Privacy policy

LuxeLeaf Nursery ("we", "us") respects your privacy and is committed to protecting your personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws. This policy explains what we collect, why, and the choices you have.

Data we collect

• Account data: name, email, phone, password (hashed) when you register.
• Order data: shipping address, billing details, items purchased, order history.
• Payment data: processed directly by our payment partner Razorpay — we never store your full card or UPI credentials.
• Usage/analytics data: pages viewed, device/browser type and approximate location, collected via cookies and local storage.
• Communications: messages you send us via contact forms, email or WhatsApp.

How we use your data

• To process, pack and ship your orders and provide customer support
• To send order updates, delivery notifications and (with consent) marketing communications
• To detect and prevent fraud, and secure our platform
• To improve our site, products and plant care content based on aggregate usage patterns

Third-party processors

We share the minimum necessary data with trusted processors who act on our instructions:

• Razorpay — processes online payments (cards, UPI, netbanking, wallets).
• Shiprocket and its courier partners — handle order shipping, delivery and tracking, and receive your name, address and phone number.
• Our hosting and database provider, used solely to store and operate the platform securely.

We do not sell your personal data to third parties.

Cookies & local storage

We use cookies and browser local storage to keep you signed in, remember your cart and wishlist, and understand site usage. You can control cookies through your browser settings; disabling them may limit some site features like cart persistence.

Data retention

We retain account and order data for as long as your account is active and as required for accounting, tax and legal purposes (generally up to 8 years for financial records). You can request earlier deletion subject to these legal obligations.

Your rights

You have the right to access, correct, or request erasure of your personal data, and to withdraw consent for marketing communications at any time. To exercise these rights, email us at hello@luxeleaf.in. We'll respond within 30 days.

Children's data

Our services are intended for users 18 years and older. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we'll remove it promptly.

Security

We use encryption in transit (HTTPS), access controls and row-level database security to protect your data. No online system is 100% secure, but we continuously work to safeguard your information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected with a new "last updated" date at the top of this page.

Contact us

For privacy-related questions, email hello@luxeleaf.in or write to us at Bengaluru, Karnataka, India.