Our Privacy Approach
At Loft Lines (“we”, “our”, “us”), we respect your privacy and design our systems to collect the minimum data needed to deliver orders, answer questions, and improve the experience on our website. This document explains what data we process, why we do it, how long we keep it, and what choices you have.
Our website is intended for customers in India, but we apply the same standards of care to all visitors. When we update this policy, we change the “Last updated” date at the bottom of this page.
Compliance and Data Protection
At Loft Lines, we are committed to ensuring full compliance with all applicable laws and regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We prioritize the protection of your data and privacy, implementing industry-standard security measures to safeguard your personal information.
Data Collection and Usage
We collect, store, and process personal information strictly in accordance with legal requirements and ethical standards. Our data-handling practices are regularly reviewed to maintain compliance with evolving regulations and industry best practices.
Transparency and Accountability
Transparency is at the core of our operations. We clearly outline how your data is collected, used, and stored. Our policies reflect our ongoing efforts to maintain compliance and accountability.
User Rights and Choices
As part of our commitment to compliance, we respect your rights to access, update, and delete your personal information. You can request data modifications or removals by contacting us at loftlines@gmail.com.
What We Collect
When you place an order or submit the contact form, we may collect your name, email address, phone number, shipping address, and order details (poster size, frame options). If you browse the site, we may collect non-identifying analytics such as pages viewed and approximate device type.
Why We Use Your Data
We use personal data to process purchases, arrange shipping across India, provide support, send order updates, and prevent fraudulent activity. Non-identifying analytics help us test page speed and readability without tracking your exact identity.
Legal Bases
Where GDPR applies, our legal bases include: performance of a contract (fulfilling your order), legitimate interests (improving and securing our site), and consent (for optional communications such as a newsletter, if you subscribe).
Payment Information
Payments are handled by secure payment gateways. We never store your full card details on our servers. We receive only the confirmation needed to verify payment and ship your order.
Cookies & Similar Technologies
We use strictly necessary cookies for basic site functions (cart, session) and limited analytics cookies to understand performance. You can disable non-essential cookies in your browser; the site will still work, though some features may be less convenient.
Third-Party Service Providers
Trusted providers may process your data to deliver services (couriers, payment gateways, email delivery). We require them to protect your information, use it only for the requested task, and comply with applicable laws.
Data Retention
Order and invoice records are retained for the period required by tax and accounting laws. Support messages are kept only as long as needed to resolve your request and maintain service quality.
Security
We apply layered security measures: encrypted transport (HTTPS), access controls, least-privilege permissions, and periodic reviews. While no method is perfectly secure, we work to reduce risk and respond quickly to issues.
International Transfers
If data is processed outside your region, we take steps to ensure an adequate level of protection (for example, contractual safeguards). We store only what is necessary and limit access to authorized personnel.
Your Controls
You may request a copy of your personal data, ask us to correct inaccuracies, object to certain processing, or request deletion where applicable. To exercise these rights, email loftlines@gmail.com with the subject “Privacy Request”.
Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will delete it.
Contact
If you have questions about this policy or our data practices, write to loftlines@gmail.com or our studio address in Chhindwara listed in the footer below.
Last updated: