Lucaso – Navigation

Your Privacy Matters

Lucaso Decor India Private LimitedPrivacy Policy

Lucaso Decor India Private Limited is committed to protecting your personal information with the highest standards of care, transparency, and responsibility. This policy explains exactly what we collect, why, and how.

  • CompanyLucaso Decor India Private Limited
  • Effective Date1st January 2025
  • Last Updated1st March 2025
  • Governing LawDPDP Act 2023 & IT Act 2000, India
  • Privacy ContactInfo@lucaso.in

Contents

11 Sections. Jump to Any One.

  1. 01Who We Are
  2. 02Information We Collect
  3. 03How We Use Your Data
  4. 04Sharing Your Information
  5. 05Security of Your Data
  6. 06Data Retention
  7. 07Cookies & Tracking Technologies
  8. 08Your Rights
  9. 09Children's Privacy
  10. 10Policy Updates
  11. 11Contact Our Data Protection Officer

Privacy questions? Info@lucaso.in · +91 88745 37453

Our Privacy Commitments

Four Promises We Make To Every Customer

  • We Never Sell Your Data

    Your personal information is never sold, rented, or traded to any third party for commercial purposes — ever.

  • We Protect What You Share

    Industry-standard encryption and access controls ensure your data is protected from unauthorised access.

  • We Collect Only What's Needed

    Data minimisation is central to our approach — we only collect information we genuinely need to serve you.

  • You Stay In Control

    You have the right to access, correct, or delete your data at any time — we make exercising those rights simple.

This Privacy Policy explains how Lucaso Decor India Private Limited ("Lucaso", "we", "our", "us") collects, uses, stores, shares, and protects the personal data of our customers, website visitors, and anyone else who interacts with us. It applies to all data collected via our website lucaso.in, by telephone, in our showrooms, or through any of our services. We are committed to full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

01

Who We Are

Our identity and role as data fiduciary

↑ Contents

Lucaso Decor India Private Limited is a luxury interior products company incorporated under the Companies Act, 2013, with its registered office in Lucknow, Uttar Pradesh, India.

We are the Data Fiduciary for all personal data collected in connection with our products and services. This means we determine the purposes and means of processing your personal data and are responsible for doing so lawfully and transparently.

DetailInformation
Company NameLucaso Decor India Private Limited
Registered StateUttar Pradesh, India
Websitewww.lucaso.in
Privacy EmailInfo@lucaso.in
Phone+91 88745 37453
02

Information We Collect

Categories of personal data we process

↑ Contents

We collect personal data in the following categories:

2.1 Information You Provide Directly

Data CategoryExamplesWhen Collected
Identity DataFull name, salutationConsultation booking, order form
Contact DataMobile number, email address, WhatsAppAny inquiry or order
Address DataHome/office address, city, PIN codeSite measurement, delivery
Financial DataPayment method, transaction referenceOrder payment
Project DataRoom dimensions, design preferences, photosDesign consultation
Communication DataEnquiry messages, feedback, complaintsContact forms, email, WhatsApp

2.2 Information We Collect Automatically

When you visit our website, we automatically collect certain technical data including:

  • IP address and approximate geographic location;
  • Browser type, version, and operating system;
  • Pages visited, time spent, and referral source;
  • Device type (desktop, mobile, tablet);
  • Cookie identifiers (see Section 7).

2.3 Information from Third Parties

We may receive limited information about you from third parties such as social media platforms (if you interact with our pages), referral partners, or dealers. Such data is processed only for the purposes set out in Section 3.

We never collect sensitive personal data such as caste, religion, health information, biometric data, or financial account details beyond what is strictly necessary for payment processing. We do not store card or bank account details on our systems.

