Legal

Privacy Policy

Last updated: 2 November 2026. This page explains what information we collect when you visit plumnsugar.com, request a call back or message us, and how we use it.

Who we are

This website, plumnsugar.com, is operated by Plum & Sugar Spalon LLP, trading as Plum & Sugar Salon & Spa ("Plum & Sugar", "we", "us", "our"), a salon and spa business in Bengaluru with sanctuaries at:

HSR Layout — 1655, 27th Main Rd, 1st Sector, Bengaluru 560102 · 097400 28719
JP Nagar — 87, 3rd Main Rd, 4th Phase, Bengaluru 560078 · 099800 33108
Sarjapur — Sai Vesta Citadel, Sarjapur - Marathahalli Rd, Bengaluru 562125 · 081052 99292

This policy applies to plumnsugar.com only. WhatsApp, Instagram, Google and other third-party platforms you may use to reach us are each governed by that platform's own privacy policy.

Information we collect

Information you choose to give us

We don't have an account system or a payment gateway on this site. When you tap a "WhatsApp", "Call" or "Book" button, a short form asks for:

your name and mobile number;
the sanctuary you chose, and, where you've picked them, the service you're interested in, a preferred day or time, and any note you add.

When you submit the form, these details are sent to us by email so our team can call or message you back, and a copy is kept in a private log on our web server as a backup in case an email doesn't arrive. We then open WhatsApp or your phone's dialler so you can reach the salon directly.

To save you typing next time, your browser remembers the name and mobile number you entered, on your own device only. You can clear this at any time by clearing your browser's site data.

If you message us on WhatsApp, we also receive whatever you choose to send there, governed by WhatsApp's own Privacy Policy (WhatsApp is operated by Meta).

Information collected automatically

Like most websites, we use a few standard tools to understand how the site is used, so we can keep improving it:

Google Analytics 4 (loaded through Google Tag Manager) records browsing behaviour such as which pages you visit, how you arrived here, your approximate location (city level, from your IP address) and your device and browser type. Governed by Google's Privacy Policy.
Microsoft Clarity records anonymised session replays and heatmaps (where visitors scroll, click and pause) so we can see which parts of a page are useful. Governed by Microsoft's Privacy Statement.

We don't send your name, mobile number or messages to these tools. They measure how the site is used in general, not who you personally are.

Advertising on Google and Meta

We run paid advertising on Google Ads and on Meta (Facebook and Instagram) so people in Bengaluru can find us.

Google Ads: this site uses Google's conversion tag. When you submit the call-back or WhatsApp form, it tells Google Ads that an enquiry happened, so we can see which ads work. It records the fact of the enquiry, not your name or number.
Meta: we don't have a Meta (Facebook) Pixel on this site. If you reach us from an Instagram or Facebook ad, Meta may use its own technology on its own platforms to report campaign results to us.

Both are governed by Google's Privacy Policy and Meta's Privacy Policy. We only see campaign-level results, not who individually clicked an ad.

Cookies

Google Analytics, Google Ads and Microsoft Clarity each set a small number of cookies in your browser to recognise repeat visits and measure ad performance. Our hosting and caching may also set a functional cookie to serve pages faster. You can block or delete cookies at any time in your browser settings; the site will still work, though analytics and ad measurement won't recognise repeat visits.

How we use this information

We collect your contact information for one reason only: to get in touch with you about your enquiry or appointment. We do not use it for anything else, and we never sell or rent it to anyone. In full, the information we handle is used:

to call or message you back about the enquiry or booking you made, the sole purpose we contact you for;
to understand which pages, services and sanctuaries visitors care about most, so we can improve the site (aggregate analytics only);
to measure how our Google and Meta ad campaigns are performing, in aggregate;
to fix things that are broken and make the site faster and easier to use.

Sharing of information

We share data only with the service providers who help us run this site, deliver your enquiry to us, and measure our advertising:

Resend, the email service that delivers your form details to our inbox;
Google (Gmail, Analytics, Tag Manager and Google Ads);
Microsoft (Clarity);
Meta (WhatsApp, and Facebook/Instagram ads);
Hostinger, which hosts this website and its server log.

Each acts under its own privacy policy. We do not share your information with anyone else, and we never sell or rent it for anyone else's marketing.

How long we keep it

Enquiry details (name, mobile number and request) sent to our inbox and kept in our server log are deleted after 12 months, or sooner if you ask us to delete them. Analytics data is kept only as long as Google Analytics' and Microsoft Clarity's retention settings allow, after which those services delete it automatically. WhatsApp conversations stay on WhatsApp and on our business devices only as long as needed to serve you.

Keeping it secure

The site runs over HTTPS, the server log of enquiries is stored outside the public part of our web server, and only the Plum & Sugar team can read enquiry emails. No method of sending or storing data online is completely secure, but we take reasonable care to protect what you share with us.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

tell you what personal data we hold about you and why;
correct or update information that's inaccurate or incomplete;
delete personal data you've shared with us, where we're not required to keep it for a legitimate business or legal reason;
withdraw any consent you've previously given;
nominate another person to exercise these rights for you in the event of your death or incapacity;
raise a complaint with the Data Protection Board of India, once you have first raised it with us.

To exercise any of these, contact us using the details below. We'll respond as quickly as we can.

Children's privacy

This site is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has shared information with us, please contact us and we'll remove it.

Changes to this policy

We may update this page from time to time, for example if we start using a new tool on the site. The "Last updated" date above always shows when it last changed.