Privacy Policy

Lullé ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

1. What we collect

When you interact with our website, we collect:

• Identity & contact: name, email, phone number
• Address: shipping and billing addresses
• Order history: products purchased, payment method, order status
• Device & usage: IP address, browser type, pages visited (via cookies and similar technologies)

2. How we use your data

• To process and fulfil orders, including delivery and payment
• To send transactional notifications (order confirmations, shipping updates) via email and SMS
• To respond to customer service queries
• To comply with legal and tax obligations (GST, invoicing)
• To improve our products, website, and customer experience
• With your consent, to send you marketing communications (you can opt out anytime)

3. Lawful bases

We process your data based on:

• Contract: to fulfil your order
• Legitimate interest: to operate, secure, and improve our service
• Legal obligation: to maintain GST records, comply with tax law
• Consent: for marketing communications (revocable anytime)

4. Sharing your data

We share your data only with:

• Logistics partners (Shiprocket and its courier partners) for delivery
• Payment processors (Razorpay) for secure payment processing
• Communication providers (Resend, MSG91) for emails and SMS
• Cloud infrastructure (MongoDB Atlas, Cloudinary, Render) for hosting and storage
• Government / legal authorities when legally required

We do not sell your personal data.

5. Data retention

We retain your account and order data as long as you have an account with us. Order records are retained for at least 7 years to meet GST and tax-audit requirements. You may request account deletion (see section 7).

6. Cookies

We use functional cookies (cart, login session) and analytics cookies (Google Analytics, Meta Pixel) to understand how visitors use our site. You can disable cookies in your browser settings, though this may affect functionality.

7. Your rights under DPDP Act

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data (subject to legal retention requirements)
• Withdraw consent for marketing
• Lodge a complaint with the Data Protection Board of India

To exercise these rights, contact our Grievance Officer below.

8. Security

We protect your data with industry-standard measures including encrypted connections (HTTPS), hashed authentication credentials, and access controls. Payment information is handled directly by Razorpay — we never store full card numbers, CVVs, or UPI PINs.

9. Children

Our products are for infants and children, but our website and services are intended for parents, guardians, and adults. We do not knowingly collect personal data from anyone under 18.

10. Grievance Officer

Per the Information Technology Rules, 2011 and DPDP Act:

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision.

See also: Terms of Service · Refund Policy · Shipping Policy