Privacy Policy
Last Updated: 16 October 2026
Hanguluxe acts as a 'Data Fiduciary' under the Digital Personal Data Protection (DPDP) Act, 2023
We are committed to protecting your personal data transparently, lawfully, and securely.
1Personal Data We Collect
We collect personal data necessary to fulfill your orders and enhance your experience on our portal, including: Identity & Contact Data: Full name, mobile phone number, email address, shipping and billing addresses.
- Transaction Data: Order details, transaction history, payment status (processed securely via payment gateways).
- Technical & Usage Data: IP address, device identifiers, browser type, cookies, and browsing preferences.
2Lawful Purpose & Processing Basis
Your personal data is processed strictly for defined, lawful purposes: Fulfilling contracts, processing orders, arranging courier delivery, and managing exchanges or refunds. Communicating order status updates, tax invoices, and shipment tracking info via SMS, Email, or WhatsApp. Sending promotional or brand announcements, provided you have given explicit prior consent. Preventing fraudulent activities and maintaining accounting, statutory tax, and compliance records.
3Third-Party Data Processors Hanguluxe does not
sell or trade personal data to third parties. We share data only with necessary 'Data Processors' bound by strict confidentiality: Logistics & Courier Partners (e.g., Delhivery, BlueDart, Shiprocket) for physical delivery. Payment Service Providers (e.g., Razorpay, Cashfree, Paytm) for authorization of transactions. IT & Cloud Infrastructure Providers for secure website hosting and database maintenance.
4Data Principal Rights (Under DPDP Act,
2023) As a Data Principal under Indian law, you hold the following rights: Right to Access: Request a summary of your personal data being processed.
- Right to Correction & Erasure: Request correction of inaccurate data or deletion of personal data no longer required for legal or business processing.
- Right to Withdraw Consent: Withdraw consent for promotional messages at any time using 'Unsubscribe' links or contacting our Grievance Officer.
- Right to Nominate: Nominate another individual to exercise your privacy rights in the event of death or incapacity.
5Security & Data Retention We enforce
technical, organizational, and SSL encryption safeguards to prevent unauthorized access, loss, or misuse of personal data. Personal data is retained only for as long as required to fulfill operational purposes or comply with statutory tax and financial reporting laws.