Lucr / Privacy
Privacy Policy
This policy explains what personal information Lucr collects when you browse the site, order, or write to us, why we hold it, who helps us process it, and the choices you have. Last updated: 28 October 2026. Effective 28 October 2026.
Who we are
LUCR is a trading name of Rahul Raj Agarwal, sole proprietor, based at Vashi, Kopar Khairane, Navi Mumbai, Maharashtra 400709, India. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors in the EU and UK, the GDPR and UK GDPR, we are the party that decides how your information is used. You can reach us at hello@mylucr.com or on +91 88798 56018. Our Grievance Officer handles complaints.
What we collect
- Order details. Your name, email address, delivery and billing address, phone number and the items you order. Checkout runs on Shopify.
- Made-to-order and bespoke details. Measurements and preferences you share so we can make a piece for you.
- Messages and forms. If you send an enquiry, a trade request or join the mailing list, we keep what you typed, the time it arrived and the page you sent it from.
- Basic visit statistics. Page views and similar anonymous counts, through Vercel Web Analytics, which does not use cookies.
We do not run advertising or tracking cookies, and we do not build an advertising profile of you.
Cookies and browser storage
The site uses your browser's localStorage, on your device only, for functional preferences: your currency and language, recently viewed pieces and your wishlist. It is not used to track you across other sites, and you can clear it in your browser settings at any time. Shopify may set its own cookies that are strictly necessary to run checkout and your customer account.
Why we use your information
- To take, make, ship and support your order, and to keep the tax, customs and accounting records the law requires.
- To reply to your messages and enquiries.
- To send occasional news of new pieces, only if you have asked for it. You can unsubscribe at any time.
- To keep the site secure, prevent fraud and understand, in aggregate, which pages are useful.
Legal grounds. For visitors in India, we process your information on the basis of your consent, or for the limited legitimate uses the DPDP Act allows, such as fulfilling a request you have made. For visitors in the EU and UK, we rely on: performance of a contract (your order); consent (marketing email); legitimate interests (site security, fraud prevention, aggregate analytics); and legal obligation (tax and customs records).
Who processes it for us
We share information only with the services needed to run the shop, each acting on our behalf:
- Shopify, for orders, checkout and customer accounts.
- The payment gateway used at checkout, which takes your payment details directly. We do not see or store your card number.
- Vercel, for hosting this website and cookieless Web Analytics.
- FormSubmit, which carries website forms and forwards them to hello@mylucr.com.
- Spacemail, our email provider.
- Shipping and customs carriers, who need your name, address and phone number to deliver.
We do not sell or rent your information, and we do not share it with anyone for their own marketing.
Where your information goes
Lucr is run from India, so your information is handled in India. Our service providers may also process it in other countries. For visitors in the EU and UK, where information is transferred outside those regions we rely on safeguards recognised under the GDPR and UK GDPR, such as Standard Contractual Clauses. The DPDP Act permits transfers to any country the Government of India has not restricted.
How long we keep it
Order records are kept for as long as tax, accounting and customs rules require, typically several years, and then deleted or anonymised. Messages are kept while we are helping you and for a reasonable time afterwards. Mailing-list details are kept until you unsubscribe or ask us to delete them.
Your rights
Under the DPDP Act 2023 (India) you may: ask for access to the personal data we hold about you; ask us to correct or complete it; ask us to erase it; have a grievance addressed; and nominate another person to exercise these rights on your behalf if you die or cannot do so yourself.
Under the GDPR and UK GDPR (EU and UK visitors) you may also ask us to restrict processing, receive your data in a portable format, withdraw consent at any time, and object to processing based on legitimate interests. You may complain to your local data protection authority (in the UK, the Information Commissioner's Office).
To use any of these rights, write to hello@mylucr.com. We acknowledge requests within 48 hours and aim to resolve them within 30 days. We may need to confirm your identity first. Some records, such as tax invoices, we are legally required to keep.
Children
Lucr is not directed at children, and we do not knowingly collect information from anyone under 18.
Security
We use safeguards appropriate to a business of our size, and we choose providers that do the same. If a breach puts your information at meaningful risk, we will tell the people affected, and any regulator we are required to tell, without undue delay.
Complaints
If you are unhappy with how we have handled your information, please contact our Grievance Officer, Rahul Raj Agarwal, at rahul@mylucr.com.
Changes to this policy
If we change how we use your information in a way that matters, we will update this page and its date.