Privacy Policy

Last updated: 30 October 2026

Lexarity Collections ("we", "us") respects your privacy. This policy explains what personal data Lexarity Collections collects when you visit https://relaycial.com/s/lexarity-collections, create an account, place an order, or contact us; why we use it; who we share it with; how long we keep it; and the choices and rights you have. It is written for shoppers in India and is intended to be read with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000, and, where they still apply to a particular obligation, the rules on sensitive personal data. It also reflects the information an e-commerce entity is expected to publish under the Consumer Protection (E-Commerce) Rules, 2020.

In DPDP language, we are the data fiduciary for the personal data described here, and you are the data principal. Payment gateways, courier partners, messaging providers and our hosting and software providers are processors or independent fiduciaries for the limited work they do for us. We do not sell your personal data.

This policy is a standard template for an Indian online store. It is a starting point, not legal advice. Please have it reviewed for your own business, especially if you sell to children, collect health information, or run advertising pixels.

1. Who this policy covers

This policy applies to personal data we collect through the Store, our checkout, customer accounts, support email, phone and WhatsApp conversations about orders, and the cookies described below. It does not apply to a third-party website you open from a link on the Store, or to a marketplace listing that is not operated by us. Those sites have their own policies.

If you give us personal data about someone else, for example a gift recipient's name, phone and address, you confirm that you have told them and that you are allowed to share those details so we can deliver the order.

2. Personal data we collect

2.1 Data you give us

• Identity and contact: name, phone number, email address, and, if you create a business account, GSTIN or company name where we ask for it.
• Delivery and billing: address, pin code, city, state, and delivery instructions.
• Account: password (stored only as a secure hash), saved addresses, and your communication preferences.
• Order content: products, quantities, custom text or personalisation you type, gift messages, and correspondence about that order.
• Support: the content of emails, chats, calls and photographs you send us about a return, a defect or a complaint.
• Reviews and community: a rating, review text, and any photo you choose to upload.

2.2 Payment data

Online payments are handled by a payment gateway. We receive a transaction identifier, the amount, the payment method type (for example UPI or card), and the success or failure status. We do not receive or store your full card number, CVV, UPI PIN, or net-banking password. Please do not send those to us by email or chat. If a message from someone asks for them and claims to be Lexarity Collections, treat it as suspicious and contact us on the official address below.

If you choose Cash on Delivery, we still create an order record with your name, phone and address so the courier can collect payment. We do not receive your card or UPI credentials. After delivery, the courier confirms collection. If a COD order is refunded, we ask you for a bank account or UPI ID solely to send that refund, and we use it only for that payment.

2.3 Data collected automatically

• Device and browser type, operating system, language, and approximate location derived from IP address.
• Pages viewed, products searched, items added to the cart, and referring website, so the Store can function and so we can understand which pages fail.
• Cookie identifiers described in section 7.
• Logs of sign-in attempts and password resets, kept to detect misuse of accounts.

We do not ask you for government identity numbers, health records or biometrics to shop with us. Please do not include sensitive information in a review or a gift message.

3. Why we use personal data

We use personal data only for a clear purpose. Under the DPDP Act, some uses rely on your consent, and some are permitted uses such as performing the service you asked for or complying with law. The main purposes are:

• To take and fulfil your order: create the order, take or reconcile payment, share the minimum delivery details with the courier, send status messages, and issue a tax invoice. This is necessary to perform the contract.
• To provide support: answer questions, arrange a return, replacement or refund, and keep a record of what was agreed.
• To keep the Store safe: detect failed payments, account takeover, fake orders, card testing and COD abuse. We may refuse an order or ask for additional confirmation where the risk is high.
• To meet legal duties: keep invoices and records required by GST and income-tax law, respond to a lawful request from a court or authority, and publish the grievance channel the e-commerce rules require.
• To improve the Store: understand which pages and searches fail, fix errors, and decide which products to restock. Where this relies on optional analytics cookies, we use them only as described in section 7.
• To send marketing, if you opt in: offers, back-in-stock notes and newsletters by email, SMS or WhatsApp. You can withdraw this consent at any time. Order messages are not marketing and continue while an order is open.

We do not use your data to make a decision that produces a legal or similarly significant effect about you solely by automated means, other than ordinary fraud checks that a person can review if you ask. We do not sell personal data to data brokers.

4. Children

The Store is meant for adults. We do not knowingly collect personal data from a child under 18 for marketing or for an account in the child's own name. If you are a parent and believe a child has given us personal data, write to us and we will delete it unless we must keep a record of an order that was actually placed and paid for under a guardian's authority.

5. Who we share data with

We share personal data only as far as a recipient needs it to do a defined job, or where the law requires disclosure.

• Payment partners, so they can collect, reconcile and refund a payment. They are responsible for their own handling of payment credentials.
• Courier and logistics partners, who receive the recipient's name, phone, address, pin code and, where relevant, the cash amount to collect. They use this to deliver or return the parcel.
• Messaging and email providers, who transmit order updates and, if you opted in, marketing. They see the phone number or email and the content of the message we ask them to send.
• Hosting, security and software providers who store the Store's database and help us prevent abuse. They process data on our instructions.
• Professional advisers and authorities, where we need to comply with tax, accounting, a court order, or a lawful request, or to establish or defend a legal claim.
• A buyer of our business, if we sell or reorganise the business that operates the Store. We will tell you if the data fiduciary changes.

