This Privacy Policy describes how LUTE India ("we", "us", or "our"), a sole proprietorship operating the platform lute.co.in and its associated applications at apps.lute.co.in, collects, uses, discloses, and protects your personal information. This Policy is compliant with the Information Technology Act, 2000 (IT Act), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Digital Personal Data Protection Act, 2023 (DPDP Act).
For the purposes of applicable law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), LUTE India acts as the Data Fiduciary.
1. Who We Are
LUTE India ("we", "us", or "our") is a sole proprietorship established and operating under the laws of India.
We provide technology and business support services, including marketplace setup, logistics management, order processing, and related operational solutions for businesses across India.
We operate the website https://lute.co.in and associated applications available at https://apps.lute.co.in.
For any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us at contact@lute.co.in.
2. Consent
By accessing or using our services, you consent to the collection and processing of your personal data in accordance with this Privacy Policy.
Consent may be obtained through account registration, platform usage, or explicit agreement mechanisms. You may withdraw your consent at any time by contacting us.
3. What Data We Collect
We collect personal, business, and technical information through various means in order to provide, operate, maintain, and improve our services, ensure security, comply with legal obligations, and enhance user experience.
3.1 Information You Provide Directly
You may provide us with information directly when accessing or using our platform, applications, or services, including but not limited to:
- Full name, business name, email address, and phone number;
- Billing address and applicable business or tax identification details (such as GSTIN, PAN, or equivalent identifiers);
- Information submitted through contact forms, inquiries, or other communication channels;
- Information shared through email correspondence, support requests, or other direct interactions with us;
- Business documents, records, or files uploaded, submitted, or otherwise provided through our platform, applications, or services;
- Courier, order, shipment, or transaction-related data entered or managed within our systems.
3.2 Information Collected Automatically
When you access or use our website, platform, or applications, we may automatically collect certain technical and usage-related information, including:
- IP address, browser type, device type, operating system, and device identifiers;
- Usage data such as pages visited, time spent on pages, navigation paths, and interaction patterns;
- Application usage data, including analytics, diagnostic information, and operational data required for functionality and performance;
- Information collected through cookies, log files, pixels, and similar tracking technologies (please refer to our Cookie Policy for further details).
3.3 Information from Third Parties
We may receive or obtain information about you from third-party service providers, partners, and integrations in connection with the services we offer, including but not limited to:
- Payment-related information and transaction status from third-party payment processors (we do not store full payment card details);
- Courier, logistics, and shipment tracking data from third-party logistics and delivery partners;
- Communication delivery and status information from third-party messaging, notification, or communication service providers;
- Any additional data made available to us through integrations, APIs, or services that you choose to connect or use with our platform.
3.4 Payment Information
We do not directly collect or store complete payment card details or sensitive financial information. All payment transactions are processed securely by authorized third-party payment processors in accordance with applicable industry standards and legal requirements. We may, however, receive limited transaction-related information necessary for verification, record-keeping, and service fulfillment.
4. How We Use Your Information
We use your personal and business information for the following purposes:
- To create, manage, and maintain your account on our platform and applications;
- To provide, operate, and deliver our services, including but not limited to marketplace setup, product listing, order management, logistics coordination, and related business operations;
- To enable core platform functionalities such as invoicing, shipment tracking, order processing, and service management;
- To process payments, subscriptions, and generate invoices or transaction records;
- To send transactional, service-related, or administrative communications via email, SMS, messaging platforms, or other communication channels;
- To respond to inquiries, customer support requests, and service-related communications;
- To monitor, analyze, and improve the performance, functionality, and security of our platform and services;
- To develop new features, services, or offerings;
- To detect, prevent, investigate, and address fraud, unauthorized access, or security incidents;
- To comply with applicable laws, regulations, legal processes, and governmental requests.
We will not process your personal data for purposes beyond those stated above without your consent.
5. Legal Basis for Processing
We process personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023. The legal bases for processing include:
- Consent: Where you have provided consent for specific purposes, including communication or optional services;
- Contractual Necessity: Where processing is required to provide services requested by you or to fulfill contractual obligations;
- Legitimate Use: For purposes such as fraud prevention, security, service improvement, and operational efficiency;
- Legal Obligation: Where processing is necessary to comply with applicable laws, regulations, taxation requirements, or lawful requests from authorities.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share your information in the following circumstances:
6.1 Service Providers and Partners
We may share information with third-party service providers, vendors, and partners who perform services on our behalf, including but not limited to:
- Payment processing and transaction management;
- Logistics, courier, and shipment tracking services;
- Communication and notification delivery services (such as email, SMS, or messaging platforms);
- Cloud hosting, infrastructure, analytics, and technical support services.
Such third parties are contractually obligated to process data only for authorized purposes and to maintain appropriate confidentiality and security measures.
6.2 Legal Requirements
We may disclose your information where required to do so by law, regulation, legal process, or governmental request, including compliance with applicable Indian laws and directives.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of such transaction. We will take reasonable steps to ensure continued protection of your data and provide notice where required.
7. Data Storage and Security
Your data may be stored on secure servers located in India or other jurisdictions, subject to applicable legal requirements. We implement reasonable technical and organizational measures to protect your data, including:
- Encrypted data transmission using secure protocols (such as TLS/SSL);
- Access controls and role-based permissions;
- Regular monitoring, security assessments, and vulnerability management;
- Secure processing of financial transactions through compliant third-party providers.
While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Data Retention
We retain personal and business data only for as long as necessary to fulfill the purposes outlined in this Policy, including:
- Account-related data for the duration of your use of our services and a reasonable period thereafter;
- Financial, invoice, and transaction records as required under applicable taxation and regulatory laws;
- Data required for dispute resolution, legal compliance, or enforcement of agreements.
Upon valid request, and subject to legal obligations, we will delete or anonymize your data within 7–15 working days.
9. Your Rights
In accordance with applicable data protection laws in India, you may have the right to:
- Access and obtain a copy of your personal data;
- Request correction or updating of inaccurate or incomplete data;
- Request deletion or erasure of your personal data, subject to legal limitations;
- Withdraw consent where processing is based on consent;
- Nominate an authorized representative to exercise your rights on your behalf.
To exercise your rights, please contact us at support@lute.co.in.
10. Data Breach
In the event of a data breach, we will take appropriate action and notify affected users and relevant authorities as required under applicable law.
11. Children's Privacy
Our services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal data from minors. If we become aware that personal data of a minor has been collected, we will take appropriate steps to delete such information.
12. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. Users are encouraged to review the privacy policies of those websites before providing any personal data.
13. Changes to This Policy
We reserve the right to modify or update this Privacy Policy at any time. Any changes will be posted on our website with an updated effective date. Continued use of our services after such updates constitutes your acceptance of the revised Policy.
14. Contact and Grievance
For any privacy-related concerns, complaints, or requests:
- Email: contact@lute.co.in
- Business: LUTE India
We will make reasonable efforts to respond to your queries or concerns within 7–15 working days in accordance with applicable laws.