Privacy Policy

At LUMIVEDA, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

We collect information you provide directly to us when you create an account, make a purchase, sign up for our newsletter, or contact us. This includes:

• Name, email address, and contact information
• Billing and shipping addresses
• Payment information (processed securely through our payment providers)
• Order history and product preferences
• Communications you send to us
• Information from surveys or promotional activities you participate in

We also automatically collect certain information when you visit our website, including your IP address, browser type, device information, and browsing behavior through cookies and similar technologies.

If you choose to use the Lunivaaq skin-scan feature, we collect your explicit scan consent, scan session information, optional account or visitor identifier, camera/capture quality signals, and a facial image or signed image reference where real image upload is enabled. The feature is optional and is used for cosmetic skin analysis and skincare routine recommendations.

The scan uses automated processing to estimate visible cosmetic attributes. These may include skin type, skin type confidence, overall confidence, oiliness, dryness, blemish tendency, tone unevenness or pigmentation, redness visibility, pore visibility, texture roughness, and fine-line or wrinkle visibility. We may use these derived metrics to suggest product routines and explain why certain products may fit your visible cosmetic concerns.

We do not use the skin scan to identify you, authenticate you, create a faceprint, or compare your face with other people. Any face or frame checks are used only to assess whether the image is suitable for cosmetic analysis, such as confirming that a single face is visible and the image quality is sufficient.

Raw facial images are not sent to OpenAI. Depending on the current deployment configuration, a private skin-scan model service may process a temporary image reference for analysis. If AI-generated explanation mode is enabled, derived metrics, concern labels, routine steps, and recommended product names may be sent to OpenAI or Azure OpenAI to generate customer-friendly explanatory wording; the raw facial image is not included in that explanation request.

Raw scan images are intended to be temporary. Where technically supported, image references are deleted after analysis or quality validation, and the scan session records when image deletion has been attempted or completed. We may retain derived metrics, recommendations, consent records, session status, and audit records as configured for service integrity, security, support, legal compliance, and deletion-request handling.

The skin-scan feature provides cosmetic skincare guidance only. It is not medical advice and is not intended to diagnose, treat, cure, or prevent any disease or medical condition. For privacy questions, deletion requests, access requests, or correction requests related to scan data, contact privacy@thelunivaaqgroup.com.

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Respond to your inquiries and provide customer support
• Send marketing communications (with your consent)
• Personalize your shopping experience
• Improve our website, products, and services
• Prevent fraud and maintain security
• Comply with legal obligations

We do not sell, trade, or otherwise transfer your personal information to outside parties except as necessary to provide our services. This includes:

• Service providers: Companies that assist with shipping, payment processing, marketing, and customer service
• Business partners: Trusted partners who offer complementary products or services
• Legal requirements: When required by law or to protect our rights

All third parties are required to keep your information confidential and use it only for the purposes for which it was provided.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL encryption for all data transmissions
• Secure payment processing through PCI-compliant providers
• Regular security assessments and updates
• Limited employee access to personal data

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@thelunivaaqgroup.com.

If you are in India or are an Indian data principal, the following applies under the Digital Personal Data Protection Act, 2023.

Consent notice: We process your personal data on the basis of your consent and for lawful purposes under the DPDP Act. We collect only what is necessary for providing our services, processing orders, and communicating with you. You may withdraw your consent at any time.

Withdrawing consent: To withdraw your consent for processing of your personal data, you may do so from your account settings (when logged in) or by contacting our grievance redressal officer at privacy@thelunivaaqgroup.com.

Your rights as a data principal: You have the right to (1) access your personal data, (2) correct inaccurate data, (3) erasure of your data (account deletion), and (4) lodge a grievance with us. These can be exercised via your account or by emailing privacy@thelunivaaqgroup.com. We will acknowledge grievances within the timeframe prescribed under the DPDP Act.

Data fiduciary and data localisation information is available from our compliance endpoint or on request.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@thelunivaaqgroup.com