We require service providers who act on our behalf to protect the data and to use it only for the task we set. A payment gateway or courier may also be an independent organisation with its own legal duties to you. Their privacy notices describe those duties.

Some providers may process data on servers outside India. Where that happens, we take steps the DPDP Act requires before the transfer, and we share only what the provider needs. You may ask us which categories of provider see your data for a given order.

6. How long we keep data

We keep personal data only for as long as the purpose requires, then delete it or irreversibly anonymise it.

• Orders, invoices and refund records are kept for the period required by GST and income-tax law, which is commonly up to eight years from the relevant financial year, and longer if a dispute or audit is open.
• Account data is kept while the account is open. If you ask us to delete the account, we remove profile data that we are not obliged to retain, and we keep the invoice record without using it for marketing.
• Support correspondence is kept long enough to handle repeat complaints about the same order and then deleted on a routine cycle, unless a dispute is open.
• Marketing consent records are kept so we can show when you opted in or out.
• Security logs are kept for a shorter period, typically months rather than years, unless an incident is being investigated.

7. Cookies and similar tools

Cookies are small text files stored on your device. We use them in three groups:

• Essential cookies keep the cart, checkout and signed-in session working, remember a security token, and balance load. The Store does not function properly without them. These do not require a separate marketing consent.
• Preference cookies remember choices such as language or a dismissed notice, where the Store offers them.
• Analytics and marketing cookies help us see aggregated traffic and, where enabled, measure an advertisement. We use these only where you allow them, or where the law treats them as permitted. You can refuse them without losing the ability to place an order.

You can also block or delete cookies in your browser. Blocking essential cookies will stop checkout from working. A pixel in an email may tell us that an order message was opened; you can switch off images in your mail client if you do not want that.

8. Security

We use reasonable technical and organisational measures suited to an online store: encrypted HTTPS connections, access controls so staff see only the orders they need, hashed passwords, and providers who themselves commit to security practices. No method of transmission or storage is completely secure. Please use a unique password and tell us immediately if you believe your account or an order has been compromised.

If we become aware of a personal-data breach that is likely to affect you, we will inform you and the Data Protection Board of India where the DPDP Act requires us to do so, and we will describe the steps you can take.

9. Your rights

Subject to the DPDP Act and to records we must keep by law, you may:

• Access a summary of the personal data we hold about you and the purposes we use it for.
• Correct data that is inaccurate or incomplete, including a delivery address on your account. An address already given to a courier for a parcel in transit may not be changeable.
• Erase personal data that we no longer need for a permitted purpose. We may refuse erasure of an invoice we must retain, and we will explain why.
• Withdraw consent for marketing, and for any optional cookie, at any time. Withdrawal does not affect processing that already happened, or processing we do because of a contract or a legal duty.
• Nominate another person to exercise your rights in the event of your death or incapacity, in the manner the DPDP Act and its rules provide.
• Complain to our Grievance Officer and, if you are not satisfied, to the Data Protection Board of India once that route is available to you.

To use a right, email us from the address on your account, or write to the Grievance Officer with enough detail for us to find you (order number or registered phone). We may ask you to confirm you are the account holder before we disclose or delete data. We aim to answer within 30 days. If a request is complex or repeats a request we have already answered, we will tell you and may take longer where the law allows.

You can also update saved addresses and communication preferences in your account, and you can stop marketing by using the unsubscribe link in a marketing message.

10. Marketing

We send promotional email, SMS or WhatsApp only if you have opted in, for example by ticking a box at signup or by asking to be notified when a product is back in stock. Every marketing message will identify Lexarity Collections and tell you how to opt out. Opting out does not stop messages about an order you have already placed. We do not use purchased lists to contact you.

11. Reviews and public content

If you publish a review, other shoppers can see the name you chose to display and the text you wrote. Do not include your full address, phone number or order number in a review. You can ask us to remove a review that contains personal data you did not mean to publish.

12. Changes to this policy

We will post any change on this page and update the date at the top. If a change materially reduces your rights or starts a new use of data that needs consent, we will ask for that consent or give you a clear notice before the new use begins. The version on the Store is the current version.

13. Grievance officer and contact

For a privacy question, a request to access or delete data, or a grievance about how we handle personal data, contact our Grievance Officer, Lexarity Collections. We acknowledge grievances promptly and aim to resolve them within the period required by the DPDP Act and, for consumer complaints about the Store, within one month as required by the Consumer Protection (E-Commerce) Rules, 2020, after acknowledging the complaint within 48 hours.

Lexarity Collections
Plot No 848, Gokul Nagar, Gokulpura, Jaipur, Jaipur, Rajasthan, 302012
Email: maheshkumarkumawat914@gmail.com
Phone: 8290262306