Free shipping on orders above ₹599 · Use code WELCOME10 for 10% off

Your data, protected

Privacy Policy

Lumière operates this store. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or shop on https://test2-frontend.vyaparnext.com/in, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable rules made thereunder. By using the website, you agree to the practices described in this Policy.

Last updated {{lastUpdated}}

Who We Are

Who We Are

Lumière is the “Data Fiduciary” under the DPDP Act for the personal data collected through this website — meaning we determine the purpose and means of processing your personal data.

Information We Collect

Information We Collect

We collect only the data necessary to provide our services. This includes:

CategoryExamplesWhen Collected
Identity & Contact DataName, email address, phone number, billing/shipping addressAccount creation, checkout, newsletter signup
Order & Transaction DataOrder history, items purchased, order value, payment statusPlacing an order
Payment DataPayment method, transaction ID (card/UPI details are processed directly by our payment gateway and not stored by us)Checkout
Communication DataMessages sent via contact form, customer support, WhatsApp/SMS (if used)Customer support interactions
Device & Usage DataIP address, browser type, device type, pages visited, time spent, referral sourceAutomatically, via cookies and analytics tools
Marketing Preference DataEmail/SMS subscription status, ad interaction dataNewsletter signup, ad clicks

We do not knowingly collect any special category data such as health information, religious beliefs, or biometric data through this website.

How We Collect Information

How We Collect Information

  • Directly from you — When you create an account, place an order, sign up for our newsletter, or contact customer support.

  • Automatically — Through cookies, web beacons, and tracking tools when you browse the website.

  • From third parties — Such as our payment gateway (confirming payment status) or courier partner (confirming delivery status).

Purpose of Processing

Purpose of Processing Your Data

We process your personal data strictly for the following itemized purposes:

  1. To fulfil orders — Processing payments, generating invoices, and arranging delivery of your beauty products via our courier/logistics partner.

  2. To verify your identity — For account security and fraud prevention (e.g., OTP/phone verification).

  3. To communicate with you — Order confirmations, shipping updates, and responses to support queries.

  4. To send marketing communications — Only if you have opted in; you may withdraw this consent at any time.

  5. To improve the website — Analyzing browsing behaviour to improve product listings, site performance, and user experience.

  6. To run advertising campaigns — Measuring ad performance via analytics and advertising tools, with your consent where required.

  7. To comply with legal obligations — Such as tax records, consumer protection requirements, or law enforcement requests.

We do not use your data for any purpose beyond what is stated above without seeking fresh consent.

Cookies & Tracking

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember your cart, and measure marketing performance. You can control or disable cookies through your browser settings.

  • Essential cookies — Required for the website to function, including checkout, cart, and account access.

  • Analytics cookies — Help us understand how visitors use the site so we can improve it.

  • Preference cookies — Remember your settings and choices for a more personal experience.

  • Marketing cookies — Used to show relevant offers. These are used only with your consent where required.

How We Share

How We Share Your Information

We do not sell your personal data. We share data only with trusted service providers (“Data Processors”) strictly to the extent necessary to operate our business:

Service Provider CategoryPurposeData Shared
Payment GatewayProcessing payments securelyName, contact details, payment/transaction data
Logistics/Courier PartnerOrder delivery, KYC where mandated by courier regulationsName, address, phone number
Cloud Hosting & StorageSecurely storing website data, images, backupsAccount and order data (stored, not shared for marketing)
Communication ServicesSending order emails, OTP/phone verificationEmail address, phone number
Analytics & AdvertisingMeasuring site usage and ad performanceDevice/usage data, hashed contact data (where applicable)

These providers are contractually bound to use your data only for the purpose we have engaged them for. We may also disclose your data if required by law, court order, or government request.

Data Retention

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy.

  • Order & transaction data — Retained for the duration required under applicable tax and consumer protection laws (typically up to 7 years for financial records).

  • Account data — Retained while your account remains active, or until you request deletion.

  • Marketing data — Retained until you withdraw consent or unsubscribe.

Data Security

Data Security

We implement reasonable security safeguards including SSL/TLS encryption, secure cloud storage with access controls, and PCI-DSS compliant payment processing. We do not store your full card details on our servers.

Your Rights

Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

  1. Access — Request a copy of the personal data we hold about you.

  2. Correction — Request correction of inaccurate or incomplete data.

  3. Erasure — Request deletion of your personal data, where it is no longer necessary for the purpose it was collected for.

  4. Withdraw Consent — At any time, for any consent-based processing (e.g., marketing).

  5. Grievance Redressal — Raise a complaint regarding how we handle your data.

  6. Nominate a Representative — To exercise your rights on your behalf in case of death or incapacity.

To exercise any of these rights, contact us at [email protected].

Children

Children's Privacy

The Lumière website and beauty products are not directed at children under 18. We do not knowingly collect personal information from children.

Changes

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date on this page will indicate when the latest revision was made.

Contact Us

Contact Us

For any questions about this Privacy Policy or how we handle your data, reach out to Lumière.