Privacy Policy

1. Introduction

At Leoki Art, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase. This policy complies with India's Digital Personal Data Protection Act, 2023.

2. Data Controller Information

3. Information We Collect

3.1 Personal Information

• Name and contact details (email address, phone number, shipping address)
• Billing information (billing address, payment method details - processed securely by Razorpay)
• Account login credentials (if you create an account)
• Purchase history and preferences

3.2 Non-Personal Information

• Browser type and version, device information
• IP address and geographic location
• Website usage data and analytics
• Cookies and similar tracking technologies

4. How We Use Your Information

• Process and fulfill your orders, including shipping and delivery
• Process payments through our secure payment gateway (Razorpay)
• Communicate order updates, shipping notifications, and promotional offers
• Provide customer support and respond to inquiries
• Improve our website, products, and services
• Comply with legal obligations and prevent fraud
• Send marketing communications (with your consent, which can be withdrawn anytime)

5. Legal Basis for Processing

We process your personal data based on:

• Performance of contract: To fulfill your orders and provide purchased products
• Legal obligation: To comply with tax, accounting, and other legal requirements
• Consent: For marketing communications and non-essential cookies
• Legitimate interests: To improve our services and prevent fraud

6. Data Sharing and Disclosure

We may share your information with:

• Payment Processors: Razorpay for secure payment processing
• Shipping Partners: Courier and logistics providers for order delivery
• Service Providers: Hosting, analytics, and email service providers
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties for marketing purposes.

7. Data Security

• We implement industry-standard security measures including SSL encryption
• Payment data is processed through PCI-DSS Level 1 certified gateways
• Access to personal data is restricted to authorized personnel only
• Regular security assessments and updates are conducted

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, order and customer data is retained for 7 years as required by Indian tax laws.

9. Your Rights

Under the DPDP Act, 2023, you have the right to:

• Access your personal data and request copies
• Correct inaccurate or incomplete data
• Request deletion of your personal data (with certain exceptions)
• Withdraw consent for marketing communications
• Object to certain types of processing
• Lodge a complaint with the Data Protection Board of India

To exercise these rights, contact us at lokirijul@gmail.com

10. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and understand user behavior. You can control cookies through your browser settings. Essential cookies for website functionality cannot be disabled.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.