry-standard security and to process data only on our instructions.

Cookies

We load no third-party analytics or marketing scripts unless you opt in via the banner. The site uses a small set of strictly-necessary cookies and local-storage entries. See the Cookie Policy for details and a way to change your preferences anytime.

How long we keep it

  • Newsletter email — until you unsubscribe.
  • Contact form messages — 24 months from receipt, then deleted.
  • Order records — as long as required by Indian tax and consumer-protection law (typically 7 years).
  • Server logs — 30 days.
  • Anonymous analytics — 14 months in aggregate, no personal data.

Your rights

You can ask us to:

  • Confirm what data we hold about you and provide a copy.
  • Correct anything that is inaccurate.
  • Delete your data (subject to legal retention obligations).
  • Stop using your data for marketing.
  • Withdraw any consent you previously gave.
  • Port your data to another service.

Email hello@wytte.co from the address you signed up with. We respond within 30 days. If you're unhappy with our response, you can complain to the Data Protection Board of India or the relevant supervisory authority where you live.

Children

Wytte is not directed to anyone under 18. We do not knowingly collect data from minors. At-home whitening products are intended for adults only.

Contact

Privacy questions, requests, or complaints: hello@wytte.co. Subject line "Privacy" helps us route it to the right person.