Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how The Lucknowi ("we", "us", "our") collects, uses, shares and protects your personal data when you visit this store, create an account or buy from us. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000, The Lucknowi is the data fiduciary for this data: we decide why and how it is processed.

1. Personal data we collect

Order details - your name, billing and shipping address, email address, phone number, what you ordered, and (for business purchases) your GSTIN, collected when you place or try to place an order.
Account details - if you create an account: your sign-in details, saved addresses, wishlist and order history.
Payment details - payments are processed by our payment gateway, which is PCI-DSS compliant. We receive the payment status and reference, never your full card number, CVV, UPI PIN or net banking password.
Messages - what you send us by email, chat or WhatsApp, including support requests and reviews.
Device and usage data - pages viewed, cart activity, browser type and IP address, collected through cookies and similar technologies (see our Cookie Policy).

2. Why we use it

We process your personal data on the basis of the consent you give when you use the store or place an order, and for the legitimate uses the DPDP Act allows (such as complying with law). We use it to:

process, pack, ship and invoice your orders, and handle returns and refunds;
send you order and delivery updates by email, SMS or WhatsApp;
answer your questions and complaints;
detect and prevent fraud, and keep the store secure;
keep the tax, accounting and consumer-protection records the law requires; and
only if you have opted in, send you offers and news. You can withdraw that consent at any time through the unsubscribe or opt-out option in the message, or by contacting us. Withdrawing is as easy as opting in, and it does not affect processing that happened before.

3. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our instructions to run this store:

the e-commerce platform that hosts this store and manages orders;
our payment gateway, to take and refund payments;
courier and logistics partners, to deliver your orders;
email, SMS and WhatsApp service providers, to send you messages; and
analytics or advertising tools we have chosen to enable, as described in our Cookie Policy.

We may also disclose personal data where the law requires it, for example to tax authorities or under a lawful order. Some of these providers may process data outside India; where they do, we transfer it only as the DPDP Act permits.

4. How long we keep it

We keep order and invoice records for as long as tax and accounting law requires (for GST records, at least 72 months from the due date of the annual return for the year concerned), and other personal data only for as long as we need it for the purposes above or until you withdraw consent, whichever is earlier, unless the law requires us to keep it longer. When we no longer need it, we delete or anonymise it.

5. Your rights

Under the DPDP Act you have the right to:

get a summary of the personal data we hold about you and how we use it;
have inaccurate or incomplete data corrected, completed or updated;
have data erased once we no longer need it and the law does not require us to keep it;
withdraw consent you have given;
nominate a person to exercise these rights for you in the event of your death or incapacity; and
have your complaints about our handling of your data addressed.

To use any of these rights, contact us using the details on our Contact us page. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

6. Security

The store is served over HTTPS, payments are handled by a PCI-DSS compliant gateway, and access to order data is limited to the people who need it to serve you. No system is completely secure, but if a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.

7. Children

This store is meant for adults. If you are under 18, please use it with the involvement of a parent or guardian. We do not knowingly process a child's personal data without verifiable consent from a parent or lawful guardian, and we do not track, monitor the behaviour of, or target advertising at children.

8. Changes to this policy

We may update this policy when our practices or the law change. The current version is always on this page, with the date it was last updated.

9. Contact and grievance redressal

If you have a complaint about an order, a product, this store, or how we handle your personal data, write to the Grievance Officer of The Lucknowi using the contact details on our Contact us page. Please include your order number if the complaint relates to an order. We acknowledge every complaint within 48 hours and resolve it within one month of receiving it, as the Consumer Protection (E-Commerce) Rules, 2020 require. You may also contact the National Consumer Helpline (1915 or consumerhelpline.gov.in) or approach the consumer commission that has jurisdiction.

Note for the owner of The Lucknowi: this page was created automatically as a starting template. Before you rely on it, add your legal entity name, registered address, GSTIN (if you are GST-registered), customer support email and phone number, and the name of your Grievance Officer to your Contact us page, as the Consumer Protection (E-Commerce) Rules, 2020 require. Check every time period and list on this page against how you actually operate, then delete this note. This template is not legal advice.