Privacy Policy

1. Information we collect

We only collect what we need to run your account and deliver your orders:

• Account details: your first and last name, email address, phone number (if you provide it) and a securely hashed password. We never store your password in readable form.
• Delivery addresses: the name, phone number, address, city, state and PIN code you save for delivery.
• Orders and shopping activity: the products you order, order amounts, order status, payment method (online or cash on delivery), and the items in your cart and wishlist.
• Payment references: when you pay online, we store only the reference IDs that Razorpay returns (order ID, payment ID and a verification signature) so we can match your payment to your order.
• Technical information: when you use the site, our servers automatically log your IP address, browser type and the pages or services requested, for security and troubleshooting.

2. Sign in with Google

If you choose "Sign in with Google", Google shares your Google account email address, your name and basic profile details with us, after you give permission. We use this only to create or sign you in to your LagoonCart customer account. We store your email address and first and last name. We do not receive or store your Google password, and we do not access your Gmail, contacts, Drive or any other Google data.

You can remove LagoonCart's access at any time from your Google Account's security settings. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

3. Payments

Online payments are processed by Razorpay, a licensed payment gateway. Your card number, UPI ID, net banking login or wallet details are entered on Razorpay's secure checkout and go straight to Razorpay. LagoonCart does not see or store your card or UPI details. Razorpay handles this information under its own privacy policy.

4. How we use your information

• To create and manage your account and keep you signed in.
• To process, deliver and support your orders, including cancellations, returns and refunds.
• To contact you about your orders or answer your questions.
• To prevent fraud, keep the site secure and fix problems.
• To meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

5. Who we share it with

We share personal data only when it is needed to serve you:

• Razorpay, to process online payments and refunds.
• Google, only if you choose Google sign-in, to verify your identity.
• Sellers and delivery partners who fulfil and deliver your order. They receive the name, phone number and address needed for delivery.
• Our hosting and infrastructure providers, who store data on our behalf.
• Government or law enforcement authorities, when required by law.

6. Cookies and local storage

When you sign in, your login tokens are stored in your browser's local storage so you stay signed in between visits. Signing out removes them from your browser and cancels your saved session on our servers. We do not use advertising or tracking cookies. Google and Razorpay may set their own cookies when you use their sign-in or checkout.

7. How long we keep your data

• Account and address details: for as long as your account is active. If you ask us to delete your account, we delete or anonymise these details, except where we must keep them by law.
• Order, invoice and payment records: for as long as Indian tax, accounting and consumer laws require, even after your account is deleted.
• Server logs: for a limited period, for security and troubleshooting.

8. How we protect your data

We use HTTPS encryption for all traffic, hash passwords, restrict access to personal data to people who need it, and verify every online payment with Razorpay before we confirm an order. No online service can be completely secure, but we work to protect your information and will act promptly if a problem occurs.

9. Your rights

In line with India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can:

• Access: ask for a summary of the personal data we hold about you.
• Correct: update your details, or ask us to correct inaccurate or incomplete data.
• Delete: ask us to delete your account and personal data, subject to the records we must keep by law.
• Withdraw consent: stop using the service and ask us to stop processing your data. This may mean we can no longer provide your account.
• Raise a grievance: contact our Grievance Officer if you are unhappy with how we handle your data.

To use any of these rights, email us at support@lagooncart.com from the email address on your account. We may need to verify your identity before acting on a request.

10. Children

LagoonCart is meant for people aged 18 or over. If you are under 18, you may use the site only with the involvement of a parent or guardian. We do not knowingly collect data from children without such consent.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. For significant changes, we will notify you on the site or by email.

12. Contact and grievances

For privacy questions or requests, contact us:

Grievance Officer details are listed on our Contact Us page.