R RUHI IMPEX LLP ("we", "us", "our") respects your privacy and is committed to handling your personal data in line with applicable data-protection law, including the Digital Personal Data Protection Act, 2023 in India, where it applies. This policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and the choices and rights you have.
Who this policy applies to
This policy applies to visitors to this site, customers who place an order, account holders, and anyone who contacts us through the channels listed here. By using the site or placing an order you confirm you have read and understood this policy.
What we collect
- Identity and contact information — your name, email, phone number, and shipping and billing addresses, collected when you register, place an order, sign up for the newsletter, or contact support.
- Order data — products purchased, order value, payment method (we store only the last 4 digits of the card and the gateway reference), shipping status and tracking events.
- Account data — username, password (stored as a salted hash), preferences, marketing opt-ins.
- Customer-service data — emails, chat transcripts and call notes when you contact support, retained so we can resolve your query and audit complaints.
- Usage and device data — pages visited, cart and wishlist activity, referrer, IP address, browser type and device identifiers, collected via first-party cookies and our own analytics. We use this only in aggregate, never to build advertising profiles outside what you explicitly opt into.
- Communications consent — your opt-in choices for marketing emails, WhatsApp, and SMS where applicable.
How we use it
- To accept your order, charge for it, dispatch it, and keep you updated on its status.
- To send transactional notifications by email, SMS or WhatsApp about your orders, returns, refunds and account changes — these are operational messages and cannot be opted out of while you have an open order.
- To send marketing — new arrivals, restocks, offers — only where you have explicitly opted in. You can unsubscribe at any time from the link in every marketing email.
- To answer your questions and resolve disputes raised through support, with the right of escalation to senior staff.
- To improve site performance, content and recommendations, using aggregated, de-identified analytics.
- To detect and prevent fraud, abuse and policy violations, including reviewing flagged orders before dispatch.
- To comply with our legal obligations under tax, accounting, anti-money-laundering and consumer-protection laws.
Legal basis for processing
We process your data on the following lawful bases: (a) performance of a contract — when you place an order with us; (b) legitimate interests — fraud prevention, security and improving the store; (c) consent — for marketing communications and optional cookies; and (d) legal obligation — for tax invoices and statutory reporting.
Sharing
We share only the minimum personal data required, with the following categories of recipients:
- Payment gateways and processors, to charge your payment method and prevent fraud.
- Logistics partners (courier and aggregator platforms), to deliver your order and provide tracking. They receive only the recipient name, address, phone number and order weight.
- Communication providers (email, SMS, WhatsApp) under data-processing agreements that prohibit them from using your data for any other purpose.
- Cloud hosting and security providers that operate the site infrastructure under strict confidentiality terms.
- Tax authorities and regulators, only when legally required or in response to a valid order.
- Professional advisers (lawyers, auditors, accountants) under a duty of confidentiality.
We do not sell your personal data to data brokers or advertising networks.
Cross-border transfers
Some of our service providers may process data outside IN. Wherever we transfer personal data internationally, we put appropriate safeguards in place — for example, standard contractual clauses or recognised adequacy decisions — so your data continues to be protected.
How long we keep your data
- Order and invoicing records: 8 years from the order date, to meet tax and accounting obligations.
- Account data: as long as your account is active, plus 12 months after closure unless required to be kept longer.
- Support correspondence: 3 years from the last interaction.
- Marketing consents: until you withdraw consent, plus a 12-month suppression list so we do not re-contact you in error.
- Analytics: aggregated and de-identified beyond 14 months.
Your rights
You may exercise any of these rights by emailing litoindiateam@gmail.com with the subject line "Privacy request" and the email address linked to your account. We verify the request and respond within 30 days, free of charge. We may extend the window once for genuinely complex requests; if we do, we'll tell you why.
You have the right to:
- access a copy of the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of your data, subject to our legal retention duties;
- object to or restrict certain processing, including direct marketing;
- withdraw consent at any time, with effect from the moment of withdrawal;
- data portability — receive your data in a commonly used machine-readable format;
- lodge a complaint with the Data Protection Board or equivalent regulator if you believe we have not handled your data properly.
Children's data
This store is not intended for use by children under 18. We do not knowingly collect personal data from minors. If you believe a minor has shared data with us, contact us and we will delete it.
Security
We use industry-standard technical and organisational measures to protect your data, including HTTPS in transit, encryption of sensitive fields at rest, role-based access controls, regular software patching, and limited access on a need-to-know basis. No system is ever 100% secure — please use a strong, unique password for your account and notify us at once if you suspect any unauthorised access.
Cookies
We use strictly necessary first-party cookies to keep you signed in, remember your cart and apply your language and currency preferences — these are always on. Optional cookies (analytics, personalisation) are set only with your consent through the cookie banner. Third-party scripts you authorise (payments, embedded videos) may set their own cookies under their own policies; you can find more detail in our cookie notice.
Changes to this policy
We may update this policy from time to time. The most current version is always posted on this page with a "Last updated" date at the top. We will notify you of material changes by email or a prominent notice on the site before they take effect.
Contact
Questions about this policy or your data? Email litoindiateam@gmail.com.