03

How We Use Your Data

Purposes and legal basis for processing

↑ Contents

We process your personal data only for specific, legitimate purposes. The table below sets out each purpose and the legal basis on which we rely:

PurposeLegal Basis
Processing and fulfilling your OrderContractual necessity
Site measurement visits and installation schedulingContractual necessity
Sending Order updates and project communicationsContractual necessity
Processing payments and managing invoicesContractual necessity / Legal obligation
Maintaining warranty records and after-sales supportContractual necessity
Sending promotional communications and offersConsent (withdrawable at any time)
Improving our products, services, and websiteLegitimate interests
Complying with legal and regulatory obligationsLegal obligation
Preventing fraud and protecting our businessLegitimate interests
Responding to enquiries and complaintsContractual necessity / Legitimate interests

Where we rely on consent as the legal basis (e.g. marketing communications), you may withdraw your consent at any time by contacting us at Info@lucaso.in or clicking "Unsubscribe" in any marketing email. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

04

Sharing Your Information

Who we share data with and why

↑ Contents

We never sell your personal data. Your information is never sold, rented, or traded to any third party for their commercial use under any circumstances.

We share personal data only in the following limited circumstances:

RecipientPurposeSafeguards
Our installation & delivery teamsTo schedule and complete your installationConfidentiality agreements, need-to-know basis
Payment processors (e.g., Razorpay, banks)To process your payments securelyPCI-DSS compliant, encrypted channels
IT service providers (hosting, CRM, email)To operate our business systemsData processing agreements, India/compliant servers
Authorised Lucaso dealersTo fulfil Orders placed through dealersDealer agreements with privacy obligations
Legal and regulatory authoritiesWhen required by law, court order, or regulationOnly when legally compelled
Professional advisors (lawyers, auditors)For legal, financial, or regulatory mattersProfessional confidentiality obligations

4.1 Cross-Border Data Transfers

Lucaso primarily stores and processes your data within India. Where any data is processed outside India (e.g., via cloud services), we ensure adequate safeguards are in place in compliance with the DPDP Act, 2023 and applicable data transfer regulations.

05

Security of Your Data

How we protect your personal information

↑ Contents

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

  • Encryption: All data transmitted between your browser and our website is encrypted using TLS/SSL protocols;
  • Access Controls: Personal data is accessible only to authorised Lucaso personnel who need it to perform their duties;
  • Secure Storage: Data is stored on access-controlled servers with regular security reviews;
  • No Card Storage: We never store payment card numbers or bank account details on our systems — all payments are processed through PCI-DSS compliant gateways;
  • Staff Training: All Lucaso personnel handling customer data are trained on data protection obligations;
  • Incident Response: We maintain a data breach response procedure and will notify affected individuals and the Data Protection Board of India as required by law.

While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. We encourage you to safeguard your own devices and not share your personal information unnecessarily.

5.1 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights or interests, we will notify you and the relevant authorities within the timeframes required under the DPDP Act, 2023. Notification will be provided via the contact details you have registered with us.

06

Data Retention

How long we keep your information

↑ Contents

We retain your personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following retention periods apply:

Data TypeRetention PeriodReason
Order and contract records7 years after Order completionTax law, legal compliance
Warranty recordsDuration of warranty + 2 yearsWarranty claims
Payment records8 yearsFinancial regulations, GST
Customer communication records3 years after last interactionCustomer service, dispute resolution
Marketing contact preferencesUntil consent withdrawn or 3 yearsConsent management
Website usage analytics26 monthsBusiness improvement
CCTV footage (showrooms)30 days unless incidentSecurity

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you.

07

Cookies & Tracking Technologies

What cookies we use and how to manage them

↑ Contents

Our website lucaso.in uses cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site. A cookie is a small text file stored on your device.

7.1 Types of Cookies We Use

Cookie TypePurposeDurationType
Strictly NecessaryRequired for the website to function. Cannot be disabled.SessionEssential
Performance / AnalyticsMeasure page views, user journeys, and site performance (e.g. Google Analytics).Up to 2 yearsAnalytics
FunctionalRemember your preferences such as language or region.Up to 1 yearFunctional
Marketing / RetargetingTrack browsing to show relevant Lucaso ads on other platforms (e.g. Meta Pixel, Google Ads).Up to 90 daysOptional

7.2 Managing Cookies

You can control and manage cookies in the following ways:

  • Through your browser settings — most browsers allow you to block or delete cookies;
  • By using our Cookie Preferences tool (available via the cookie banner on first visit);
  • For Google Analytics opt-out, install the Google Analytics Opt-out Browser Add-on;
  • For Meta Pixel, manage ad preferences via your Facebook / Instagram ad settings.

