Privacy Policy

At elaloomaq.com, we are deeply committed to safeguarding your privacy and ensuring the security of your personal data. This Privacy Policy details how we collect, use, disclose, and protect your information when you visit and make purchases from our website, https://www.elaloomaq.com. By accessing or using our Site, you are agreeing to the terms outlined in this Privacy Policy. If you do not agree with these terms, we kindly ask that you refrain from using our Site.

​
 

Personal Data We Collect

We gather various types of information from and about our Site users, including data that falls under the definition of "personal data" as per the DPDP Act.

​

When you directly provide information to us, this includes account information such as your name, email address, password, and contact number when you create an account. For purchases, we collect order information, including your name, billing address, shipping address, email address, and phone number. While processing your transactions, we collect necessary payment information; however, it's important to note that full payment card details (like your complete credit/debit card number or CVV) are directly handled by our secure payment gateway, Razorpay, and are not stored on our servers. We only receive a confirmation of successful payment from Razorpay. Furthermore, if you contact us via forms, email, or chat, we record the content of your communications and our responses. Any reviews or feedback you submit about our products are also collected. Lastly, we gather information regarding your preferences for receiving marketing communications.

​

Automatically, we collect usage data, which includes details about your interactions with our Site, such as the pages you visit, the products you view, the time spent on pages, and your navigation patterns. We also collect device information, including your IP address, browser type, operating system, and unique device identifiers. To gather this information, we utilize cookies and tracking technologies.

​

​

Purpose of Processing Your Personal Data

We process your personal data for several key purposes, each grounded in the lawful bases provided by the DPDP Act. Primarily, we use your personal data to provide the services you request. This includes fulfilling your orders, managing payments processed by Razorpay, and arranging for product delivery through India Post, along with sending essential order confirmations. We also use your data to manage your account, enabling you to access your order history and customize your preferences.

​

In our continuous efforts to enhance our services, we analyze how you interact with our Site, identify trends, personalize your shopping experience, and improve our product offerings and website functionality. We communicate with you to respond to your inquiries, provide customer support, and send transactional emails such as order updates. With your explicit consent, we may also send you marketing communications about our products and promotions; you always have the option to opt-out of these marketing communications at any time.

​

Beyond service provision, your data helps us ensure security and prevent fraud, protecting both our Site and our users from fraudulent transactions, unauthorized access, and other illicit activities. We are also obligated to use your data to comply with legal requirements, including applicable laws, regulations, and legal processes like tax and consumer protection laws.

​

​

Disclosure of Your Personal Data

We may disclose your personal data to various recipients, strictly for the purposes outlined in this Privacy Policy. Your payment information (excluding full card details, which are directly handled by them) is shared with Razorpay, our payment gateway, for secure transaction processing; Razorpay's data handling practices are governed by their own privacy policy. For the delivery of your purchased products, your name, shipping address, and contact number are shared with India Post; their handling of your data is governed by their own policies.

​

Beyond these, we engage other third-party service providers to perform functions on our behalf, including IT and hosting providers, marketing and analytics providers (for website analytics and email marketing), and customer support providers. We also disclose information when required by law enforcement and regulatory authorities, or in response to valid legal requests such as subpoenas, court orders, or government regulations. In the event of business transfers like a merger, acquisition, or sale of our assets, your personal data may be transferred as part of that transaction; we will notify you via email or a prominent notice on our Site of any such change in ownership or control. 

​

​

Storage and Retention of Personal Data

We retain your personal data only for the duration necessary to fulfill the purposes for which it was originally collected, including for satisfying any legal, accounting, or reporting requirements. The specific retention periods for different types of data are determined based on the purpose of collection, the nature of the data itself, applicable legal and regulatory obligations (such as tax records or consumer protection laws), and our legitimate business interests. For instance, account information will be kept as long as your account remains active, plus a reasonable period thereafter to facilitate re-engagement or resolve any disputes. Order transaction data will be retained for the period mandated by tax and accounting laws, and marketing consent will be held until you choose to withdraw it. Once the designated retention period expires, your personal data will be securely deleted or anonymized.

​

​

Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, as a Data Principal, you are afforded several important rights concerning your personal data, subject to certain conditions and exceptions. You have the right to information about the personal data being processed and the related processing activities. You also possess the right to correction and erasure, allowing you to request the rectification of inaccurate or incomplete personal data, and the deletion of your data when it is no longer necessary for its original purpose. Should you have any concerns or grievances, you have the right to grievance redressal through our designated channels. Furthermore, you have the right to nominate another individual to exercise your rights in the event of your death or incapacity. Where our processing relies on your consent, you always have the right to withdraw consent at any time; note that this withdrawal will not affect the legality of any processing carried out before your withdrawal. Finally, if you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Board of India (once it is fully constituted and operational).

​

Data Security

We implement robust technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include the use of SSL/TLS encryption for secure data transmission across our Site. We enforce strict access controls, limiting access to personal data only to authorized employees and service providers who require this information to perform their duties. We conduct regular security audits to proactively identify and address potential vulnerabilities. Our commitment to data minimization ensures that we collect only the personal data that is strictly necessary for our stated purposes. Additionally, where feasible, we utilize anonymization or pseudonymization techniques to reduce the identifiability of data. While we strive to protect your personal data with the highest diligence, it is important to acknowledge that no method of transmission over the Internet or electronic storage can be entirely 100% secure. Therefore, we cannot guarantee absolute security.

​

​

International Data Transfers

As our website is hosted by Wix.com, your personal data may be transferred to and processed in servers located outside of India. These locations may have data protection laws that differ from those in India. We are committed to ensuring that any such international transfers fully comply with the Digital Personal Data Protection Act, 2023, by utilizing suitable safeguards, such as standard contractual clauses."

​

​

Advertisements

We may use third-party advertising companies to serve ads when you visit our Platform. These companies might use information (excluding your name, address, email address, or telephone number) about your visits to this Platform and other websites to provide advertisements about goods and services that may be of interest to you. 

​

​

Use of Children Information

Our Platform is designed for use only by persons who are capable of forming a legally binding contract under the Indian Contract Act, 1872. We do not knowingly solicit or collect personal data from children under the age of 18 years. If we become aware that we have inadvertently collected personal data from a child under 18 without appropriate parental consent, we will take prompt steps to delete such information. Should you believe that we might possess any information from or about a child under 18, please contact us immediately. If you have shared any personal data concerning children under the age of 18 years, you represent that you possess the necessary authority to do so and grant us permission to use that information in accordance with this Privacy Policy.

​

​

Links to Other Websites

Our Site may include links to other websites that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any such third-party sites or services. We strongly encourage you to review the privacy policies of any third-party websites you choose to visit.

​

​

Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our practices, technological advancements, legal requirements, or other relevant factors. When we make any material changes, we will notify you by posting the updated Privacy Policy on our Site and revising the "Last Updated" date. We encourage you to review this Privacy Policy from time to time to stay informed about how we are protecting your information.

​

​

Grievance Redressal

For any questions, concerns, or requests regarding your personal data or our data protection practices under the Digital Personal Data Protection Act, 2023, please contact our dedicated Grievance Redressal channel:

​

Email: privacy@elaloomaq.com
Phone: 7907087252

​

If you have a query, concern, or complaint in relation to collection or usage of your personal data under this Privacy Policy, please contact us at the contact information provided above.​