Privacy Policy

23BMI LSPL ("LVLX", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit www.lvlx.in, purchase products, or enrol in wellness programs.

This policy is framed with reference to the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and aligns with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules made thereunder as they come into force.

Identity & Contact Data

• Name
• Email address
• Phone number
• Delivery and billing address
• Date of birth for age verification

Transaction Data

We may collect order history, products purchased, program enrolments, and payment status.

Card, UPI, and bank details are processed directly by our RBI-authorised payment gateway partners. LVLX does not store full card or banking credentials on its own servers.

Health & Wellness Data

Where you voluntarily provide it for a wellness program or product recommendation, we may collect information such as health goals, dietary preferences, pre-existing conditions, and physical measurements. This qualifies as sensitive personal data under Indian law and receives enhanced protection as described in Section 2.5.

Technical & Usage Data

• IP address
• Device and browser type
• Cookies
• Pages visited
• Similar analytics data

Communications

We may collect information you provide through customer support, feedback forms, or reviews.

We may use your personal data to:

1. Process and fulfil orders and program enrolments;
2. Verify identity and prevent fraud, including for COD orders;
3. Provide customer support and respond to grievances;
4. Personalise product and program recommendations;
5. Send transactional communications such as order updates and shipping notifications and, with your consent, marketing communications. You may opt out of marketing communications at any time;
6. Comply with legal, tax, and regulatory obligations; and
7. Improve the Website and our Products/Services.

We share personal data only as necessary with the following categories of recipients:

• Logistics and courier partners to deliver your order;
• Payment gateway and processing partners;
• SMS, email, and WhatsApp service providers for order and marketing communications, subject to consent;
• IT, hosting, and analytics providers, under confidentiality obligations;
• Wellness program coaches and consultants strictly on a need-to-know basis; and
• Government, regulatory, and law-enforcement authorities where required by law or a valid legal process.

We do not sell your personal data to third parties.

The Website uses cookies and similar technologies to remember preferences, keep you logged in, and understand usage patterns for analytics and marketing.

You can control cookies through your browser settings. Disabling cookies may affect some Website functionality.

Health-related information you share for personalised recommendations or wellness programs is collected only with your explicit consent.

Such information is used solely for the purpose disclosed to you at the time of collection and is not shared with third parties for marketing purposes.

You may withdraw consent for further use of this data at any time by contacting our Grievance Officer, subject to data we are legally required to retain, such as order or medical-safety records.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, tax, and accounting obligations, including applicable GST and Companies Act record-keeping requirements, or to resolve disputes. After this period, data is securely deleted or anonymised.

We implement reasonable security practices and procedures, including encryption in transit, access controls, and secure hosting, in line with the IT Act's SPDI Rules.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Subject to applicable law, including the DPDP Act once fully in force, you have the right to:

• Access the personal data we hold about you;
• Request correction or updating of inaccurate data;
• Request erasure of your data, subject to legal retention requirements;
• Withdraw consent for processing;
• Lodge a grievance with our Grievance Officer; and
• Thereafter, where unresolved, lodge a grievance with the Data Protection Board of India or other competent authority.

The Website and our Products/Services are not directed at individuals under 18.

We do not knowingly collect personal data from minors without verifiable parental or guardian consent.

If you believe a minor has provided us data without such consent, please contact us for prompt deletion.

Where personal data is processed or stored outside India, such as through cloud hosting providers, we take reasonable steps to ensure it receives a comparable standard of protection, consistent with applicable Indian law.

LVLX may update this Privacy Policy periodically to reflect changes in law, technology, or our practices. Material changes will be indicated by updating the "Last updated" date. Continued use of the Website after such changes constitutes acceptance.

Please refer to our Contact Us page for Grievance Officer and data-protection contact details.