We hold the minimum required to pack a box, ship it and reach you if something leaks. This explains what Lumara Atelier collects, why, who else sees it and how you have it deleted, under the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000).

Collected

  • Name, delivery address, PIN code, phone number, email address.
  • What you ordered, when, and the amount.
  • Your emails and our replies, including any technique advice given.
  • Anonymous page and device counts used to find broken pages.

Card numbers, CVV codes, UPI PINs and bank credentials are never collected or stored — they cannot reach us, because we do not process cards.

Purpose

To pack and deliver the order, give the courier a working address and phone number, answer questions and handle returns or replacement requests, and detect fraudulent ordering. No advertising profiles; no selling, renting or trading of your details.

Shared with

Delhivery / XpressBees get your name, address and phone number to deliver. The UPI provider gets the amount and reference, never the contents. Our email host stores your messages. Nothing else leaves us, other than under a lawful request from an Indian authority.

Cookies

Functional cookies hold your cart and login; basic analytics cookies count visits. Blocking them leaves the site readable but the cart forgetful. No third-party advertising cookies run here.

Retention

Order records for as long as Indian tax and consumer-protection rules require, then deleted. Support email for two years. Analytics aggregated with nothing pointing back to you.

Your rights

Under DPDP 2023 you can request a copy, corrections, deletion where no legal duty requires us to keep it, and withdraw consent for anything not needed to fulfil an order. Write from the address on the order; we act within 30 days, free.

Security

Encrypted connection, administrative access limited to the people running the shop, and no payment data on our servers because we take UPI and Cash on Delivery only. If a breach ever affected you we would tell you and the authority, as DPDP 2023 requires.

Children

Intended for customers 18 and over — some products carry solvent and ventilation warnings. We do not knowingly collect data from children.

Grievance Officer

Complaints about personal data go to our Grievance Officer, appointed under the Information Technology Act, 2000 (IT Act 2000) and DPDP 2023. Write to support@lumaraatelier.shop with “Grievance” in the subject, or post to 3-4-877, D/2, Barkatpura Rd, near petrol bunk, Ratna Nagar, Kachiguda, Hyderabad, Telangana 500027, India. Acknowledged within 24 hours, resolved within 30 days.

Changes

Updates appear on this page; we do not email them. Questions welcome during Monday – Saturday, 9:00 AM – 9:00 PM IST. Sunday, 9:00 AM – 3:00 PM IST.