Laxmi Diyawala

Privacy Policy

Last updated: 28 September 2026

This policy explains what personal information Laxmi Decorative Diya's Creation ("Laxmi Diyawala", "we", "us") collects when you use laxmidiyawala.com, why we collect it, who we share it with, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

By using this website or placing an order, you agree to the handling of your information as described here. If you do not agree, please do not use the website.

1. Who we are

Laxmi Decorative Diya's Creation makes and sells handcrafted clay, terracotta and decorative diya products. We decide how your personal information is used on this website.

• Address: House No. 50, Station Road, behind BSNL Office, near Indian Gas, Majhwa Tarash, Chunar, Mirzapur, Uttar Pradesh 231304
• Email: decorative.diya.creation27@gmail.com
• Phone / WhatsApp: +91 99246 99513

2. What we collect

Information you give us

• When you create an account: your name, email address, phone number and password. We store the password only in scrambled (hashed) form, so no one here can read it.
• When you place an order: your name, phone number, email address, delivery address, any note you add, the items you order and how you choose to pay.
• When you place a bulk or trade order: the details above, plus your business name, GSTIN, and billing and delivery addresses.
• When you send an enquiry: your name, phone number and anything else you choose to tell us, such as your email address, city, business name, GSTIN, the products you are interested in and your message.
• When you write a review: the name you show, your rating, your review and any photos you add.
• When you join our newsletter: your email address.
• When you contact us by phone, email or WhatsApp: what you tell us.

Information collected when you use the website

• What is in your cart and wishlist.
• What you search for on the website, so we can see which products people want and cannot find. If you are signed in, the search is linked to your account.
• Technical details: your IP address, browser type and device, recorded when you sign in, place an order or post a review. We use these to keep accounts secure and to stop fraud and spam.
• Cookies: see section 6.

Payment details

When you pay online, you enter your card, UPI or bank details on the secure page of our payment provider, Razorpay, not on our website. We never see or store your full card number, CVV, UPI PIN or net-banking password. We receive only a confirmation that the payment succeeded, with a transaction reference.

3. Why we use it

• To take and deliver your order: to confirm it, pack it, hand it to the courier, send you updates and collect payment, including cash on delivery.
• To handle bulk orders: to prepare quotations, collect advance and balance payments, raise GST tax invoices and arrange dispatch.
• To handle cancellations, returns and refunds.
• To answer your enquiries and give you trade prices when you ask for them.
• To run your account: sign-in, saved addresses, order history and password resets.
• To publish your review after we have checked it. Only the name you choose to show appears beside it.
• To send our newsletter, only if you signed up. Every email has an unsubscribe link.
• To improve the shop: to see which products people look for and fix what does not work.
• To measure our advertising, only if you allow it: see section 6.
• To keep the website safe and prevent fraud, spam and misuse.
• To meet our legal obligations, such as keeping tax invoices and accounting records.

4. Who we share it with

We do not sell or rent your personal information to anyone. We share only what each of these parties needs to do its job:

• Courier partners (such as Ekart Logistics) receive your name, phone number and delivery address so they can deliver your order, and collect payment for cash-on-delivery orders.
• Razorpay processes online payments under its own privacy policy and the Reserve Bank of India's rules.
• Our hosting and email providers store the website and its data, and send our emails.
• Meta Platforms (Facebook and Instagram) receives information about your visit, only if you allow advertising cookies. See section 6.
• Government and law enforcement authorities, when the law requires it, for example for tax records or a lawful request.

If the business is ever sold or merged, your information may pass to the new owner, who must continue to protect it as this policy describes.

5. How long we keep it

• Orders, invoices and payment records: for as long as Indian tax and accounting law requires, which under GST law is at least six years.
• Your account: until you ask us to close it. Order records we must keep by law are kept even after the account is closed.
• Guest carts: deleted automatically after 60 days without use.
• Enquiries: for as long as we are dealing with your request, and after that for a reasonable time in case you contact us again.
• Newsletter: until you unsubscribe.
• Reviews: until you ask us to remove them or the product is withdrawn.

6. Cookies

Cookies are small files your browser stores for a website. We use these:

Cookies the shop needs to work

These are always on, because without them you could not keep items in your cart, sign in or check out safely.

• Session cookie: keeps you signed in and remembers your place between pages. It expires when you stop using the website.
• Security cookie (XSRF-TOKEN): protects forms from being submitted by other websites.
• Cart cookie (lx_cart): remembers your cart if you are not signed in.
• Your cookie choice (ld_ad_consent): remembers whether you allowed advertising cookies, for six months.

Advertising cookies: only with your permission

With your permission, we use the Meta Pixel, a tool from Meta Platforms (Facebook and Instagram). It tells us which of our ads brought visitors here, and lets us show our products on Facebook and Instagram to people who have visited us. When allowed, it records the pages you view, products you look at, items you add to your cart, when you start checkout, what you search for, and completed purchases with their value. Meta may combine this with information it already holds about you, under Meta's privacy policy.

The Meta Pixel does not run and nothing is sent to Meta until you choose Allow on the cookie notice. If you choose No thanks, the shop works exactly the same. You can change your choice at any time with Cookie choices at the bottom of every page. You can also control the ads Meta shows you in your Facebook or Instagram ad settings.

7. How we protect it

The website is served over an encrypted (HTTPS) connection. Passwords are stored hashed. Staff access to customer information is limited by role and recorded. Online payments are handled entirely by Razorpay. No system is perfectly secure, but we take reasonable care to protect your information. If a breach affects your personal information, we will tell you and the Data Protection Board of India as the law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Know what personal information we hold about you and how we use it.
• Correct or update information that is wrong or out of date. You can change most of it yourself in your account.
• Have your information erased when it is no longer needed, except records the law requires us to keep.
• Withdraw your consent at any time, for example by unsubscribing from the newsletter or choosing No thanks in Cookie choices. Withdrawing consent does not affect what was done before.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Complain to our Grievance Officer (section 10), and if you are not satisfied, to the Data Protection Board of India.

To use any of these rights, email us at decorative.diya.creation27@gmail.com from the address linked to your account or order. We may need to confirm who you are before acting on the request.

9. Children

This website is meant for adults. If you are under 18, please use it only with a parent or guardian, who should place any order. We do not knowingly collect personal information from children without a parent's or guardian's consent, and we do not track children or show them targeted advertising. If you believe a child has given us personal information, contact us and we will delete it.

10. Grievance Officer

If you have a question or complaint about how we handle your personal information, contact our Grievance Officer:

• Name: [GRIEVANCE OFFICER NAME]
• Email: decorative.diya.creation27@gmail.com
• Phone: +91 99246 99513
• Address: [BUSINESS ADDRESS]

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.

11. Other websites

Our pages link to other services, such as WhatsApp, Facebook and Instagram. When you use them, their own privacy policies apply, not this one.

12. Changes to this policy

We may update this policy when the website or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your information, we will show a notice on the website or email you.

13. Contact us

For any question about this policy, email decorative.diya.creation27@gmail.com or call +91 99246 99513.