Privacy Policy

Last updated: 18 September 2026

Lakshanam by Subha (“Lakshanam”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you visit lakshanam.com (the “Website”), place an order, book a styling consultation or contact us, how we use and share it, how long we keep it, and the rights you have over it.

This policy is published in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Under the Digital Personal Data Protection Act, 2023, Lakshanam by Subha is the Data Fiduciary for the personal data described here.

By using the Website or providing your personal data to us, you agree to the practices described in this policy. This policy forms part of our Terms & Conditions.

1. Information We Collect

Information you give us directly

Identity and contact details: your name, email address, mobile number, billing address and delivery address.
Account details: your username and a password, which is stored only in encrypted (hashed) form, plus your order history, wishlist and saved addresses.
Order details: the products you buy, the amounts you pay, the payment method type (for example UPI or card) and payment status. We never receive or store your full card number, card expiry, CVV, UPI PIN or net-banking credentials; these are entered directly with our payment gateway, Razorpay.
Messages and support: the content of your emails, WhatsApp messages, contact-form submissions and calls with us, including any unboxing videos and photographs you send us in support of a claim.
Styling consultation details: information you choose to share for a consultation, such as photographs of your outfit, the occasion, your budget and your preferences.
Marketing preferences: your email address if you subscribe to our newsletter, and your communication preferences.
Reviews and content you submit to the Website or our social media channels.

Information collected automatically

Device and usage data: your IP address, browser type and version, device type, operating system, screen size, language, the pages and products you view, the links you click, the website that referred you, and the dates and times of your visits.
Cookies and similar technologies, as described in Section 5.

We do not knowingly collect sensitive personal data such as financial account passwords, health information, biometric data or information about religious or political beliefs, and we ask you not to send us any such data.

2. How We Use Your Information

We use your personal data for the following purposes:

To fulfil your orders: to process your payment, pack and deliver your products, send you order confirmations, invoices and delivery updates, and handle cancellations, claims, replacements and refunds.
To provide customer support and respond to your questions, requests and complaints, including verifying damage or defect claims using the videos and photographs you send us.
To manage your account, including your wishlist, saved addresses and order history.
To deliver the styling consultation you have booked.
To communicate with you about your order or account by email, SMS, WhatsApp or telephone.
To keep the Website and our customers safe: to detect and prevent fraud, abuse of our policies, chargeback fraud, unauthorised access and security incidents.
To improve the Website and our products: to understand how the Website is used, which products are popular, and how we can improve our range, our content and the shopping experience.
To send you marketing communications about new collections, offers and events, only where you have opted in. You can unsubscribe at any time.
To comply with the law, including tax, accounting and consumer-protection obligations, and to establish, exercise or defend legal claims.

3. Legal Basis for Processing

Consent. When you place an order, create an account, submit a form, message us or subscribe to our newsletter, you consent to our processing of the personal data you provide for the purpose for which you provided it, as described in this policy. You may withdraw your consent at any time (see Section 9); withdrawal does not affect processing that has already taken place, and it may mean that we are unable to deliver an order or provide a service to you.
Legitimate uses. Where you have voluntarily provided your personal data to us for a specified purpose, such as delivering an order you have placed, we may process it for that purpose without separate consent, as permitted by the Digital Personal Data Protection Act, 2023.
Legal obligations. We process and retain certain data, such as invoices and transaction records, because Indian law requires us to.

4. Who We Share Your Information With

We do not sell, rent or trade your personal data to anyone. We share it only with the following categories of recipients, and only to the extent needed for the purpose:

Payment gateway: Razorpay Software Private Limited processes your payments. Your payment details are provided directly to Razorpay and are governed by its privacy policy.
Courier and logistics partners, who receive your name, delivery address and mobile number in order to deliver your parcel and contact you about the delivery.
Hosting and technology providers who host the Website, store our data and provide security, caching, email and backup services. The Website runs on WordPress and WooCommerce and is hosted with Hostinger.
Email and newsletter services (such as Mailchimp), only if you subscribe to our newsletter.
Analytics and advertising tools (such as those provided by Google or Meta), where enabled on the Website, which receive pseudonymous usage data through cookies to help us understand and improve the Website and measure our marketing.
Messaging platforms: when you contact us on WhatsApp, your messages are transmitted through WhatsApp, which is operated by Meta Platforms and subject to its own privacy policy.
Professional advisers such as accountants, auditors and lawyers, under a duty of confidentiality.
Government authorities, courts, regulators and law enforcement, where we are required to do so by law, a court order or a lawful request, or where it is necessary to protect our rights, our customers or the public.
A successor to our business, if Lakshanam or substantially all of its assets are transferred, in which case your data will continue to be protected under this policy.

