Privacy Policy

1. Controller and Scope

This Privacy Policy explains how personal data is collected and processed for Lumacorp at lumacorp.in. The Platform is a product of Xentric Integrated Solutions Pvt Ltd ("Xentric", "we", "us", "our").

This Policy applies to website visitors, customers, business users, and authorized representatives using the Platform.

2. Legal Framework (India)

Our privacy and security practices are designed to align with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and applicable rules (as notified), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, along with other applicable laws.

3. Personal Data We Collect

• Account details: name, email, mobile number, role, organization details.
• Operational records: data entered or uploaded by authorized users in the Platform.
• Technical data: IP address, browser, device details, app logs, session metadata.
• Location or map-related data, where enabled and legally permitted.
• Support communications and issue-reporting details.

4. Purpose of Processing

We process data for legitimate and lawful business purposes, including:

• Providing platform access, features, and account administration.
• Service delivery, reporting, analytics, and operational monitoring.
• Authentication, fraud prevention, security monitoring, and audit logging.
• Customer support, incident response, and communication.
• Compliance with legal, regulatory, and contractual obligations.

5. Lawful Basis and Consent

Depending on context, we process data based on consent, contractual necessity, compliance with legal obligations, and legitimate uses permitted under applicable law. Where consent is required, it may be withdrawn subject to legal and contractual constraints.

6. Sensitive Data Handling

We avoid collecting sensitive personal data unless operationally required and legally permitted. Where such processing is required, we apply stricter access controls, purpose limitation, and security safeguards.

7. Cookies and Similar Technologies

We use essential cookies and similar technologies for session management, authentication, security, and service performance. Non-essential tracking, if used, is handled in accordance with applicable legal requirements.

8. Data Sharing and Disclosure

We may share data only on a need-to-know basis with:

• Authorized service providers under confidentiality and data protection obligations.
• Group entities, implementation partners, or subcontractors for service delivery.
• Regulators, law enforcement, or courts when legally required.
• Parties involved in lawful business restructuring, merger, or acquisition.

We do not sell personal data.

9. Cross-Border Transfers

If data is processed outside India, we apply contractual and security safeguards consistent with applicable Indian legal requirements and lawful transfer conditions.

10. Data Retention

We retain personal data only for as long as required for lawful business purpose, contractual commitments, security/audit obligations, and statutory compliance. After retention periods, data is deleted, anonymized, or archived as required by law.

11. Security Measures

We implement reasonable security practices, including:

• Access controls and role-based authorization.
• Encryption in transit and applicable encryption/storage controls.
• Session security, audit logs, and anomaly monitoring.
• Periodic hardening and operational safeguards.

12. Your Rights

Subject to applicable law and verification, you may request:

• Access to personal data and processing summary.
• Correction or completion of inaccurate data.
• Deletion of data, where retention is not legally required.
• Withdrawal of consent, where processing relies on consent.
• Grievance redressal through designated contact channels.

13. Children's Data

The Platform is intended for business and operational use, and not directed to children. We do not knowingly collect personal data from children except where permitted and compliant with applicable legal requirements.

14. Grievance and Contact

For privacy requests, grievance redressal, or data-related concerns, contact us at:

15. Policy Updates

We may revise this Privacy Policy periodically to reflect legal, operational, or product changes. Revised versions will be posted on this page with updated date. Continued use after publication indicates acceptance of the revised policy.