EXLUX I PRIVACY PROTOCOL

We only collect information that is necessary to run our business and serve you well.

Identity & Delivery Data - When you place an order, we collect your name, email address, phone number, billing address, and shipping address. We need this information to process your payment, pack your order, and deliver it to the right place.

Device & Browsing Data - When you visit our website, our systems automatically log your IP address, browser type, and operating system. We use this information to make our website run faster, fix technical problems, and detect fraudulent activity. We do not use this information to identify you personally.

Order & Transaction Data - We maintain a record of what you ordered, when you ordered it, and how much you paid. We keep this for customer support, accounting, and legal compliance purposes.

We do not collect sensitive personal data such as your Aadhaar number, PAN, financial account details, religion, caste, health records, or biometric data.

We do not store your credit card number, debit card number, UPI details, or any other payment information on our servers — ever.

All payments on exlux.in are processed through RBI-compliant, heavily encrypted payment gateways. When you enter your payment details at checkout, that information goes directly and exclusively to the payment gateway. It never passes through or sits on EXLUX's internal systems.

Think of it this way — we hand you directly to a secure vault to complete your payment. We never see what happens inside

We do not sell your personal data to anyone. We do not trade it, rent it, or share it for advertising purposes.

We share your data only with the operational partners listed below — and only the minimum information they need to do their specific job:

Shopify Inc. - Our store is built and hosted on Shopify, a global e-commerce platform. Shopify stores your order and account data securely on our behalf. You can read Shopify's own privacy policy at shopify.com/legal/privacy.

Courier & Logistics Partners - We share your name, phone number, and delivery address with our verified courier partners (Delhivery, Blue Dart, XpressBees) solely for the purpose of delivering your order and providing tracking updates.

Payment Gateways - As described above, your payment data is processed by Razorpay or our active payment gateway. We only share order value and order reference — never your card or bank details.

Google Analytics - We use Google Analytics to understand how visitors use our website. This data is aggregated and anonymised. It cannot be used to identify you individually.

All third parties we work with are contractually required to protect your data and use it only for the specific purpose we have shared it for.

A cookie is a very small data file that a website saves on your device when you visit.

Essential Cookies - Required for the website to function — keeping your cart saved, enabling secure checkout. You cannot opt out of essential cookies while using the site.

Performance Cookies - Help us understand how the website is used so we can improve it. Anonymised and never linked to your personal identity.

You can clear or block cookies at any time through your browser settings. Blocking essential cookies may prevent checkout from working correctly.

Under the Digital Personal Data Protection Act, 2023 (India), you have full authority over your personal data. Here is what you can ask us to do:

Right to Access - Ask us exactly what personal data we hold about you. We will send a clear record within a reasonable time.

Right to Correction - Ask us to fix any incorrect data — wrong address, wrong phone number.

Right to Erasure - Ask us to delete your personal data. We will do so, with one exception: we are legally required to retain certain financial and transaction records under Indian tax and accounting law.

Right to Opt Out of Marketing - Unsubscribe at any time by clicking the "Opt-Out" link at the bottom of any marketing email. Transactional emails (order confirmations, shipping updates) are not affected.

To exercise any of these rights, contact us at concierge@exlux.in

Your personal data is stored securely on Shopify's encrypted servers. Shopify maintains PCI DSS compliance for payment data.

We retain your order and personal data for as long as necessary to fulfil your order, provide customer support, and comply with our legal obligations as required by Indian tax and accounting law.

After that period, your data is deleted or anonymised. We take reasonable technical and organisational precautions to prevent your data from being lost, misused, or accessed without authorisation.

However, no internet-connected system can be guaranteed 100% secure. If a data breach occurs that affects your rights, we will notify you as required by law.

This Privacy Protocol is written in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

Any dispute arising from our handling of your data will be governed exclusively by the laws of India and fall under the jurisdiction of the competent courts in Palghar, Maharashtra.

We may update this Privacy Protocol from time to time to reflect changes in our operations, the law, or our service partners. When we do, we will update the "Last Updated" date at the top of this page.

Continued use of our website after any update constitutes your acceptance of the revised protocol.

Contact Channels - concierge@exlux.in

EXLUX Headquarters.

EXLUX
By Yash Polymers
Works: B-1, Gala No.1,
Dwarka Indl. Estate, NaikPada,
Vasai (E), Dist. Palghar-401 208.
GSTIN: 27AETPD0042E1ZV