Legal
Privacy Policy
Last updated: 1 October 2026. This policy explains how Lomiaa Retail Private Limited processes personal data on Lomiaa in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.
1. Data we collect
We collect information you provide, such as your name, email, phone, address, payment details, and account activity. We also collect basic device and usage data to secure the platform and improve your experience.
2. Why we process it
We use your data to create and manage your account, process orders, send order updates, handle returns and refunds, prevent fraud, and comply with legal obligations. Some processing is necessary for contract performance, and some is based on your consent.
3. Sharing and disclosures
We share data with vendors only as needed to fulfill your order, with payment and logistics partners to process transactions, and with authorities where required by law. We do not sell personal data to third parties.
4. Cookies and local storage
We use essential cookies for authentication, cart persistence, and security. Analytics cookies may be used with your consent. You can manage cookies through your browser settings, though disabling some cookies may affect functionality.
5. Retention
We retain order and transaction records as required under GST, company, and consumer protection laws. Other personal data is retained only as long as needed for the stated purposes or as required by law.
6. Your rights
You may request access, correction, deletion, or portability of your personal data. You may also withdraw consent, nominate someone to exercise rights on your behalf, or raise a grievance with our Data Protection Officer.
7. Security
We use encryption, access controls, and monitoring to protect your data. However, no system is completely secure, and you should protect your credentials and device.
8. Grievance contact
If you have a privacy concern, contact grievance@lomiaa.com. We will acknowledge within 48 hours and resolve within 30 days where possible.