Privacy policy

S & A Lifecare Pvt. Ltd. operates Brooks & Oaks and determines how customer information is used for this store. Contact us at care@brooksandoaks.com or the business address shown on this page for privacy questions or requests. This notice applies to our website, installed web app, customer accounts, orders and customer-care communications. Payment providers and external services may also act under their own notices.

• Information you provide: name, email, phone number, delivery and billing details, account details, preferences and support correspondence.
• Order and service information: selected items, payment and refund references, order history, return requests and information needed to investigate a complaint.
• Technical information: account-session identifiers, selected currency, browser and device information, IP address and relevant security or server logs generated when the service is used.
• Optional marketing information: your opt-in and contact details when you request collection news.

We do not ask you to send full card numbers, CVVs, banking passwords or OTPs. Please avoid unnecessary sensitive information in support messages. If you choose to report a product reaction, share only what is needed to investigate and obtain assistance.

We use information to provide accounts and shopping bags, process and fulfil purchases, verify payments, communicate about orders, manage returns and refunds, provide support, prevent fraud, keep the service secure and meet recordkeeping or legal obligations. Optional marketing is based on your choice. Where laws require a legal basis, the relevant basis may be performing or preparing a contract, legal obligations, consent or permitted legitimate interests such as service security. We do not treat acceptance of sales terms as blanket consent to unrelated marketing.

Information needed for a task may be shared with payment processors, shipping and customs partners, hosting and technical-support providers, email services, professional advisers and authorities where legally required. Access within the business is limited to the work involved. Payment and delivery partners receive the details necessary for their role. We do not sell customer personal information. We do not use this store’s customer information for cross-context behavioural advertising.

Our business operates in India. Service providers, banks, carriers or authorities involved in an international purchase may handle information in other countries. Where applicable law requires a transfer mechanism or other safeguards, those requirements must be met. You may ask us for information about the providers and safeguards relevant to your request. Purchasing from abroad does not waive mandatory privacy rights.

We retain information for as long as needed for the stated purpose, including the life of an account, completion of an order, handling a dispute and applicable accounting or legal retention periods. Retention depends on the record and relevant obligations; deletion requests are reviewed against these needs. The store uses account access controls, password hashing and encrypted storage for configured integration credentials. No internet service can promise absolute security. Where required, we will address and notify affected parties or authorities of a personal-data breach.

You can update available account details and marketing preferences in your account or contact care@brooksandoaks.com. Ask us to access, correct or delete information, withdraw optional consent or stop marketing. Depending on applicable law, rights may also include objection, restriction, portability, nomination or a complaint to the competent authority. We may need proportionate information to verify your identity. We will respond within the applicable statutory period and explain any lawful reason we cannot fully comply. Withdrawing marketing consent does not stop necessary order, security or legal messages. We do not charge for ordinary requests unless the law specifically permits it.

This store is intended for adult purchasers and does not invite children to create shopping accounts. If a child has supplied personal information, a parent or guardian should contact us. See Cookies & app storage for session and preference technologies. We will update this notice when our practices change and provide additional notice or obtain consent where required. For unresolved concerns, use Complaints & resolution; this does not prevent contact with a competent privacy regulator.

Private Privileges uses your verified account, purchase and redemption history, delivery destination and saved bag to determine eligible benefits. Your optional birthday month and day help us recognise your birthday; we do not need your birth year. Birthday details can normally be changed once a year.

Signed-in shopping bags are retained for up to 90 days after their last update to support returning to your choices. Expired and used privileges remain in order and campaign records for support, accounting and misuse prevention. Promotional invitations, including saved-bag reminders, are sent only when you have chosen collection news. You can change this preference in your account or Private Privileges, or unsubscribe through an invitation. On-site benefits do not require a promotional-email subscription. This feature does not introduce third-party advertising tracking.