Minimalist Privacy Policy 2026: The Sentence After the No-Sale Promise

Minimalist's privacy policy contains the clearest no-sale sentence of the five Indian D2C privacy pages read on 10 October 2026. It also contains, three sentences later, the word that qualifies it. Here is the paragraph in full:

"We will treat your personal information as strictly private and confidential. We will only use or disclose it for purposes directly related to our core business, or in ways that you would reasonably expect that we may use it in the course of our business. We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential and the data is used only for the activities we have asked them to perform. We may also release your information when we believe such release is appropriate to comply with the law, or protect ours or third party rights, property, or safety. However, non-personally identifiable information including statistical data may be provided to other parties for marketing, advertising, research or other uses."

Sentence three is the promise. The final sentence is the carve-out, and it is a real one. Personally identifiable information is not sold or traded. Non-personally identifiable information — which on an e-commerce site typically means aggregated behaviour, segments and statistics — "may be provided to other parties for marketing, advertising, research or other uses". Note the last three words: "or other uses" is not a limit.

Both halves of this are entirely ordinary and lawful. Practically every retailer on the internet shares aggregated non-identifying data with advertising and analytics partners, and saying so in the policy is better than not saying so. The observation is only about how the paragraph reads: a shopper who stops at "We do not sell, trade, or otherwise transfer to outside parties" has taken away roughly the opposite of what the paragraph as a whole says.

It opens in a register you almost never see on an Indian D2C page, and the care in it is real: "Wherever practicable we will only collect information from you personally. We collect information in various ways, such as over the phone or in writing, in person, or over the Internet. We will notify you or will endeavor to make you aware that information is or has being collected. We will endeavor to inform you of the purpose of collection and will provide you with access to our privacy policy that contains details about access, correction and complaints."

It even states the consequence of refusing: "if you notify us that you do not wish to provide the information to us we may not be able to provide you with the product or service you have asked for or give you the level of service you expect." That is an honest sentence and most policies do not bother with it. The mention of "printed records" alongside computer systems dates the wording but does not weaken it.

Then the document changes voice entirely. The cookie section reads: "A cookie is a small file which asks permission to be placed on your computer's hard drive" and "We use traffic log cookies to identify which pages are being used." Those paragraphs appear word for word on Beardo's privacy policy, which we read the same morning — the same old British small-business boilerplate, on two unrelated Indian brands. Dot & Key and SuperBottoms wrote their own.

Minimalist's version does something Beardo's does not: it leaves out the Data Protection Act 1998 sentence. Beardo's page offers your data under that repealed United Kingdom statute and attaches a fee to the request. Minimalist's carries the same cookie text and none of that. Then it adds a third section that is properly Indian, and that section is the best thing in the document.

Under the heading "Grievance Officer" the policy states: "In accordance with Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below:" and then gives them.

Uprising Science Pvt Ltd. Address: 2nd Floor Commercial Building, Hotel Marriott, Khasra No. 55, Ramdas Agarwal Marg, New Jawahar Circle, Gandhi Nagar (302015) Jaipur, Rajasthan. Phone: +91 97723 46555. And then the detail no other policy read this month includes — Time: Mon to Sat (10:00 to 18:00).

Stated working hours on a grievance contact are rare and genuinely useful. They tell a customer when a call will be answered, which is more than a bare email address does. Of the five privacy policies read on 10 October, Beardo's names no officer at all, Neemans' routes everything to a single address, and only Dot & Key's is comparably complete — and even that one gives no hours.

One rendering note, offered as a note rather than a failing: in the page as served to a plain request the email address renders through the site's email-obfuscation script and shows as a placeholder rather than as text. In an ordinary browser with scripts running it resolves normally. It is worth mentioning only because the phone number, address and hours are all plainly readable and the email is the one field that is not.

There is no retention period. Nothing in the document says how long Minimalist keeps your name, date of birth, address or order history — and the policy explicitly contemplates printed records, which makes the absence of a retention rule more noticeable rather than less.

There is no deletion right. The correction right is clear and unqualified: "If you believe that any information about you is incorrect or incomplete, please email us as soon as possible. We ensure a prompt action to correct the same." Erasure is not mentioned at all.

There is no reference to the Digital Personal Data Protection Act, 2023. The document is framed on the Information Technology Act, 2000. That is the same footing Dot & Key's policy uses, and it is the current state of most Indian D2C privacy pages; it is noted here as a fact about the document, not as a compliance judgment, which is not something a shopping page is in a position to make.

And there is no list of named recipients. "Trusted third parties who assist us in operating our website" is a category rather than a list; no payment processor, courier, analytics provider or advertising platform is named anywhere.

If you want something corrected, email and cite the correction sentence — it is the most clearly stated obligation in the document. If you want your data deleted, the policy gives you no route, so the grievance contact is the address to use, and it is the one worth using because it has a name, a company, an address, a phone number and stated hours behind it.

If you would rather not be marketed to, the policy commits: "To the extent we use your personal information to market to you, we will provide you the ability to opt-out of such uses." That is a promise of a mechanism rather than a described mechanism, so in practice the unsubscribe link in the emails is the route.

Nothing on this page is legal advice, and nothing here says Minimalist has breached any law or would refuse any request. This describes a published document as it stood on 10 October 2026, and the policy states that changes are posted to the page rather than notified.