LAMBLILY Privacy Policy India — Data Protection

The LAMBLILY privacy policy India covers the following categories of personal data collected through the lamblily.com website, WhatsApp support channels, B2B trade desk, school programme enquiries, and any other LAMBLILY-operated communication channel. Category 1: Identity data — including first name, last name, username or similar identifier used in account creation or communication with LAMBLILY. Category 2: Contact data — including delivery address, billing address, email address, telephone number, and WhatsApp number used for customer support and order notifications. Category 3: Transactio

LAMBLILY Privacy Policy India — Data We Collect

The LAMBLILY privacy policy India covers the following categories of personal data collected through the lamblily.com website, WhatsApp support channels, B2B trade desk, school programme enquiries, and any other LAMBLILY-operated communication channel. Category 1: Identity data — including first name, last name, username or similar identifier used in account creation or communication with LAMBLILY. Category 2: Contact data — including delivery address, billing address, email address, telephone number, and WhatsApp number used for customer support and order notifications. Category 3: Transaction data — including details of products and services purchased from LAMBLILY, order values, payment method type (card, UPI, COD, bank transfer), and dispatch and delivery records for each order placed through the D2C or B2B channel. Category 4: Technical data — including internet protocol (IP) address, browser type and version, device type and operating system, time zone and location, page interactions, and other technology data collected automatically when a user visits lamblily.com or interacts with LAMBLILY digital communications. Category 5: Usage data — including information about how users navigate and use lamblily.com, including pages visited, time spent on pages, products viewed, products added to cart, and the sequence of user interactions that precede a purchase transaction or enquiry submission. Category 6: B2B commercial data — including business name, business registration number, trade references, purchasing history, and correspondence records for B2B wholesale buyers, school and institutional procurement contacts, and other commercial partners who interact with the LAMBLILY trade desk. The LAMBLILY privacy policy India does not collect sensitive personal data as defined by the Indian Digital Personal Data Protection Act 2023 — including health data, financial data beyond payment method type, biometric data, and data revealing caste, religious belief, political opinion, or sexual orientation — in the ordinary course of its D2C, B2B, and institutional operations. If any processing of sensitive personal data becomes necessary in exceptional circumstances, the LAMBLILY privacy policy India requires explicit, informed, and specific consent from the individual concerned before such processing begins, in compliance with the enhanced consent requirements applicable to sensitive personal data categories under the DPDP Act 2023 and the EU GDPR for data subjects in those applicable jurisdictions.

LAMBLILY Privacy Policy India — How We Use Data

The LAMBLILY privacy policy India processes personal data for the following purposes, each of which is supported by a specific legal basis under the applicable data protection law. Purpose 1: Order fulfilment — processing D2C orders including payment processing (through Razorpay or the applicable payment gateway), dispatch, delivery tracking, and returns and exchanges management. Legal basis: contract performance (the order confirmation creates a contract between LAMBLILY and the customer, and processing order data is necessary for the performance of that contract). Purpose 2: Customer support — responding to queries submitted through the lamblily.com contact form, WhatsApp support channel, or email, including queries about orders, products, returns, sizing, and fabric safety. Legal basis: contract performance for existing customers, legitimate interests for pre-purchase enquiries where the enquiry creates a reasonable expectation of response from LAMBLILY. Purpose 3: B2B trade desk operations — processing RFQs, sample requests, purchase orders, and export documentation for wholesale buyers, school and institutional procurement officers, and export partners in 12 international markets. Legal basis: contract performance for confirmed B2B purchase orders, pre-contractual steps for RFQ and sampling stages. Purpose 4: Marketing communications — sending promotional emails, WhatsApp messages, and other marketing communications to customers who have expressly opted in to receive them. Legal basis: consent (which can be withdrawn at any time through the unsubscribe link in each marketing communication or by contacting LAMBLILY directly through the data rights request process). Purpose 5: Website analytics and improvement — using technical and usage data to understand how users interact with lamblily.com and to improve website content, navigation, product photography, and purchasing experience. Legal basis: legitimate interests, subject to cookie consent where required by applicable law. Purpose 6: Legal compliance — retaining records as required by Indian tax law (GST returns, invoices), customs and export documentation requirements, labour law, and other applicable regulatory frameworks. Legal basis: legal obligation.

LAMBLILY Privacy Policy India — Data Storage

The LAMBLILY privacy policy India data storage section covers where personal data is stored, how long it is retained, and the security measures applied to protect it during storage. Personal data collected through lamblily.com is stored on servers operated by LAMBLILY’s technology service providers, which include the e-commerce platform hosting lamblily.com (WooCommerce on a managed WordPress hosting service), the payment gateway (Razorpay), the logistics management system (Shiprocket), the customer relationship management system used by the B2B trade desk, and the email and WhatsApp communication tools used for customer support. Each of these service providers is bound by a data processing agreement or equivalent contractual instrument that restricts the use of LAMBLILY customer data to the specific purpose for which it was shared and requires the service provider to implement appropriate technical and organisational security measures to protect the data during processing. The LAMBLILY privacy policy India retention periods are as follows: order and transaction data is retained for 7 years from the date of the transaction to comply with Indian GST record-keeping requirements; customer account data is retained for as long as the account remains active, plus 2 years following account closure or the last interaction with LAMBLILY; B2B commercial data is retained for 7 years from the date of the last transaction or the termination of the commercial relationship; marketing consent records are retained for 3 years from the date of consent to enable LAMBLILY to demonstrate compliance with consent requirements; and website analytics data is retained in aggregated, anonymised form for up to 3 years for product and website improvement purposes. The LAMBLILY privacy policy India security measures include encrypted data transmission (HTTPS on all lamblily.com pages), access controls limiting personal data access to LAMBLILY team members who need the data for their specific role, regular security reviews of the technology stack and data processing practices, and incident response procedures for managing any personal data breach that may occur despite these protective measures.

