Privacy policy

1. Privacy Policy

Effective Date: May 13, 2025

At Luxara Jewels, your privacy is of utmost importance to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase. By using our services, you consent to the practices described in this policy.

1.1 Information We Collect

Personal Identification Information

• Full name, billing and shipping address

• Email address and phone number

• Payment information (processed securely; we do not store full card numbers)

• Account login credentials (if you create an account)

Automatically Collected Information

• IP address, browser type, and operating system

• Pages visited, time spent, and referring URLs

• Device identifiers and cookie data

Information from Third Parties

• Social media profile data (if you connect via social login)

• Analytics data from Google Analytics and similar platforms

1.2 How We Use Your Information

• To process and fulfill your orders and send shipping notifications

• To communicate with you about your orders, inquiries, and customer service requests

• To send promotional emails, newsletters, and offers (with your consent)

• To improve our website, products, and customer experience

• To prevent fraud, abuse, and unauthorized transactions

• To comply with applicable legal obligations in India, the USA, the UK, Australia, Canada, and other jurisdictions

1.3 Legal Basis for Processing (GDPR & UK GDPR)

For customers in the European Economic Area and the United Kingdom, we process your data under the following legal bases:

• Contractual necessity: to fulfill your purchase orders

• Legitimate interests: to improve our services and prevent fraud

• Consent: for marketing communications (withdrawable at any time)

• Legal obligation: to comply with applicable laws and regulations

1.4 Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Shipping carriers (DHL, FedEx, India Post, etc.) to deliver your orders

• Payment processors (Stripe, PayPal, Razorpay) for secure transaction handling

• Third-party analytics providers (Google Analytics) under data processing agreements

• Legal authorities when required by law, court order, or governmental regulation

1.5 International Data Transfers

Luxara Jewels is headquartered in India. Your personal data may be transferred to and processed in India and other countries where our service providers operate. Where required, we apply appropriate safeguards including Standard Contractual Clauses (SCCs) as per GDPR requirements.

1.6 Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, including for legal, accounting, or reporting requirements — typically 7 years for transaction records and 2 years for marketing data after your last interaction.

1.7 Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you

• Correction: Request correction of inaccurate or incomplete data

• Deletion: Request erasure of your personal data ('right to be forgotten')

• Restriction: Request that we restrict processing of your data

• Portability: Receive your data in a portable, machine-readable format

• Objection: Object to processing based on legitimate interests or direct marketing

• Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us at: support@luxarajewels.com

1.8 Data Security

We implement industry-standard security measures including SSL/TLS encryption, secure payment gateways, and restricted internal access to personal data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

1.9 Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.