Privacy Policy

Who we are

Vellee Luxe (“we”, “us”, “our”) operates the online store at velleeluxe.com and is the data fiduciary / data controller for the personal information described in this policy. This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). Where the EU General Data Protection Regulation (“GDPR”) applies to you, we also honour the rights it gives you.

Information we collect

• Account information: your name, email address and password (stored securely by our authentication provider — we never see your password), or basic profile details if you sign in with Google.
• Order information: your name, email, phone number, shipping address, items ordered and order history.
• Payment information: payments are processed by Razorpay. We do not receive or store your card number, UPI PIN, CVV or banking passwords. We keep only a payment reference ID.
• Communications: messages you send us through the contact form or by email.
• Device and usage data: your cart and wishlist may be saved in your browser’s local storage. Our hosting provider may log basic technical information such as IP address and browser type for security.

How we use your information

• To process, fulfil and deliver your orders, and to handle returns and refunds;
• To send order confirmations, shipping updates and replies to your questions;
• To maintain your account, order history and wishlist;
• To prevent fraud and keep our store secure;
• To understand how our website is used, so we can improve our products and service;
• To comply with legal, tax and accounting obligations.

We process your information on the basis of your consent, to perform our contract with you when you place an order, and to meet our legal obligations. We do not send marketing emails unless you have opted in.

Who we share it with

We never sell, rent or trade your personal information to third parties. We share it only with service providers who help us run the store, and only as much as they need to do their job:

• Razorpay — to process your payment securely. Razorpay is PCI-DSS compliant and handles your card, UPI and bank details directly;
• Shiprocket and its courier partners — your name, phone number and delivery address, to ship your order and send tracking updates;
• Google Firebase and Google Workspace (accounts, order records);
• Resend (transactional email delivery);
• Our hosting provider (to serve the website).

Some of these providers may store data on servers outside India. Where they do, we rely on their contractual commitments to protect your information. We may also disclose information where required by law or to protect our legal rights.

How long we keep it

We keep order records for as long as required under Indian tax and accounting laws (generally up to 8 years). Account information is kept while your account is active. You can ask us to delete your account at any time, subject to these legal retention requirements.

Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and obtain a summary of how it is processed;
• Correct, complete or update inaccurate information;
• Request erasure of your information;
• Withdraw consent at any time (this does not affect processing already carried out);
• Nominate another person to exercise your rights in the event of death or incapacity;
• Raise a grievance with us, and escalate it to the Data Protection Board of India if unresolved.

To exercise any of these rights, email hello@velleeluxe.com. We will respond within 30 days.

Security

We use industry-standard safeguards, including encrypted connections (HTTPS), access controls and reputable infrastructure providers, to protect your information. No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of any breach as required by law.

Cookies and local storage

We use a small number of cookies and similar browser storage:

• Session and essential cookies — to keep you signed in, remember your cart and wishlist, and keep checkout secure. The site cannot work properly without these.
• Analytics cookies — to understand, in aggregate, which pages are visited and how the site performs, so we can improve it. These do not identify you personally.

We do not use advertising cookies. You can block or clear cookies in your browser settings at any time, though some parts of the site may not work as expected without essential cookies.

Children

Our store is intended for adults. We do not knowingly collect personal information from anyone under 18 without verifiable parental consent.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, you may contact our Grievance Officer at hello@velleeluxe.com. We will acknowledge your complaint within 48 hours and resolve it within one month.

Contact us

For any question about this policy or your personal information, write to us at hello@velleeluxe.com.

Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed. Significant changes will be highlighted on this page.