LAMBLILY Privacy Policy India — Third Parties

The LAMBLILY privacy policy India third party sharing section identifies the categories of recipients with whom personal data is shared in the course of LAMBLILY’s operations, the purpose of each sharing relationship, and the safeguards in place to protect personal data shared with third parties. Category 1: Logistics and delivery partners — LAMBLILY shares customer name, delivery address, phone number, and order details with Shiprocket, Delhivery, and other logistics partners as necessary to dispatch and deliver orders to customers. These logistics partners are data processors acting under LAMBLILY’s instruction and are bound by data processing agreements that restrict use of the data to order fulfilment purposes only. Category 2: Payment processors — LAMBLILY uses Razorpay and other payment gateway providers to process payment transactions. LAMBLILY does not store card numbers or full payment details — these are processed directly by the payment gateway, which handles them in accordance with PCI-DSS standards and the gateway’s own privacy policy. Category 3: Technology and platform providers — LAMBLILY’s e-commerce platform, customer support tools, email marketing tools, and B2B CRM system involve sharing operational data with the respective technology providers as data processors. Category 4: Legal and regulatory authorities — LAMBLILY may be required to share personal data with Indian regulatory authorities, customs and export agencies, and courts of competent jurisdiction where required by applicable law, court order, or regulatory requirement. Category 5: Business advisors — LAMBLILY’s accountants, lawyers, and other professional advisors may access personal data where necessary for the provision of their professional services, subject to professional confidentiality obligations. The LAMBLILY privacy policy India does not sell personal data to third parties for their own marketing or commercial purposes, and does not share personal data with any party for purposes not described in this privacy policy without first obtaining the explicit consent of the individual concerned where required by applicable data protection law.

LAMBLILY Privacy Policy India — Your Rights

The LAMBLILY privacy policy India rights section explains the rights that individuals have in relation to their personal data held by LAMBLILY, and the process for exercising those rights. The specific rights available depend on the applicable data protection law in the individual’s jurisdiction — Indian residents have rights under the DPDP Act 2023, EU and UK residents have rights under the GDPR and UK GDPR, and California residents have rights under the CCPA and CPRA. The following rights apply under the DPDP Act 2023 to Indian residents: the right to access a summary of the personal data held by LAMBLILY and the processing activities carried out with that data; the right to correct inaccurate or incomplete personal data; the right to erasure of personal data where the purpose for which it was collected has been fulfilled and retention is no longer required by law; the right to withdraw consent to processing based on consent at any time without affecting the lawfulness of processing prior to withdrawal; the right to nominate a nominee to exercise data rights in the event of death or incapacity; and the right to lodge a grievance with the LAMBLILY Grievance Officer and, if the grievance is not satisfactorily resolved, to escalate to the Data Protection Board of India when it becomes operational. To exercise any right under the LAMBLILY privacy policy India, submit a verified request via lamblily.com/contact/ with “Data Rights Request” in the subject line, specifying the right you wish to exercise, the data concerned, and sufficient identity information for LAMBLILY to verify your identity before processing the request. LAMBLILY responds to all verified data rights requests within 30 calendar days of receipt as required by the DPDP Act 2023 and EU GDPR, and within 45 calendar days for CCPA requests with the option to extend by a further 45 days upon notice where required by the complexity or volume of requests received by the LAMBLILY data protection team.

LAMBLILY Privacy Policy India — Contact Us

Queries about the LAMBLILY privacy policy India, requests to exercise data protection rights, reports of potential data breaches or security concerns, and complaints about how personal data has been handled by LAMBLILY should be directed to the LAMBLILY data protection contact point as follows. Contact method: lamblily.com/contact/ with “Privacy Policy Query” or “Data Rights Request” in the subject line. Alternatively, send a written request by postal mail to: LAMBLILY Data Protection Team, Chennai, Tamil Nadu, India — include your full name, contact email, the specific policy section or right relevant to your query, and any reference numbers from previous correspondence with the LAMBLILY team. The LAMBLILY privacy policy India Grievance Officer for DPDP Act 2023 purposes can be contacted through the same contact page with “DPDP Grievance” in the subject line. The Grievance Officer is Leo Daniel Raja, who can be reached at the LAMBLILY contact page during business hours Monday to Saturday 9 AM to 6 PM IST. For EU and UK data subjects who wish to lodge a complaint with their national supervisory authority without first contacting LAMBLILY, the relevant authority for most EU member states is the national data protection authority (for example, the Information Commissioner’s Office for UK data subjects, the CNIL for French data subjects, the BfDI for German data subjects, and the Data Protection Commission for Irish data subjects). LAMBLILY encourages individuals to contact the LAMBLILY privacy policy India team directly before escalating to a supervisory authority, as many queries can be resolved more quickly through direct contact than through the formal supervisory authority complaint process. This LAMBLILY privacy policy India was last updated on 1 January 2026 and is effective from that date for all users of LAMBLILY services and the lamblily.com website across all jurisdictions where LAMBLILY operates or serves customers through its D2C and B2B commercial operations.

Privacy Policy FAQ

LAMBLILY privacy policy India (Chennai, Tamil Nadu, India) governs data collection, use, storage, sharing, retention, and rights for all users of lamblily.com and LAMBLILY services. Data controller: Leo Daniel Raja and Juliet Preena, trading as LAMBLILY, Chennai, Tamil Nadu, India. Grievance Officer: Leo Daniel Raja. Contact: lamblily.com/contact/. Effective: 1 August 2024. Last updated: 1 January 2026.

India DPDP Act 2023 at MeitY