Privacy Policy

1. Introduction

At LIIAROMA (operated by LII Aromatic Manufacturing LLP), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.liiaroma.in and make purchases from us.

By using our website, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our website.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when you:

Create an account on our website
Place an order for products
Subscribe to our newsletter or marketing communications
Contact us through our support channels
Participate in surveys or promotions

This information may include:

Contact Information: Name, email address, phone number
Shipping & Billing Address: Street address, city, state, PIN code
Account Credentials: Username, password (encrypted)
Order Information: Products purchased, order history, preferences

2.2 Payment Information

Important: LIIAROMA does NOT store any credit card, debit card, UPI credentials, or net banking credentials on our servers.

All online payment transactions are processed securely through:

PhonePe: Our exclusive online payment gateway for UPI, credit/debit cards, net banking, and PhonePe wallet payments

PhonePe is PCI-DSS compliant and regulated by the Reserve Bank of India (RBI). All sensitive payment data is handled exclusively by PhonePe.

What We Receive from PhonePe:

Transaction ID: A unique identifier for each payment (e.g., PHONEPE_TXN_XXXXX)
Order Reference: Your LIIAROMA order number linked to the payment
Payment Status: Success, Failed, Pending, or Refunded
Payment Method Type: UPI, Card, Net Banking, or Wallet (no actual credentials)
Masked Identifiers: Last 4 digits of card or masked UPI ID (for your reference only)
Timestamp: Date and time of transaction

For Cash on Delivery (COD) orders, no online payment data is collected. Payment is handled by our logistics partner at the time of delivery.

2.3 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activity:

Device Information: IP address, browser type, operating system, device identifiers
Usage Data: Pages viewed, time spent on pages, click patterns, referring URLs
Cookies & Similar Technologies: Session data, preferences, analytics data
Location Data: Approximate geographic location based on IP address

3. How We Use Your Information

We use the information we collect for the following purposes:

Order Processing & Fulfillment

Process and ship your orders
Send order confirmations and shipping updates
Handle returns, refunds, and customer support
Verify payment and prevent fraud

Customer Service & Communication

Respond to your inquiries and support requests
Provide personalized customer service
Notify you about account activity or policy changes

Marketing & Personalization

Send promotional emails about new products and offers (with your consent)
Personalize your shopping experience
Recommend products based on your preferences
Conduct surveys and gather feedback

Website Improvement & Analytics

Analyze website usage and performance
Improve website functionality and user experience
Debug technical issues
Conduct A/B testing and optimization

Legal & Security

Comply with legal obligations and regulations
Detect and prevent fraud, spam, and security threats
Enforce our terms and conditions
Protect our rights, property, and safety

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

Types of Cookies We Use:

Essential Cookies: Required for website functionality (shopping cart, authentication)
Performance Cookies: Help us understand how visitors use our website
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Track your browsing to show relevant advertisements

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

5. Third-Party Services & Data Sharing

We work with trusted third-party service providers to operate our business. We may share your information with:

Payment Processors

PhonePe (Exclusive Payment Gateway): Processes all online payments including UPI, credit/debit cards, net banking, and PhonePe wallet transactions

PhonePe has its own privacy policy and security standards compliant with RBI guidelines. We recommend reviewing PhonePe's Privacy Policy.

Data shared with PhonePe: Order amount, order ID, customer name, email, and phone number (required for payment processing and fraud prevention).

Shipping & Logistics

Shiprocket & Partner Couriers: We share shipping address and contact information to deliver your orders

Analytics & Marketing Tools

Google Analytics for website traffic analysis
Email marketing platforms for newsletters (with your consent)
Social media platforms for advertising

Legal Obligations

We may disclose your information if required by law, court order, or government regulation, or to protect our legal rights and safety.

We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your personal information:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
Secure Payment Processing: Payment data is handled by PCI-DSS compliant gateways
Access Controls: Limited employee access to personal data on a need-to-know basis
Regular Security Audits: Ongoing monitoring and vulnerability assessments
Password Protection: Passwords are encrypted and never stored in plain text

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Account Data: Retained while your account is active or as needed for customer service
Order History: Retained for 7 years for tax and accounting purposes
Marketing Data: Retained until you unsubscribe or request deletion
Analytics Data: Anonymized and aggregated data may be retained indefinitely

8. Your Privacy Rights

You have the following rights regarding your personal information:

Access & Portability

Request a copy of the personal information we hold about you

Correction

Update or correct inaccurate or incomplete information

Deletion

Request deletion of your personal data (subject to legal obligations)

Opt-Out of Marketing

Unsubscribe from promotional emails at any time using the unsubscribe link

Withdraw Consent

Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, please contact us at info@liiaroma.com. We will respond to your request within 30 days.

9. Children's Privacy

Our website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

10. Legal Compliance

LIIAROMA complies with applicable Indian data protection laws and payment regulations, including:

Information Technology Act, 2000 and its amendments
Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
Consumer Protection Act, 2019 (E-commerce Rules)
Reserve Bank of India (RBI) Guidelines on digital payments and data storage
Payment Card Industry Data Security Standard (PCI-DSS) — enforced through our payment partner PhonePe

Payment Data Compliance

No Card Data Storage: Per RBI guidelines, LIIAROMA does not store full card numbers, CVV, or card PINs
No UPI PIN Storage: UPI PINs are entered directly in your UPI app and never shared with us
Tokenization: PhonePe uses RBI-compliant tokenization for saved cards
Data Localization: All payment data processed by PhonePe is stored within India as per RBI mandate

11. International Transfers

Your information is primarily stored and processed in India. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

LII Aromatic Manufacturing LLP

Privacy Officer

Plot No. 277, 278, 279

Agro Industrial Block, Karni Industrial Area- II

Bikaner - 334001, Rajasthan, India

Email: info@liiaroma.com

Website: www.liiaroma.in

Your privacy is important to us. We are committed to transparency and protecting your personal information in accordance with applicable laws and industry best practices.