Privacy Policy
Effective Date: August 12, 2026
Your privacy is important to us. This Privacy Policy explains how Leucita collects, uses, and protects your personal information in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
Introduction
Leucita ("we", "us", "our") is an Indian hair care brand operating through our website www.leucita.com. We are committed to protecting your personal data and your right to privacy.
This Privacy Policy applies to all visitors and customers of our website and describes how we handle your personal information in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.
Information We Collect
We collect information that you provide directly to us and information collected automatically when you use our website.
Information You Provide
- •Name and contact details (email, phone number)
- •Shipping and billing addresses
- •Order details and purchase history
- •Account credentials (email and password)
- •Product reviews and feedback
- •Newsletter subscription details
Information Collected Automatically
- •Device and browser information
- •IP address and approximate location
- •Pages visited and time spent on our site
- •Referring website and search terms
- •Cookies and similar tracking technologies
How We Use Your Information
We use your personal information for the following purposes:
- •Processing and fulfilling your orders
- •Communicating about your orders, shipping, and deliveries
- •Providing customer support and responding to inquiries
- •Sending promotional emails and newsletters (only if you have opted in)
- •Improving our website, products, and services
- •Analyzing website usage and customer behavior
- •Preventing fraud and unauthorized transactions
- •Complying with legal and regulatory obligations
Third-Party Sharing
We share your information with trusted third-party service providers who help us operate our business. These providers include:
- •Payment gateway providers — to process your payments securely
- •Shipping and logistics partners — to deliver your orders
- •Email and communication service providers — to send transactional and marketing emails
- •Analytics providers — to help us understand website usage
- •Cloud hosting providers — to store and process your data
We do not sell your personal information to any third party. All third-party service providers are bound by confidentiality obligations and are only given access to the information necessary to perform their functions.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- •SSL/TLS encryption for data transmission
- •Secure data storage with access controls
- •Regular security assessments and updates
- •Restricted internal access on a need-to-know basis
- •Staff training on data protection practices
Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach, we will notify you and the relevant authorities as required by law.
Your Rights & Choices
Under the DPDP Act, 2023, you have the following rights regarding your personal data:
- •Right to access — request a copy of your personal data
- •Right to correction — request correction of inaccurate data
- •Right to erasure — request deletion of your personal data (see our Data Deletion page)
- •Right to grievance redressal — file a complaint with our Data Protection Officer
- •Right to withdraw consent — withdraw consent for processing at any time
- •Right to nominate — nominate another individual to exercise your rights in case of death or incapacity
To exercise any of these rights, please contact us at support@leucita.com.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
- •Active account data — retained while your account is active
- •Order and transaction records — retained for up to 7 years for tax and legal compliance
- •Marketing data — retained until you unsubscribe or request deletion
- •Support communications — retained for up to 2 years after resolution
After the retention period, your data is securely deleted or anonymized.
Children's Privacy
Our website and products are intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.
International Data Transfers
Your personal information is primarily stored and processed in India. However, some of our third-party service providers may process data outside of India. We ensure that such transfers comply with the DPDP Act, 2023, and that appropriate safeguards are in place to protect your data.
Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this page periodically. Significant changes will be communicated through a notice on our website or via email.
Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us:
Business Hours
Monday – Saturday, 10:00 AM – 6:00 PM
Data Deletion
Request Data Deletion