1. Who is responsible for your data
MLJ Tech Labs (the data fiduciary) operates LuxBelora. Contact: support@mljtechlabs.com. Our grievance officer's details are in section 8.
2. What we collect
- Contact & delivery: name, mobile number, delivery address, landmark, PIN code.
- Order data: items, amounts, payment mode and status, order history.
- Technical: an essential cart cookie to remember your bag, plus basic device/log data.
We do not collect or store your card, UPI or bank credentials — payments are handled directly by Razorpay.
3. Why we use it (purpose)
- To process, fulfil and deliver your orders and handle returns/refunds.
- To verify Cash on Delivery orders and reduce fraud.
- To send order and delivery updates (including via WhatsApp) and respond to support requests.
- To meet tax, accounting and legal obligations.
We process your data on the basis of your consent and to perform your order.
4. Who we share it with
We share the minimum necessary with service providers acting on our behalf:
- Razorpay — payment processing.
- Courier / logistics partners — delivery.
- WhatsApp Business provider — order and shipping notifications.
- Supabase — secure database and hosting.
We do not sell your personal data.
5. Retention
We keep order and invoice records for as long as required for tax and legal purposes, and other data only as long as needed for the purposes above.
6. Security
Access to your data is restricted and protected by row-level security, encrypted connections and least-privilege access. No system is perfectly secure, but we take reasonable measures to protect your information.
7. Your rights
Subject to the DPDP Act, you may:
- Access a summary of the personal data we hold about you.
- Request correction or completion of inaccurate data.
- Request erasure of your data where it is no longer needed.
- Withdraw consent and nominate a person to exercise your rights.
To exercise these, email support@mljtechlabs.com.
8. Grievance officer
As required under the DPDP Act and Consumer Protection (E-Commerce) Rules:
[pending], MLJ Tech Labs · grievance@mljtechlabs.com
9. Children
LuxBelora is not directed at children under 18, and we do not knowingly collect their data.
10. Changes
We may update this notice; the “last updated” date above reflects the current version.