Privacy Policy

Running a shop means holding names and addresses. This page is an honest account of which ones we hold, why, and what you can make us do about them.

Information we take

  • Order details: Name, address with PIN code, phone and email; without these a parcel cannot be addressed or a delivery attempted
  • Order history: The items, dates, amounts and invoices attached to your purchases
  • Payment result: The outcome of the payment and its reference. Authorisation happens in your own app and nothing from it is stored here
  • Messages: Support correspondence attached to the order
  • Site usage: Cookies that keep your basket alive between pages, and aggregate traffic counts that do not identify anyone

Purpose

Order fulfilment, delivery, returns and support. Nothing is collected for profiling or advertising, because we do neither.

Who we pass data to

  • The courier assigned to your order (Delhivery Heavy or VRL) — name, address, phone
  • Payment rails, which return a success or failure and a reference
  • The hosting company and email service we use to run this site
  • Regulators or courts, when a valid legal demand is made

Nothing is sold on. We do not participate in data broking and never share customer lists.

How long we keep it

Order and invoice records are kept for as long as tax and company law require. Correspondence unrelated to an order is deleted once the matter is closed.

What you can require of us

The Digital Personal Data Protection Act, 2023 gives you the right to access your data, correct it, have it deleted where we are not obliged to keep it, and take back consent.

Use customersupport@lumikrafthaven.shop, writing from the email on the order. We deal with such requests within 30 days without charge.

What cookies do here

The cookies this site sets are the ones a shop cannot work without: keeping your basket between pages and remembering a logged-in session. Blocking them in your browser breaks checkout but nothing else.

How data is protected

Connections are encrypted end to end. Access to the order system is restricted, and no card or UPI credentials exist on our servers.

We commit to notifying you and the regulator if a breach affecting your data ever happened.

Who to complain to

Grievances about personal data go to the proprietor at customersupport@lumikrafthaven.shop and are acknowledged within two days.