Our service providers are permitted to use your personal data only to provide their services to us and are required to keep it secure and confidential.

5. Cookies

Cookies are small text files placed on your device by a website. The Website uses the following types of cookies and similar technologies:

Essential cookies, which are necessary for the Website to work: they keep you logged in, remember the items in your cart, secure the checkout and protect against fraud. The Website cannot function without them.
Functional cookies, which remember your preferences, wishlist, compare list and recently viewed products so that you do not have to set them again.
Performance and analytics cookies, which collect aggregated, pseudonymous information about how visitors use the Website so that we can improve it.
Marketing cookies, where enabled, which help us measure the effectiveness of our advertising and show you relevant content on other platforms.

You can control cookies through your browser settings, including deleting existing cookies and blocking new ones. Please note that blocking essential cookies will prevent you from adding products to your cart or completing a purchase.

6. Where Your Information Is Stored

Your personal data is stored on the secure servers of our hosting and service providers. Some of these providers may store or process data on servers located outside India. Where personal data is transferred outside India, we do so only in accordance with applicable law and with providers who maintain appropriate safeguards to protect it.

7. How Long We Keep Your Information

Order, invoice and payment records: for as long as required by Indian tax, accounting and company laws, which is generally up to 8 years after the end of the financial year in which the order was placed.
Account information: for as long as your account is active. If you ask us to delete your account, we will delete or anonymise the data that we are not legally required to keep.
Support messages, claim videos and photographs: for up to 12 months after the matter is resolved, unless they are needed for a dispute or legal claim.
Consultation details and photographs: for up to 12 months after the consultation, unless you ask us to delete them sooner.
Marketing data: until you unsubscribe or withdraw your consent.
Website usage data: generally up to 26 months in aggregated or pseudonymous form.

When personal data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you.

8. How We Protect Your Information

We use reasonable security practices and procedures appropriate to the nature of the data we hold, including:

encryption of all traffic to and from the Website using HTTPS (SSL/TLS);
processing of payments only through a PCI-DSS-compliant payment gateway, so that card and banking details never touch our systems;
storage of passwords in hashed form only;
access to personal data restricted to those who need it to serve you;
regular software updates, security monitoring and backups.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential. If you believe that your account or personal data has been compromised, please contact us immediately. In the event of a personal data breach affecting you, we will notify you and the relevant authorities as required by law.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you have the right to:

Access: obtain a summary of the personal data we hold about you, how we use it and who we have shared it with.
Correction and updating: have inaccurate or incomplete personal data corrected, completed or updated. You can update most of your details yourself in the “My Account” section of the Website.
Erasure: have your personal data deleted, except where we are required by law to retain it or where it is needed for a legal claim.
Withdraw consent: withdraw any consent you have given, at any time, with effect for the future.
Opt out of marketing: unsubscribe from marketing emails using the link in any email, or by messaging us.
Grievance redressal: raise a complaint about how we handle your personal data with our Grievance Officer (Section 13).
Nominate: nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email us at contact@lakshanam.com from the email address associated with your account or order, or message us on WhatsApp at +91 73586 71075. We may ask you to verify your identity before acting on a request. We will respond within a reasonable time and in any case within the period prescribed by law.

If you are not satisfied with our response, you have the right to approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.

10. Children

The Website is intended for use by persons aged 18 and above. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will delete it.

11. Third-Party Websites and Social Media

The Website may contain links to third-party websites and to our social media pages. We are not responsible for the privacy practices or content of those websites or platforms, and this policy does not apply to them. We encourage you to read their privacy policies. If you interact with us on a social media platform, that platform’s privacy policy also applies.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or the law. The revised policy will be published on this page with a new “Last updated” date, and where the change is significant we will notify you by email or a notice on the Website. Please review this page periodically.

13. Grievance Officer and Contact

If you have any questions, concerns or complaints about this policy or the way we handle your personal data, or if you wish to exercise your rights, please contact our Grievance Officer:

In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Act, 2000, our Grievance Officer is:

Subha, Founder, Lakshanam by Subha
Email: contact@lakshanam.com
WhatsApp / Phone: +91 73586 71075

We acknowledge every grievance within 48 hours of receipt and aim to resolve it within 30 days. Please quote your order number and describe the issue clearly so we can help you faster.