Legal
Privacy Policy
Last updated: 24 April 2026
Larupa LifeCare ("we", "us", or "our") operates the website larupalifecare.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase. By using our site, you agree to the practices described in this policy.
This policy is governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India).
Information We Collect
Information you provide directly
- Name, email address, and phone number when you create an account or contact us
- Shipping and billing address when placing an order
- Payment information (processed securely by Razorpay — we do not store card details)
- Messages and enquiries submitted via our contact form
- Product reviews and ratings you submit
Information collected automatically
- Browser type, device information, and IP address
- Pages visited, time spent, and clickstream data via analytics
- Cookie and session data (see Cookies section below)
- Referring URL and search terms used to find our website
How We Use Your Information
We use your information to
- Process and fulfil your orders and send shipping updates
- Create and manage your account on our platform
- Respond to your enquiries, complaints, and customer support requests
- Send transactional emails (order confirmation, dispatch notification)
- Send marketing communications if you have opted in (you can opt out at any time)
- Improve our website, products, and services through analytics
- Comply with legal obligations under Indian law
How We Share Your Information
Third-Party Service Providers
- Shiprocket (BigFoot Retail Solutions Pvt. Ltd.) — Our logistics aggregator. We share your name, shipping address, and phone number with them and their courier partners (like Delhivery, Blue Dart) to facilitate delivery.
- Razorpay (Razorpay Software Private Limited) — Our payment gateway. Your payment details are processed directly by Razorpay. We share your order details and contact information to facilitate the transaction.
- Supabase — Our cloud database and authentication provider where your account and order data is securely stored.
- Vercel — Our hosting provider which processes website traffic data.
- Google Analytics / Vercel Analytics — To understand website performance using anonymised data.
- Law enforcement or regulatory authorities — Only when legally required to comply with Indian law or to protect our rights.
Data Security
How we protect your data
- All data is transmitted over HTTPS/TLS encrypted connections
- Passwords are hashed and never stored in plain text
- Database access is restricted to authorised personnel only
- Payment data is handled entirely by Razorpay (PCI-DSS compliant)
- We conduct periodic reviews of our data practices and access controls
Cookies & Tracking
We use the following types of cookies
- Essential cookies — Necessary for the shopping cart, account login, and secure checkout functionality.
- Analytics cookies — Used by Google Analytics and Vercel Analytics to understand user behaviour and improve the site experience.
- Preference cookies — To remember your settings like currency or recently viewed products.
- Marketing cookies — Used to measure the effectiveness of our advertising campaigns (only if you have opted in).
Your Rights
Under Indian data protection law, you have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you
Correction
Ask us to correct inaccurate or incomplete data
Deletion
Request deletion of your personal data (subject to legal obligations)
Portability
Receive your data in a structured, machine-readable format
Withdraw Consent
Opt out of marketing communications at any time
Grievance
Lodge a complaint with our Grievance Officer (details below)
Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Order records | 7 years (statutory requirement) |
| Payment records | 7 years (statutory requirement) |
| Analytics data | 26 months (anonymised) |
| Marketing consent | Until withdrawal of consent |
| Support correspondence | 3 years |
Children's Privacy
Our website and products are intended for users aged 18 years and above. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.
Third-Party Links
Our website may contain links to third-party websites including Amazon India and social media platforms. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after any changes constitutes your acceptance of the updated policy.
Grievance Officer & Contact
For any privacy-related queries, requests to exercise your rights, or complaints, please contact our Grievance Officer:
Organisation: Larupa LifeCare
Email: support@larupalifecare.com
Response time: Within 30 days of receipt