Privacy Policy

1. Who we are

This website is operated by Lumerix Brands Private Limited ("Lumerix Brands", "we", "us", "our"), a company incorporated under the Companies Act, 2013, which owns and sells the Vadora Cares range of skincare products.

Legal name	Lumerix Brands Private Limited
CIN	U20237UP2026PTC247441
Registered office	Anand Bihar Colony AV/4/5, Bareilly, Uttar Pradesh 243001, India
Contact	support@vadoracares.com · +91 70172 41948

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

2. What personal data we collect

We keep this deliberately small. We do not run user accounts, we do not sell anything directly on this website, and we do not ask for payment information here.

Data	When we collect it
Name	When you fill in the enquiry form on our website.
Phone number	When you fill in the enquiry form, or when you message us on WhatsApp.
Email address	When you fill in the enquiry form, or email us directly.
Enquiry type and message	Whatever you choose to write in the form, including any business details you share.
IP address and timestamp	Recorded automatically with each form submission, to detect and block spam and abuse.
Server log data	Our hosting provider records standard access logs (IP address, browser type, pages requested, time of request).

3. Why we use it

We use the data above only for the purpose you gave it to us:

• To answer your enquiry — replying to questions about our products, orders, partnerships, careers or press.
• To evaluate business proposals — assessing distributor, stockist, retail, salon and private-label enquiries, and following up with you about them.
• To provide customer support — resolving complaints or concerns about a Vadora Cares product, including quality issues traced to a batch number.
• To keep the website working and secure — spam prevention, abuse detection, and diagnosing technical faults.
• To meet legal obligations — where a law, regulator or court requires us to retain or produce records.

We do not sell, rent or trade your personal data. We do not use your enquiry data to build advertising profiles.

4. Consent and your choices

When you submit the enquiry form, you are giving us your consent to contact you about that enquiry. That consent is specific and limited to the purposes in section 3.

You can withdraw consent at any time by emailing support@vadoracares.com. Withdrawal is as easy as giving consent, and it takes effect for anything going forward. It does not undo processing we lawfully carried out before you withdrew, and it does not affect records we are separately required by law to keep.

If we ever want to use your data for something outside the purposes in section 3 — for example a marketing newsletter — we will ask you separately, and you are free to say no without it affecting your enquiry.

5. Who we share it with

We share personal data only where it is necessary, and only with:

• Our hosting and email providers, who process data on our instructions in order to run this website and deliver our mail.
• Our manufacturing and logistics partners, but only where it is needed to investigate a specific product complaint or fulfil a specific order you have asked about.
• Professional advisers — such as auditors or lawyers — where we are obliged to involve them.
• Government authorities, regulators or courts, where disclosure is required by law or needed to establish or defend a legal claim.

Where a service provider processes data on our behalf, we require them to protect it and to use it only for the purpose we engaged them for. Some of these providers may store data on servers outside India; where that happens, transfers are made in accordance with the DPDP Act and any restrictions notified by the Central Government.

6. How long we keep it

We keep personal data only as long as it serves the purpose it was collected for, and then we delete it.

• Enquiries that do not lead to a business relationship — deleted within 24 months of our last exchange with you.
• Enquiries that lead to a distributor, retail or supplier relationship — retained for the duration of that relationship, and afterwards for as long as company, tax and contract law require.
• Product complaint records — retained for the shelf life of the batch concerned plus the period required under applicable cosmetic regulations.
• Server and spam logs — typically retained for a short period by our hosting provider and overwritten in the normal course.

7. How we protect it

We apply reasonable security safeguards to prevent personal data breaches: the website is served over HTTPS, access to the mailbox that receives enquiries is restricted to authorised personnel and protected by strong authentication, and the enquiry form carries spam and abuse controls.

No system is perfectly secure. If a personal data breach affects your data, we will notify you and the Data Protection Board of India as required under the DPDP Act.

8. Cookies and analytics

This website does not set advertising or tracking cookies, and it does not profile you.

Our web fonts are loaded from a third-party content delivery network (Fontshare). When your browser requests a font file, that provider necessarily receives your IP address and basic request data, in the same way any website resource request works. We do not send them anything else about you.

If we add website analytics in the future, we will update this policy first and describe what is collected before it goes live.

9. Your rights

Under the DPDP Act you have the right to:

• Access — ask us for a summary of the personal data we hold about you and how we are processing it.
• Correction and completion — have inaccurate or misleading data corrected, and incomplete data completed.
• Erasure — ask us to delete your personal data, unless we are required by law to keep it.
• Withdraw consent — as described in section 4.
• Grievance redressal — raise a complaint with us about how we handle your data, as described in section 12.
• Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, email support@vadoracares.com with enough detail for us to find your records. We will respond within a reasonable period, and ordinarily within 30 days. We may need to verify your identity before acting, to make sure we are not disclosing your data to someone else.

10. Children's data

Our website and products are intended for adults. We do not knowingly collect personal data of children under 18 through this website. If we learn that we have collected a child's data without verifiable parental consent, we will delete it. We do not use children's data for tracking, behavioural monitoring or targeted advertising.

11. Changes to this policy

We may update this policy as our business, our website or the law changes. The "last updated" date at the top always reflects the current version. If a change materially affects how we handle data you have already given us, we will take reasonable steps to tell you directly.

12. Grievance redressal

If you have a question or a complaint about how we handle your personal data, contact our Grievance Officer. We take complaints seriously and will acknowledge yours promptly.