This Privacy Policy explains how Lucaso Decor India Private Limited ("Lucaso", "we", "our", "us") collects, uses, stores, shares, and protects the personal data of our customers, website visitors, and anyone else who interacts with us. It applies to all data collected via our website lucaso.in, by telephone, in our showrooms, or through any of our services. We are committed to full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
Lucaso Decor India Private Limited is a luxury interior products company incorporated under the Companies Act, 2013, with its registered office in Lucknow, Uttar Pradesh, India.
We are the Data Fiduciary for all personal data collected in connection with our products and services. This means we determine the purposes and means of processing your personal data and are responsible for doing so lawfully and transparently.
| Detail | Information |
|---|---|
| Company Name | Lucaso Decor India Private Limited |
| Registered State | Uttar Pradesh, India |
| Website | www.lucaso.in |
| Privacy Email | Info@lucaso.in |
| Phone | +91 88745 37453 |
We collect personal data in the following categories:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, salutation | Consultation booking, order form |
| Contact Data | Mobile number, email address, WhatsApp | Any inquiry or order |
| Address Data | Home/office address, city, PIN code | Site measurement, delivery |
| Financial Data | Payment method, transaction reference | Order payment |
| Project Data | Room dimensions, design preferences, photos | Design consultation |
| Communication Data | Enquiry messages, feedback, complaints | Contact forms, email, WhatsApp |
When you visit our website, we automatically collect certain technical data including:
- IP address and approximate geographic location;
- Browser type, version, and operating system;
- Pages visited, time spent, and referral source;
- Device type (desktop, mobile, tablet);
- Cookie identifiers (see Section 7).
We may receive limited information about you from third parties such as social media platforms (if you interact with our pages), referral partners, or dealers. Such data is processed only for the purposes set out in Section 3.
We never collect sensitive personal data such as caste, religion, health information, biometric data, or financial account details beyond what is strictly necessary for payment processing. We do not store card or bank account details on our systems.
We process your personal data only for specific, legitimate purposes. The table below sets out each purpose and the legal basis on which we rely:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your Order | Contractual necessity |
| Site measurement visits and installation scheduling | Contractual necessity |
| Sending Order updates and project communications | Contractual necessity |
| Processing payments and managing invoices | Contractual necessity / Legal obligation |
| Maintaining warranty records and after-sales support | Contractual necessity |
| Sending promotional communications and offers | Consent (withdrawable at any time) |
| Improving our products, services, and website | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation |
| Preventing fraud and protecting our business | Legitimate interests |
| Responding to enquiries and complaints | Contractual necessity / Legitimate interests |
Where we rely on consent as the legal basis (e.g. marketing communications), you may withdraw your consent at any time by contacting us at Info@lucaso.in or clicking "Unsubscribe" in any marketing email. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
We never sell your personal data. Your information is never sold, rented, or traded to any third party for their commercial use under any circumstances.
We share personal data only in the following limited circumstances:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Our installation & delivery teams | To schedule and complete your installation | Confidentiality agreements, need-to-know basis |
| Payment processors (e.g., Razorpay, banks) | To process your payments securely | PCI-DSS compliant, encrypted channels |
| IT service providers (hosting, CRM, email) | To operate our business systems | Data processing agreements, India/compliant servers |
| Authorised Lucaso dealers | To fulfil Orders placed through dealers | Dealer agreements with privacy obligations |
| Legal and regulatory authorities | When required by law, court order, or regulation | Only when legally compelled |
| Professional advisors (lawyers, auditors) | For legal, financial, or regulatory matters | Professional confidentiality obligations |
Lucaso primarily stores and processes your data within India. Where any data is processed outside India (e.g., via cloud services), we ensure adequate safeguards are in place in compliance with the DPDP Act, 2023 and applicable data transfer regulations.
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
- Encryption: All data transmitted between your browser and our website is encrypted using TLS/SSL protocols;
- Access Controls: Personal data is accessible only to authorised Lucaso personnel who need it to perform their duties;
- Secure Storage: Data is stored on access-controlled servers with regular security reviews;
- No Card Storage: We never store payment card numbers or bank account details on our systems — all payments are processed through PCI-DSS compliant gateways;
- Staff Training: All Lucaso personnel handling customer data are trained on data protection obligations;
- Incident Response: We maintain a data breach response procedure and will notify affected individuals and the Data Protection Board of India as required by law.
