Privacy Policy

Data controller and grievance contact

The data controller for personal data collected through this website is Liv&Now Clothing, operated from Tiruppur, Tamil Nadu, India. For privacy questions, data access requests, correction requests, or erasure requests, contact us at hello@livnow.in with the subject line 'Privacy Request'. We aim to respond within 30 days.

This policy is designed with reference to the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Information Technology Act, 2000.

What data we collect

• Account data: name, email address, phone number, password (hashed), authentication metadata, and profile preferences.
• Order data: billing and shipping address, purchased items, order value, payment status, Razorpay order and payment identifiers, and custom-order communications.
• Custom-order data: uploaded artwork and design files, production notes, measurements, size breakdown, approval status, and any communications relating to print or manufacturing feasibility.
• Contact data: name, email, phone number, and message content submitted via the contact form.
• Technical data: IP address, browser type and version, session logs, search and filter usage, product analytics events, and device-level preference settings.

Why we process your data

• To create and manage your account and authenticate your identity.
• To process, fulfil, and track orders including payment verification and shipping.
• To handle custom order requests, communicate design approvals, and manage production workflows.
• To respond to contact form enquiries and provide customer support.
• To send transactional emails (order confirmation, shipping updates, account notices).
• To detect and prevent fraud, chargebacks, and misuse of the platform.
• To improve the website, diagnose errors, and analyse how visitors use the platform.
• To comply with applicable tax, accounting, and legal obligations.

Purpose limitation and data retention

We retain personal data only as long as reasonably necessary for the purpose it was collected, including order fulfilment, customer support history, tax and audit recordkeeping (typically 7 years under Indian accounting rules), fraud investigation, and legal defence.

Contact form messages are retained for up to 90 days after the enquiry is resolved, after which they are deleted or anonymised. You may request earlier deletion by emailing hello@livnow.in.

Disclosures and processors

• Payment processors: Razorpay Software Private Limited processes card and UPI payments. Razorpay's privacy policy governs data it independently controls.
• Logistics partners: courier and delivery companies receive your name, phone, and shipping address to fulfil deliveries.
• Cloud infrastructure: Supabase (database, authentication, and file storage) and Vercel (hosting and edge functions) process data on our behalf under contractual data processing arrangements.
• We do not sell personal data to third parties and do not share it for advertising purposes.
• We may disclose data where required by law, valid court order, lawful government request, fraud investigation, or chargeback defence.

Your rights under DPDPA 2023

You have the right to: (a) access a summary of personal data we hold about you; (b) correct inaccurate or incomplete data; (c) erase data where processing is no longer necessary, subject to legal retention obligations and pending disputes; (d) withdraw consent for future processing where consent is the lawful basis.

To exercise any of these rights, email hello@livnow.in with subject 'Privacy Request' and include your registered email address. We will verify your identity before acting on the request and respond within 30 days.

Consent and withdrawal

Where we rely on your consent as the lawful basis for processing (for example, for marketing communications or non-essential analytics), you may withdraw that consent at any time by emailing hello@livnow.in. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Consent is not required to process data that is strictly necessary to perform a contract with you (such as order fulfilment) or to comply with a legal obligation.

Security

We implement technical and organisational measures appropriate to the risk, including encrypted data transmission (HTTPS/TLS), database-level row-level security, hashed passwords (managed by Supabase Auth), and access controls limiting who can view order and customer data.

No system is completely secure. If you suspect your account has been compromised, change your password immediately and email hello@livnow.in.

Cross-border privacy pathway

Where Liv&Now offers goods or services to individuals outside India or tracks their behaviour, additional foreign privacy obligations may apply, including European GDPR, UK GDPR, or other regional frameworks. This section addresses those higher-standard obligations.

Our systems, storage, and fulfilment operations are primarily located in India or use globally distributed service providers (Supabase, Vercel) with infrastructure in multiple regions.

International data principles

• Personal data is processed lawfully, fairly, and transparently with a specific, documented purpose.
• Only data reasonably necessary for the stated purpose is collected (data minimisation).
• Data is kept accurate, secured appropriately, and not retained longer than necessary.
• Technical and organisational measures are in place to protect data against unauthorised access, loss, or destruction.

International rights and lawful bases

Depending on your location and applicable local law, you may have rights to access, rectify, erase, restrict, object to processing, or receive a portable copy of your personal data. We will verify your identity before acting on such requests. Email hello@livnow.in with subject 'Privacy Request'.

For customers in the EEA or UK, our lawful bases are: (a) contract performance for order fulfilment, account management, and support; (b) legitimate interests for fraud prevention, analytics, and platform security; (c) consent for marketing communications; (d) legal obligation for tax and accounting retention.

International data transfers

Because Liv&Now operates from India and uses global infrastructure providers, your data may be stored or processed in jurisdictions outside your own. Where international transfer restrictions apply under your local law, we rely on standard contractual clauses, data processing agreements with our processors, or applicable adequacy determinations.

If you have questions about specific transfer mechanisms, email hello@livnow.in.

Cookies, analytics, and behavioural signals

The site uses cookies and similar technologies for cart persistence, login continuity, session analytics, and language preferences. Where your jurisdiction requires explicit consent for non-essential cookies (for example, EEA and UK), that standard applies to you.

If Liv&Now expands to retargeting or ad-tech, a dedicated consent management layer will be implemented. Contact hello@livnow.in if you wish to object to analytical processing of your visit data.