Privacy Policy

We collect only what we need to run the store:

• Account details. When you sign in, we receive your name, email address and profile picture from your Google account, and the mobile number you provide. We never receive or store your Google password.
• Order and delivery details. Your full name, mobile number and shipping address (including city, state and PIN code), along with the items, sizes, quantities and amounts in each order.
• Payment information. Payments are handled entirely by our payment gateway. We receive a confirmation and a transaction reference — we do not collect or store your card number, CVV, UPI PIN or net-banking credentials.
• Communications. Messages, queries and complaints you send us by email, phone or WhatsApp, and our replies.
• Technical and usage data. Your IP address, device and browser type, pages viewed, products browsed, referring website and approximate location derived from your IP address.

We do not knowingly collect sensitive personal data such as biometric information, health records or financial account statements, and you should not send such information to us.

• To create and manage your account and keep you signed in.
• To process, pack, ship and deliver your orders, and to send order confirmations and delivery updates.
• To process payments and issue refunds or replacements where applicable.
• To answer your questions and resolve complaints or return requests.
• To improve our products, sizing, website performance and the way our catalogue is presented.
• To send you offers, new-arrival announcements and other marketing messages, where you have consented to receive them.
• To detect and prevent fraud, misuse of the website, and payment abuse.
• To meet legal, tax and regulatory obligations, and to respond to lawful requests from authorities.

We process your personal data with your consent, which you give when you create an account, place an order or opt in to marketing. We also process data where it is necessary to perform the contract between us (delivering an order you placed) or to comply with a legal obligation. You may withdraw consent at any time as described in section 8; withdrawal does not affect processing already carried out, and we may still need to retain records for orders already fulfilled.

The website uses cookies and similar technologies stored on your device. They fall into these groups:

• Essential cookies keep you signed in, remember the items in your cart and secure the checkout. The website cannot function without them.
• Preference storage remembers choices such as your saved address so you do not have to type them again.
• Analytics cookies help us understand which pages and products are visited, so we can fix what is not working. This data is looked at in aggregate.
• Advertising cookies and pixels may be used to show you Lilzee products on other websites and social platforms, and to measure whether those ads worked.

You can block or delete cookies through your browser settings, and most browsers let you refuse third-party cookies specifically. Blocking essential cookies will break sign-in and checkout.

We do not sell your personal information. We share it only with the following, and only to the extent needed:

• Payment gateway. Razorpay Software Private Limited processes your payment and receives the details you enter on its payment screen, under its own privacy policy.
• Hosting and database provider. Our website, accounts and order records are hosted on third-party cloud infrastructure (including Appwrite) on our behalf.
• Courier and logistics partners. We share your name, address and mobile number so your parcel can be delivered and so the courier can contact you.
• Communication providers. Email, SMS and WhatsApp service providers who deliver order updates and, where you have opted in, promotional messages.
• Analytics and advertising providers. Providers who measure website usage and run our advertising campaigns.
• Legal and professional advisors, and authorities. Where disclosure is required by law, court order, or to protect our rights, property or safety, or those of our customers.
• A successor in a business transfer. If the business is sold or transferred, customer records may pass to the acquirer, who would remain bound by this policy.

These providers are permitted to use your data only for the purpose we engaged them for, and are required to keep it confidential.

Transactional messages — order confirmations, payment receipts, shipping and delivery updates — are part of the service and are sent to every customer who places an order.

Promotional messages about new arrivals, sales and offers are sent over email, SMS or WhatsApp only where you have given consent, for example while creating an account or placing an order. You can stop them at any time by replying STOP to a WhatsApp or SMS message, using the unsubscribe link in an email, or writing to us at hello@lilzee.in. We will act on the request within a reasonable period, and you will continue to receive transactional messages for any pending order.

The website is served over HTTPS, so information travels between your browser and us in encrypted form. Access to order and customer records is restricted to authorised persons through an authentication-protected admin panel, and payment credentials never reach our systems in the first place.

That said, no method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security, and you are responsible for keeping the credentials of the Google account you sign in with confidential. If you believe your account has been compromised, contact us immediately at hello@lilzee.in.

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you may:

• Ask for a summary of the personal data we hold about you and how it is being processed.
• Ask us to correct or update data that is inaccurate, incomplete or out of date.
• Ask us to erase your personal data where we no longer need it for the purpose it was collected and no law requires us to keep it.
• Withdraw consent you previously gave, including consent to marketing messages.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance with us, and escalate it to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these, write to hello@lilzee.in from the email address registered with your account. We may ask you to verify your identity before acting, and we will respond within the timelines required by law. Some data must be retained even after a deletion request — for example, invoices and transaction records we are required to keep under tax law.

Account details are kept for as long as your account is active. Order, invoice and payment records are kept for the period required under applicable tax and accounting law. Communications are kept as long as needed to resolve the matter and for a reasonable period afterwards. Data no longer needed is deleted or anonymised.

Lilzee sells clothing for children, but the website is intended for use by adults. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. Purchases must be made by a parent, guardian or other adult, who is responsible for the information they provide about the child the clothing is for. If you believe a child has provided us personal data, write to hello@lilzee.in and we will delete it.

The website may link to other sites, such as our social media pages or a payment provider’s page. We are not responsible for the content or privacy practices of those sites. Read their privacy policies before sharing any information with them.

We may update this policy from time to time to reflect changes in our practices or in the law. The revised version will be posted on this page with a new “last updated” date, and takes effect when posted. Please check back periodically. Continuing to use the website after a change means you accept the updated policy.

For any question about this policy, or to exercise your rights, reach us at:

Grievance Officer. In accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are: