1. Introduction
Welcome to ibuluxe ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ibuluxe.com and use our services.
By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
ibuluxe is operated under the laws of India, with our registered office located in Delhi, India.
3. How We Use Your Information
We use the collected information for various purposes:
3.1 Service Delivery
- Process and fulfill your orders
- Manage your account and provide customer support
- Send order confirmations, shipping updates, and delivery notifications
- Process payments through our payment partners (Razorpay and Cashfree)
3.2 Communication
- Respond to your inquiries and requests
- Send promotional emails and newsletters (with your consent)
- Notify you about changes to our services or policies
- Send transactional SMS for order updates
3.3 Improvement & Analytics
- Analyze usage patterns to improve our website and services
- Personalize your shopping experience
- Develop new products and features
- Conduct research and analysis
3.4 Legal & Security
- Comply with legal obligations under Indian law
- Prevent fraud and unauthorized transactions
- Enforce our terms and conditions
- Protect our rights, privacy, safety, or property
4. Data Storage & Security
4.1 Data Storage
Your personal data is stored securely using the following services:
- Firebase Authentication: For secure user authentication and account management. Your password is encrypted and never stored in plain text.
- Google Cloud Firestore: For storing user profiles, order history, addresses, and preferences. Data is encrypted at rest and in transit.
Our data may be stored on servers located outside India. By using our services, you consent to the transfer of your information to facilities outside your country of residence.
4.2 Security Measures
We implement appropriate technical and organizational security measures including:
- SSL/TLS encryption for all data transmission
- Encrypted storage for sensitive data
- Regular security audits and vulnerability assessments
- Access controls and authentication protocols
- Secure payment processing through PCI-DSS compliant gateways
While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
5. Payment Information
We use third-party payment processors to handle all payment transactions:
5.1 Payment Partners
- Razorpay: RBI-licensed payment gateway for processing credit/debit cards, UPI, net banking, and wallets
- Cashfree: RBI-authorized payment aggregator for seamless payment processing
5.2 Payment Data Handling
- We do not store your complete credit/debit card numbers, CVV, or bank account details on our servers
- Payment information is processed directly by our payment partners in compliance with PCI-DSS standards
- We only store transaction references and payment status for order tracking
- Saved payment methods are tokenized and stored securely by our payment partners
5.3 GST & Taxation
All transactions are subject to applicable taxes under Indian tax laws including:
- Goods and Services Tax (GST) as per applicable rates
- Tax invoices are generated for all orders
- Your billing information may be shared with tax authorities as required by law
6. Cookies & Tracking Technologies
6.1 What Are Cookies
Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience.
6.2 Types of Cookies We Use
- Essential Cookies: Required for website functionality, authentication, and security
- Performance Cookies: Help us understand how visitors interact with our website
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertisements (with consent)
6.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
7. Third-Party Services
We may share your information with trusted third parties:
7.1 Service Providers
- Google/Firebase: Authentication, database, analytics, and hosting services
- Razorpay & Cashfree: Payment processing
- Logistics Partners: Order delivery and shipping (e.g., Delhivery, BlueDart, India Post)
- Communication Services: Email and SMS notifications
7.2 Analytics Partners
- Google Analytics for website traffic analysis
- Facebook Pixel for advertising optimization (with consent)
7.3 Legal Disclosures
We may disclose your information if required by law, court order, or government request, or to protect our legal rights.
8. Your Rights
Under applicable Indian data protection laws and IT Act 2000, you have the following rights:
- Right to Access: Request a copy of your personal data we hold
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Deletion: Request deletion of your personal data (subject to legal obligations)
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time
- Right to Data Portability: Request your data in a structured, machine-readable format
- Right to Object: Object to processing of your personal data for certain purposes
To exercise these rights, please contact us at privacy@ibuluxe.com
9. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations (including tax and accounting requirements under Indian law - typically 8 years for financial records)
- Resolve disputes and enforce our agreements
When data is no longer needed, we securely delete or anonymize it.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending an email notification for significant changes
We encourage you to review this policy periodically for any changes.