While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. We encourage you to safeguard your own devices and not share your personal information unnecessarily.
In the event of a personal data breach that poses a risk to your rights or interests, we will notify you and the relevant authorities within the timeframes required under the DPDP Act, 2023. Notification will be provided via the contact details you have registered with us.
We retain your personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Order and contract records | 7 years after Order completion | Tax law, legal compliance |
| Warranty records | Duration of warranty + 2 years | Warranty claims |
| Payment records | 8 years | Financial regulations, GST |
| Customer communication records | 3 years after last interaction | Customer service, dispute resolution |
| Marketing contact preferences | Until consent withdrawn or 3 years | Consent management |
| Website usage analytics | 26 months | Business improvement |
| CCTV footage (showrooms) | 30 days unless incident | Security |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you.
Our website lucaso.in uses cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site. A cookie is a small text file stored on your device.
| Cookie Type | Purpose | Duration | Type |
|---|---|---|---|
| Strictly Necessary | Required for the website to function. Cannot be disabled. | Session | Essential |
| Performance / Analytics | Measure page views, user journeys, and site performance (e.g. Google Analytics). | Up to 2 years | Analytics |
| Functional | Remember your preferences such as language or region. | Up to 1 year | Functional |
| Marketing / Retargeting | Track browsing to show relevant Lucaso ads on other platforms (e.g. Meta Pixel, Google Ads). | Up to 90 days | Optional |
You can control and manage cookies in the following ways:
- Through your browser settings — most browsers allow you to block or delete cookies;
- By using our Cookie Preferences tool (available via the cookie banner on first visit);
- For Google Analytics opt-out, install the Google Analytics Opt-out Browser Add-on;
- For Meta Pixel, manage ad preferences via your Facebook / Instagram ad settings.
Disabling strictly necessary cookies may affect the functionality of our website. Disabling optional or analytics cookies will not affect your ability to browse or contact us.
Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data. We are committed to responding to all valid requests within 30 days:
To exercise any of the above rights, please contact our Data Protection Officer at Info@lucaso.in or call +91 88745 37453. Please include your name, contact details, and a clear description of your request. We may need to verify your identity before processing your request. We will respond within 30 days. In complex cases, this may be extended to 60 days with prior notice.
Under the DPDP Act, 2023, you may nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity. To register a nomination, please contact us in writing.
Lucaso's products and services are intended for adults. Our website and services are not directed at children under the age of 18, and we do not knowingly collect personal data from individuals under 18 years of age.
In accordance with the Digital Personal Data Protection Act, 2023, where we have reason to believe that personal data provided belongs to a person under 18 years of age, we will:
- Require verifiable parental or guardian consent before processing such data;
- Not process the data for behavioural monitoring, targeted advertising, or profiling;
- Delete the data if parental consent cannot be obtained.
If you believe we have inadvertently collected personal data from a minor, please contact us immediately at Info@lucaso.in and we will promptly delete such data.
We review and update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or applicable regulations. The "Last Updated" date at the top of this policy reflects the date of the most recent revision.
When we make material changes to this policy, we will notify you by:
- Publishing the updated policy prominently on our website lucaso.in;
- Sending an email notification to registered customers where the change significantly affects their rights or how their data is used;
- Displaying a notice in our showrooms where appropriate.
Your continued use of Lucaso's services after the effective date of a revised policy constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
Previous versions of this Privacy Policy are available upon request by emailing Info@lucaso.in. We retain archived versions for a minimum of 3 years.
If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact our designated Data Protection Officer (DPO):
| Contact Method | Details |
|---|---|
| Email (DPO) | Info@lucaso.in Please include "Privacy Request" in the subject line |
| Phone | +91 88745 37453 |
| +91 88745 37453 | |
| Website | lucaso.in/contact |
| Postal Address | Data Protection Officer Lucaso Decor India Private Limited Lucknow, Uttar Pradesh, India |
If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter to the Data Protection Board of India, the statutory body established under the DPDP Act, 2023. Further information is available at dpboard.gov.in.
We aim to respond to all privacy requests within 30 days of receipt. For complex requests, we may require up to 60 days — we will inform you of any extension within the initial 30-day period.
This Privacy Policy was last reviewed and approved by the management of Lucaso Decor India Private Limited. It is effective from 1st January 2025 and supersedes all previous privacy notices issued by the Company. By engaging with Lucaso's services, you acknowledge that you have read and understood this Privacy Policy.