Privacy policy

Last updated: 9 November 2026

Lumex Enterprises (“Lumex”, “we”, “us”) sells Lumex detergent online and delivers across India from Jodhpur, Rajasthan. This policy explains what personal information we collect through our website and our Android app, why we collect it, and the choices you have.

Information we collect

• Account details: your name, email address, mobile number and password. Your password is stored in a scrambled (hashed) form, so we cannot read it.
• Order details: your delivery address, city, state, PIN code, the items you order, the order value and the order status.
• Bulk quote requests: the name, mobile number, city and note you send us.
• Reviews (only if you write one): the stars and the words you write about a product that was delivered to you. We read each review before the shop shows it. The shop then shows your stars, your words, your first name with the first letter of your last name (for example “Ravi K.”) and the date. It never shows your email address, mobile number or address. You can change your review at any time, or ask us to delete it.
• Saved on your device: a login token (so you stay logged in), the items in your cart (so they are not lost) and a few small settings (such as a notice you closed). These are kept in your browser or app storage on your own device.
• Notifications (only if you turn them on): an address and keys for your phone or browser, which your browser gives us so we can send you messages. If you are logged in, we link them to your account so that order updates reach you. They do not contain your name, mobile number or address.
• Technical data: our servers and hosting provider may keep basic logs (such as IP address and time of requests) for security. We do not use advertising trackers.

When you pay online, you enter your card, UPI or netbanking details on the secure payment page of Razorpay. We do not collect or store them. We receive only the result of the payment: its reference number, status and amount. If we need to refund a cash on delivery order, we will ask you for your UPI ID or bank details only to send that refund.

How we use your information

• to create and manage your account;
• to process, ship and track your orders;
• to contact you about your order, delivery or a complaint;
• to send you the notifications you chose to turn on: order updates, a reminder to order again, and offers from Lumex;
• to answer your questions and bulk quote requests;
• to show the reviews that customers write about our products;
• to prevent fraud and misuse of our service; and
• to meet legal, tax and accounting requirements.

Who we share it with

We share only what is needed to run the service:

• Delivery partners: your name, mobile number, delivery address and order details go to our shipping platform (Shiprocket) and to the courier company that delivers your parcel.
• Payment provider: when you pay online, Razorpay (Razorpay Software Private Limited) receives the payment details you enter, your name, email address, mobile number and the order amount, and handles them under its own privacy policy.
• Technology providers: cloud hosting and database services that store our data on our behalf (currently Render and MongoDB Atlas).
• Order alerts: a short message (order number, items, total, and your city, state and PIN code) is sent to the shop owner through Telegram so we can process your order quickly. It does not include your name, phone number or street address.
• SMS provider: if you choose to get a password code by SMS, your mobile number goes to our SMS provider (VerifyNow, by Message Central) only to send you that one code and to check it. Nothing else about you is sent to them.
• Notification services: if you turn on notifications, our messages travel through the push service of your browser (Google for Chrome and Android, Mozilla for Firefox, Apple for iPhone). The text of each message is scrambled so only your phone can read it. These services can see that a message is going to your phone, but we do not give them your name, mobile number or address.
• Authorities: when the law requires us to.

We do not sell your personal information, and we do not use it for third-party advertising.

How we protect it

Our website and app use encrypted connections (HTTPS), passwords are hashed, and access to order records is limited to the shop owner through a password-protected manager page. No online system is completely secure, but we take reasonable care of your information.

How long we keep it

We keep your account and order records while your account is active, and for as long as needed for accounting, tax and legal reasons. After that we delete or anonymise them.

Your choices

• Ask us to correct or update your details.
• Ask us for a copy of the information we hold about you.
• Ask us to delete your account (see below).
• Turn off notifications at any time: press Turn off in My account, or block them in your browser settings.

Delete your account and data

To delete your account, email sourabhbhati2905@gmail.com from your registered email address with the subject “Delete my account”. If you can no longer use that email address, write to us from any email address and tell us the mobile number you used when you made your account. We will call you back on it to confirm it is you. We will delete your account and personal details within 15 days. We may keep basic order records for as long as the law requires for tax and accounting.

Children

Our store is meant for adults (18 years or older). We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows the latest version.

Contact us