Privacy Policy (India)
Last updated: June 6, 2026
This Privacy Policy describes how Luminara ("we", "us", "our") collects, uses, stores, discloses and protects personal information of visitors and customers who use our website and related services in India. By using our website or purchasing our products you agree to the practices described in this Policy.
Note: Replace the placeholders (company name, address, contact email, GSTIN if applicable) with your official business details before publishing.
1. Scope
This Policy applies to personal data collected through: (a) our website (www.luminaraofficial.in), (b) our customer support channels, (c) our mobile or web apps (if any), and (d) offline
2. Personal Information We Collect
We collect the following categories of personal information necessary to run our business and provide products:
A. Information you give us:
- Name, email address, postal address, phone number
- Billing and shipping information, payment instrument details (credit/debit card tokenized by payment gateway; we do NOT store full card numbers)
- Order history, product preferences, sizes and notes
- Account credentials (username/password) when you create an account
- Customer support communications, reviews, comments
B. Information collected automatically:
- Device identifiers, IP address, browser and operating system information
- Transaction metadata, referral source, pages visited, clicks and other website analytics
- Cookies and similar technologies
C. Sensitive personal data: We do NOT intentionally collect sensitive personal data (health, religion, caste, sexual orientation, biometric data).
3. How We Use Your Information
We use personal information for the following purposes:
- To process and fulfill orders, manage payments, deliver products and provide customer service
- To create and manage your account and to authenticate you
- To send transactional communications (order confirmations, shipping updates, invoices)
- To send marketing communications where you have consented or where allowed by law (promotions, offers, newsletters)
- To improve and personalise the website, products, recommendations and advertising
- To detect, prevent and respond to fraud, security incidents and other illegal activities
- To comply with legal obligations and for dispute resolution
Legal bases and consent: While India currently does not have a GDPR-style nationwide law governing all private-sector processing, we rely on contract performance (fulfilling orders), legitimate interests (security, fraud prevention and improving our services) and user consent (for marketing, cookies where required).
4. Disclosure & Sharing of Information
We may need to share personal information with:
- Service providers who help us operate the website and process payments (payment gateways, fulfillment partners, analytics providers, email/SMS vendors) — these vendors act as processors and we require contractual safeguards.
- Logistics and courier partners to deliver your orders.
- Law enforcement, regulators or third parties if required by law or to protect our rights.
- In the event of a business transfer (sale, merger, reorganization), customer data may be transferred subject to confidentiality protections.
We do not sell personal data to third parties.
5. Cookies & Tracking
We use cookies and similar technologies to operate the website, remember preferences, analyse use and deliver targeted advertising. You can control cookie preferences through your browser settings or via our cookie banner. Note that disabling cookies may limit certain features.
6. Data Retention
We retain personal information for as long as needed for the purposes described above, for legal or tax requirements, or as necessary to resolve disputes. Typical retention periods:
- Order, billing, and transactional records: as required by tax law (generally 7 years) or as needed to support returns/claims
- Accounts: until you delete the account or as required for business purposes
- Marketing consent records: until you withdraw consent
7. Security
We implement reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted connections (HTTPS), access controls, and vendor assessments. However, no system is completely secure — if you suspect misuse of your data, please contact us immediately.
8. Children
Our products are intended for adults. We do not knowingly collect personal information from children under 18. However, we will have no control over information collected from those under 18 years of age if they are accessing the website using adult’s credentials, payment cards, CoD etc.
9. Third-Party Links
Our site may link to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before sharing personal data.
10. Changes to this Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will post a notice on the site with the "Last updated" date
11. Contact Us
For privacy questions, data access requests or grievances:
Email: komalkt@gmail.com