Privacy Policy

This Privacy Policy describes how Lunex Store ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who access or use our website lunexstore.in (the "Website") and purchase products or services from us. This Privacy Policy is governed by the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable in India.

By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Website or services.

1. Information We Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Processing and Fulfillment: To process your orders, arrange for shipping and delivery, and communicate with you about your purchases
• Payment Processing: To process payments and prevent fraudulent transactions
• Customer Service: To respond to your inquiries, provide customer support, and resolve disputes
• Account Management: To create and manage your account, including authentication and security
• Marketing and Communications: To send you promotional materials, newsletters, and updates about our products and services (with your consent where required)
• Personalization: To personalize your shopping experience and provide product recommendations
• Analytics and Improvement: To analyze usage patterns, improve our Website, products, and services
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security and Fraud Prevention: To protect against unauthorized access, fraud, and other illegal activities

3. Legal Basis for Processing (GDPR-Style Rights)

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you, such as processing orders and providing customer service
• Consent: You have provided explicit consent for specific processing activities, such as marketing communications
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and business analytics, provided such interests do not override your fundamental rights
• Legal Obligation: Processing is required to comply with applicable laws and regulations

4. Your Rights

Under applicable data protection laws, including the Information Technology Act, 2000, and in accordance with GDPR-style principles, you have the following rights:

• Right to Access: You have the right to request access to the personal information we hold about you
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information
• Right to Erasure: You have the right to request deletion of your personal information, subject to certain legal exceptions
• Right to Restriction: You have the right to request restriction of processing of your personal information in certain circumstances
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format
• Right to Object: You have the right to object to processing of your personal information for direct marketing purposes or based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time
• Right to Lodge a Complaint: You have the right to lodge a complaint with the appropriate data protection authority

To exercise any of these rights, please contact us at lunexstore@gmail.com. We will respond to your request within 30 days of receipt.

5. Data Sharing and Disclosure

We may share your personal information with the following categories of third parties:

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements.

7. Data Protection and Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment gateways and is not stored on our servers
• Access Controls: We restrict access to personal information to authorized personnel who need it to perform their job functions
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing
• Data Minimization: We collect only the information necessary for the specified purposes
• Employee Training: Our employees receive training on data protection and privacy practices
• Incident Response: We have procedures in place to detect, respond to, and report security incidents

8. Data Retention Policy

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than India, including countries that may not provide the same level of data protection as India. When we transfer your information internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Your explicit consent for specific transfers

10. Children's Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at lunexstore@gmail.com, and we will take steps to delete such information from our systems.

11. Third-Party Links and Services

Our Website may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to such third-party services. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies before providing any personal information.

12. Marketing Communications

With your consent, we may send you marketing communications about our products, services, promotions, and special offers via email, SMS, or other channels. You have the right to opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Replying "STOP" to SMS messages
• Updating your communication preferences in your account settings
• Contacting us at lunexstore@gmail.com

Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages, such as order confirmations and account notifications.

13. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our Website with a new "Last Updated" date
• Sending you an email notification (if you have provided your email address)
• Displaying a prominent notice on our Website

Your continued use of our Website and services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, we have appointed a Grievance Officer to address your concerns regarding data protection and privacy.

The Grievance Officer will acknowledge your complaint within 48 hours and resolve it within 30 days from the date of receipt.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Namakkal, Tamilnadu, India, India.

By using our Website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.