Privacy Policy

Welcome to Vanaya Living's Privacy Policy. Lumeya Studios Private Limited and its affiliates (collectively, "Lumeya Studios", "we", "us", or "our") operate the Vanaya Living platform — available at vanayaliving.com and the Vanaya mobile application (collectively, the "Platform").

This Privacy Policy ("Policy") outlines our practices regarding the collection, storage, usage, processing, and disclosure of personal data that you share with us when you access, use, or interact with our Platform or avail any products or services offered through it.

This Policy should be read in conjunction with our Terms & Conditions. Capitalised terms not defined here carry the meanings given in our Terms & Conditions.

We collect the following categories of personal data:

Contact Data

• Your name, email address, and mobile number
• Mailing or delivery address and location data

Identity & Profile Data

• Username or account identifiers
• Profile photograph and preferences
• Order and purchase history

Technical Data

• IP address, browser type, device ID, and operating system
• Page views, clicks, access times, and date/time stamps
• Location data (when permitted by your device settings)

Transaction Data

• Details of plants or services purchased
• Limited payment information (processed securely via third-party processors)
• UPI IDs and payment references

Usage Data

• How you navigate and interact with the Platform
• Features you use, plants you view, and services you explore
• Time spent on the Platform and session details

Marketing & Communication Data

• Your preferences for receiving marketing communications
• Feedback, reviews, and survey responses you submit
• Chat records and support interactions

We also collect aggregated, anonymised data for analytics purposes. This is not linked to your personal identity and is used to improve our platform and services.

We collect personal data through the following methods:

Direct Interactions

You provide data when you:

• Register an account or join our waitlist
• Purchase plants or book gardening services
• Use our AI Plant Doctor feature
• Submit feedback, reviews, or contact us
• Participate in surveys, contests, or campaigns

Automated Technologies

When you visit our Platform, we automatically collect technical data via cookies, web beacons, pixel tags, and analytics tools. This helps us understand how users engage with the Platform.

Third-Party Sources

We may receive data from:

• Analytics providers (such as Google Analytics)
• Advertising networks and social media platforms
• Payment processors and banking partners
• Our affiliate and partner entities

We use your personal data only where legally permitted, including:

• To verify your identity and create/manage your account
• To process and fulfil plant orders and gardening service bookings
• To personalise your experience on the Platform
• To operate and improve our AI Plant Doctor feature
• To send transactional notifications and order updates
• To respond to your support queries and feedback
• To process payments and track transactions securely
• To send marketing communications (where you have consented)
• To comply with legal and regulatory obligations
• To detect and prevent fraud or misuse of the Platform
• To conduct internal analytics and improve our services
• To enforce our Terms & Conditions

We do not sell your personal data. We may share it with:

Service Partners & Vendors

• Delivery and logistics partners for plant deliveries
• Horticulture experts and gardening service professionals
• Payment gateway and banking service providers
• Cloud infrastructure and IT service providers

Marketing & Analytics Platforms

• Analytics providers to understand platform usage patterns
• Advertising platforms (only aggregated or pseudonymised data)

Legal & Regulatory Disclosure

• Government authorities or courts when required by law
• Law enforcement agencies for fraud prevention
• Regulatory bodies as mandated under applicable Indian law

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant third party, subject to the same privacy protections.

We use cookies and similar tracking technologies to enhance your experience on our Platform. These include:

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. You can also opt out of analytics tracking via your account settings.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Specifically:

• Account data is retained while your account is active
• Transaction records are kept for a minimum of 7 years as required under Indian tax law
• Marketing preferences are retained until you opt out
• Support interactions are retained for 3 years

Upon account deletion, we will anonymise or delete your personal data within 30 days, except where retention is required by law.

Under applicable Indian data protection laws and the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Withdraw Consent: Withdraw marketing consent at any time
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer
• Right to Nominate: Nominate another individual to exercise your rights in case of incapacity

To exercise any of these rights, please contact our Grievance Officer at vanayaliving@gmail.com. We will respond within 30 days of receiving your request.

We implement industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data transmitted to and from our Platform
• Secure, access-controlled cloud infrastructure
• Regular security audits and vulnerability assessments
• Role-based access controls for internal data access
• Two-factor authentication for account security

Our Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data without parental consent, please contact us immediately at vanayaliving@gmail.com and we will delete such data promptly.

Our Platform may contain links to third-party websites or services (such as payment gateways, social media platforms, or partner sites). This Policy does not apply to those third-party services. We encourage you to review their privacy policies before providing any personal data.

Lumeya Studios is not responsible for the privacy practices or content of any third-party services linked from our Platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Send a notification via email or in-app alert
• Where required by law, seek your renewed consent

Your continued use of the Platform after any changes constitutes your acceptance of the updated Policy.

In accordance with the Information Technology Act, 2000 and applicable rules, we have appointed a Grievance Officer to address your data-related concerns:

For general queries about the Platform or our Services, please write to us at vanayaliving@gmail.com.