Disabling strictly necessary cookies may affect the functionality of our website. Disabling optional or analytics cookies will not affect your ability to browse or contact us.

08

Your Rights

Rights under the DPDP Act 2023 and how to exercise them

↑ Contents

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data. We are committed to responding to all valid requests within 30 days:

Right to Access

Request a copy of the personal data we hold about you and information on how it is used.

Right to Correction

Request that inaccurate or incomplete personal data be corrected or updated.

Right to Erasure

Request deletion of your personal data where it is no longer necessary or lawful for us to hold.

Right to Withdraw Consent

Withdraw consent for marketing or other consent-based processing at any time.

Right to Grievance Redressal

Lodge a complaint with our Data Protection Officer and receive a response within 30 days.

Right to Escalate

Escalate unresolved complaints to the Data Protection Board of India at dpboard.gov.in.

8.1 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at Info@lucaso.in or call +91 88745 37453. Please include your name, contact details, and a clear description of your request. We may need to verify your identity before processing your request. We will respond within 30 days. In complex cases, this may be extended to 60 days with prior notice.

8.2 Nomination

Under the DPDP Act, 2023, you may nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity. To register a nomination, please contact us in writing.

09

Children's Privacy

Our policy regarding data of minors

↑ Contents

Lucaso's products and services are intended for adults. Our website and services are not directed at children under the age of 18, and we do not knowingly collect personal data from individuals under 18 years of age.

In accordance with the Digital Personal Data Protection Act, 2023, where we have reason to believe that personal data provided belongs to a person under 18 years of age, we will:

  • Require verifiable parental or guardian consent before processing such data;
  • Not process the data for behavioural monitoring, targeted advertising, or profiling;
  • Delete the data if parental consent cannot be obtained.

If you believe we have inadvertently collected personal data from a minor, please contact us immediately at Info@lucaso.in and we will promptly delete such data.

10

Policy Updates

How we notify you of changes to this policy

↑ Contents

We review and update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or applicable regulations. The "Last Updated" date at the top of this policy reflects the date of the most recent revision.

When we make material changes to this policy, we will notify you by:

  • Publishing the updated policy prominently on our website lucaso.in;
  • Sending an email notification to registered customers where the change significantly affects their rights or how their data is used;
  • Displaying a notice in our showrooms where appropriate.

Your continued use of Lucaso's services after the effective date of a revised policy constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

Previous versions of this Privacy Policy are available upon request by emailing Info@lucaso.in. We retain archived versions for a minimum of 3 years.

11

Contact Our Data Protection Officer

How to reach us for privacy matters

↑ Contents

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact our designated Data Protection Officer (DPO):

Contact MethodDetails
Email (DPO)Info@lucaso.in
Please include "Privacy Request" in the subject line
Phone+91 88745 37453
WhatsApp+91 88745 37453
Websitelucaso.in/contact
Postal AddressData Protection Officer
Lucaso Decor India Private Limited
Lucknow, Uttar Pradesh, India

11.1 Data Protection Board of India

If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter to the Data Protection Board of India, the statutory body established under the DPDP Act, 2023. Further information is available at dpboard.gov.in.

We aim to respond to all privacy requests within 30 days of receipt. For complex requests, we may require up to 60 days — we will inform you of any extension within the initial 30-day period.

This Privacy Policy was last reviewed and approved by the management of Lucaso Decor India Private Limited. It is effective from 1st January 2025 and supersedes all previous privacy notices issued by the Company. By engaging with Lucaso's services, you acknowledge that you have read and understood this Privacy Policy.

Privacy First

Questions About Your Personal Data?

Our Data Protection Officer is here to help. Reach out any time — we aim to respond to all privacy enquiries within 30 days.

Email Our DPO +91 88745 37453