📜 Privacy Policy – LuLu Apparels

Last Updated: [15/Aug/2025]

LuLu Apparels (“Company”, “we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, disclose, and safeguard your information when you visit or make a purchase from [yourwebsite.com] (“Website”).

This Policy complies with:

• Digital Personal Data Protection Act (DPDP Act) 2023 – India
• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Consumer Protection (E-Commerce) Rules, 2020
• GDPR-aligned principles (where applicable)

By using our Website, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Personal Information

We may collect the following:

• Full Name
• Email Address
• Mobile Number
• Billing Address
• Shipping Address
• Gender (optional)
• Date of Birth (optional)

1.2 Sensitive Personal Data

If provided during purchases:

• UPI details
• Partial card details (last 4 digits only)
• Wallet details (PhonePe, Paytm, etc.)
  We DO NOT store or process full card details.
  All payments are handled securely through Razorpay, PayU, and PhonePe.

1.3 Non-Personal / Device Information

• IP address
• Browser type
• Device type
• Operating system
• Cookies & tracking data
• Pages viewed & time spent
• Clickstream data

1.4 Third-Party Data

We may receive information from:

• Payment gateways
• Delivery partners
• Advertising partners
• Analytics tools
• Social login providers (Google, Facebook)

2. How We Use Your Information

2.1 Order & Delivery

• Process your orders
• Payment verification via Razorpay, PayU, PhonePe
• Dispatch & delivery updates
• Customer support

2.2 Improve User Experience

• Monitor website performance
• Fix technical issues
• Personalize recommendations
• Analyse user behaviour and trends

2.3 Marketing & Promotions

• Send offers, discounts, updates
• WhatsApp, SMS, email notifications
• Retargeting ads on Meta, Google, and similar platforms
  (You can opt-out at any time.)

2.4 Compliance & Safety

• Fraud detection
• Resolving disputes
• Legal compliance with Indian authorities

3. Legal Basis for Processing

We process your data on the basis of:

• Consent
• Performance of a contract (order fulfillment)
• Legal obligations
• Legitimate interests (analytics, fraud prevention)

4. Sharing of Information

We do NOT sell your personal data.

We may share information only with:

4.1 Payment Gateways

• Razorpay
• PayU
• PhonePe
  These platforms process and validate payments securely.

4.2 Delivery & Logistics Partners

• Delhivery
• Blue Dart
• Ekart
• DTDC
• India Post
  (As applicable)

4.3 Technical & Hosting Partners

• Our hosting provider uses India-based servers for data storage and processing.

4.4 Analytics & Advertising

• Google Analytics
• Google Ads
• Meta Ads (Facebook, Instagram)
• Tracking pixels & tags

4.5 Legal Authorities

When required by law, court orders, or government requests.

5. Cookies & Tracking Technologies

We use cookies to:

• Maintain sessions
• Analyse site usage
• Enable smoother checkout
• Show personalised ads

You can disable cookies in your browser, but some features may not function properly.

6. Data Storage & Retention

6.1 Storage

All data is stored on secure servers located in India.

6.2 Retention

• Account data: Until you delete your account
• Order history: 7 years (as per Indian tax laws)
• Marketing data: Until you unsubscribe
• Cookies: 1 day to 1 year

When no longer needed, data is deleted or anonymized.

7. Data Security

We follow industry-standard security practices including:

• SSL/HTTPS encryption
• Firewalls
• Secure servers
• Access control
• PCI-DSS compliant payment processing
• Regular security audits

Even with best practices, no system is 100% secure.

8. Your Rights (Under DPDP Act, 2023)

You have the right to:

• Access your personal data
• Update or correct inaccuracies
• Withdraw consent
• Request deletion of your data
• Opt-out of marketing
• Raise complaints

To exercise your rights:
📩 [Insert Email]

9. Children’s Privacy

Our website is not intended for users under 18.
We do not knowingly collect information from minors.
If found, such data will be deleted immediately.

10. Third-Party Links

Our website may contain links to external websites.
We are not responsible for their privacy practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The new version will be posted with an updated date.

12. Grievance Officer (Mandatory Under Indian Law)

Name: [Insert Officer Name]
Designation: Grievance Officer
Email: [Insert Email]
Phone: [Insert Phone Number]
Address: LuLu Apparels, [Your Full Business Address]

Complaints will be acknowledged within 48 hours and resolved within 30 days, as required by law.

13. Contact Information

For any questions, contact:

📩 Email: [support@luluapparels.com]
📞 Phone: [Insert Number]
🏢 Address: LuLu Apparels, India