Perfora Privacy Policy 2026: You Consent By Merely Using the Website

Most privacy policies describe what happens to your data. Perfora's begins by settling the question of whether you have agreed to it — and the answer is that you did, by arriving.

Verbatim: "By mere use of the Website, you specifically consent to our use and disclosure of your personal information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to the Terms of Use."

Not a tick box. Not a checkout step. Use of the website. The same idea returns in its own section headed "Your Consent": "By using the Website and/ or by providing your information, you consent to the collection and use of the information you disclose on the Website in accordance with this Privacy Policy, including but not limited to your consent for sharing your information as per this privacy policy."

We read the page on 13 October 2026, logged out, in India, with nothing bought. Whether a consent framed that way has legal effect is a question for a regulator or a court, and this page does not answer it. What we can report is that this is what the document says.

We looked for a "last updated" or "effective" date and there is not one anywhere on the page. That matters more than it sounds, because the policy makes a promise that depends on one: "If we decide to change our privacy policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it."

Changes get posted here — but with no dateline, there is no way for a reader to tell whether that has happened. For a direct comparison from the same category and the same day, Neeman's privacy policy carries "Last updated: August 25, 2026" at the top of its text. A missing date is not a breach of anything; it is simply a piece of information the reader does not get.

First: things other people say about you get filed under your name. Verbatim: "If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the Website, we may collect such information into a file specific to you."

Read the middle clause carefully. It is not only what you send — it is what others send about you, gathered into a file in your name. Most policies in this category do not describe that at all, so the disclosure itself is a point in the document's favour even as the practice is worth knowing about.

Second: posted content is retained for dispute purposes. "If you choose to post messages on our message boards, chat rooms or other message areas or leave feedback, we will collect that information you provide to us. We retain this information as necessary to resolve disputes, provide customer support and troubleshoot problems as permitted by law." As with Neeman's, there is no period attached — "as necessary" is doing the work that a number would do.

The marketing opt-out is offered, and it has a precondition: "We provide all users with the opportunity to opt-out of receiving non-essential (promotional, marketing-related) communications from us on behalf of our partners, and from us in general, after setting up an account."

The four words at the end change what the sentence offers. A shopper who checked out as a guest, or who gave an email address to a popup, is being offered an opt-out that the policy conditions on having an account. Compare Neeman's, which routes the same thing through a mechanism that needs no account at all: opt out "by using the unsubscribe option displayed in our emails to you".

Elsewhere the policy is clear that marketing use is subject to opt-out in principle: "To the extent we use your personal information to market to you, we will provide you the ability to opt-out of such uses."

We read Perfora's and Neeman's privacy policies on the same day. They are both Indian direct-to-consumer brands of similar size selling through similar channels, and their documents describe the same unknowable thing in opposite ways. Below is the comparison, in each page's own words.

This is a comparison of published wording, and that is all it is. We have not assessed, audited or tested the security of either website, and nothing here suggests that either brand's actual data handling is better or worse than the other's. A confident sentence and a cautious sentence can sit above identical systems. What differs is what each document tells its reader to expect.

Perfora's policy is a compact, older-style Indian e-commerce document, and it is more forthcoming than many in one specific respect — it actually tells you that third parties' correspondence about you may be filed in your name, and that it cannot control third-party cookies on its own pages. Those are disclosures a thinner page would omit.

Where it reads as dated is in its framing. Consent by mere use, an opt-out conditioned on having an account, absolute language about security, and no publication date are all hallmarks of a template written before the current wave of data-protection drafting. That is an observation about the document's style and vintage, not an allegation that anything in it breaches any law — which is a question for a regulator or a court, not for a shopping guide.

If you want to raise anything, the policy publishes one route: hello@perforacare.com.