Haus of Baumer monogram

Privacy Policy

Your privacy matters to us. This policy explains what personal data we collect when you visit our website or buy from us, how we use it, who we share it with, and the rights you have over it — in plain language, not buried in legal jargon.

  • We collect only the personal data we genuinely need to serve you
  • We never sell your data to third parties
  • Withdraw consent, access or delete your data at any time
  • DPDP Act 2023 compliant and aligned with applicable international laws
  • Grievance Officer responds to every privacy concern within 48 hours

1. Who We Are

This Privacy Policy is issued by LuxeBaumer Global Designs Pvt. Ltd. (“Haus of Baumer”, “we”, “us”, or “our”), the operator of www.hausofbaumer.com (the “Site”), with registered office at Bangalore, India.

Under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”):

  • We are the Data Fiduciary — we determine how and why your personal data is processed
  • You are the Data Principal — you have specific legal rights over your data, set out in Section 8 below

For any privacy-related question, contact our Grievance Officer (Section 11) or email privacy@hausofbaumer.com.

2. What Personal Data We Collect

We collect only what we need. Here is a complete list of the personal data we may collect, and how we collect it.

Information you give us directly

IdentityName, gender (optional), date of birth (optional)Account creation, checkout
ContactEmail, phone number, shipping address, billing addressAccount creation, checkout
AccountUsername, password (encrypted), preferencesAccount creation
TransactionOrder history, purchase amount, payment method typeWhen you place an order
CommunicationsEmails, WhatsApp messages, support requestsWhen you contact us
ContentReviews, photos, comments, social media posts tagging usWhen you submit them

Information collected automatically

DeviceIP address, browser type, operating system, device IDWhen you visit the Site
UsagePages viewed, time spent, click patterns, referring URLVia cookies and analytics
CookiesSee Section 9 for full detailsStored on your device

Information from third parties

Payment confirmationPayment gateways (Razorpay, etc.)
Social login dataIf you sign in via Google, Facebook, or Apple
Delivery statusOur courier partners
Audience insights (aggregated)Meta, Google advertising platforms

We don't collect sensitive personal data (financial credentials, health data, biometric data, sexual orientation) unless explicitly required and with your specific consent.

3. Why We Collect Your Data & Legal Basis

We collect personal data for specific, defined purposes — each with a clear legal basis under the DPDP Act:

Processing and fulfilling your ordersIdentity, contact, transactionPerformance of contract
Sending order confirmations and shipping updatesContact, transactionPerformance of contract
Customer support and complaint resolutionIdentity, contact, communicationsPerformance of contract
Account creation and managementIdentity, contact, accountConsent
Marketing communications (email, WhatsApp, SMS)Contact, usageConsent (withdraw anytime)
Personalized product recommendationsUsage, transactionConsent / legitimate interest
Fraud prevention and securityDevice, transactionLegal obligation / legitimate interest
Compliance with tax and accounting lawsIdentity, transactionLegal obligation
Analytics to improve our SiteUsage, deviceConsent / legitimate interest
Advertising and retargeting (Meta, Google)Device, usageConsent

Your right to withdraw consent. Wherever consent is the legal basis, you can withdraw it at any time. Withdrawal doesn't affect lawful processing before the withdrawal, and may affect our ability to provide certain services — for example, you won't receive marketing if you withdraw marketing consent, but you'll still get transactional emails.

4. Payment Data

We do not store your full payment card details or bank account information. Payments are processed by PCI-DSS compliant payment service providers. When you make a payment:

  • Your card or banking details are transmitted directly to the payment gateway through a secure encrypted connection
  • We receive only the transaction status and a tokenized reference
  • We never see, log, or store your full payment credentials

5. How We Share Your Data

We do not sell your personal data. We share it only in the following limited circumstances, and only with the protection of contractual confidentiality.

Service providers (Data Processors)

We rely on trusted partners to operate parts of our business. Each is bound by contractual data protection obligations:

Payment processingPCI-DSS providersRazorpay, PayU
Logistics and deliveryCouriersBlue Dart, Delhivery, DHL
Email marketingEmail automationKlaviyo, Mailchimp
WhatsApp messagingWhatsApp Business APIWati, Interakt, AiSensy
AnalyticsWeb analyticsGoogle Analytics
AdvertisingAd platformsMeta Ads, Google Ads
Cloud infrastructureHosting and storageAWS, Google Cloud
Customer supportHelpdesk softwareZendesk, Freshdesk

Legal and regulatory disclosures

We may disclose your personal data when required:

  • By law, court order, or government authority
  • To comply with tax, accounting, or other statutory obligations
  • To enforce our Terms & Conditions or protect our rights, property, or safety
  • To prevent fraud, security threats, or illegal activity

Business transfers

If we go through a merger, acquisition, restructuring, or sale, your personal data may be transferred to the acquiring entity. We'll notify you of any such transfer and ensure the same protections continue to apply.

7. How Long We Keep Your Data

We retain personal data only as long as needed for the purposes set out in this policy, or as required by law:

Order and transaction records8 years (Indian tax and accounting law)
Account dataUntil account deletion + 1 year
Marketing dataUntil you withdraw consent + 6 months
Customer support communications3 years from last interaction
Website analytics (aggregated)26 months
Payment dataNot stored by us (held by gateway only)
Inactive account dataAuto-deleted after 3 years of no activity (with prior notice)

After the retention period, your data is securely deleted or anonymized.

8. Your Rights as a Data Principal

Under the DPDP Act, you have specific legal rights over your personal data:

Right to information

You can ask for a summary of the personal data we hold about you and how we're using it.

Right to correction and erasure

You can ask us to correct inaccurate data or delete data we no longer need.

Right to grievance redressal

You can file a complaint with our Grievance Officer (Section 11) and expect a response within 48 hours.

Right to nominate

You can nominate someone to exercise your rights on your behalf in the event of your death or incapacity.

Right to withdraw consent

You can withdraw your consent for any processing that relies on consent. We make this easy:

Marketing emailsClick "unsubscribe" at the bottom of any marketing email
WhatsApp marketingReply "STOP" to any marketing WhatsApp message
SMS marketingReply "STOP" to any marketing SMS
All marketingUpdate preferences in your account, or email privacy@hausofbaumer.com
Account itselfEmail privacy@hausofbaumer.com to request deletion

How to exercise your rights

Email our Grievance Officer at alban@hausofbaumer.com. We may need to verify your identity before responding. There's no fee, except for clearly unfounded or excessive requests. We aim to respond within 48 hours with an acknowledgement, and resolve within one month.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to make our Site work and improve your experience.

Strictly necessaryCart, checkout, loginSession cookiesEssential
FunctionalRemember preferencesLanguage, currencyYes
AnalyticsUnderstand how the Site is usedGoogle AnalyticsYes
MarketingPersonalized ads, retargetingMeta Pixel, Google AdsYes

Managing your cookies

When you first visit the Site, you'll see a cookie consent banner allowing you to accept or reject non-essential cookies by category. You can also:

  • Block or delete cookies through your browser settings
  • Opt out of Google Analytics at tools.google.com/dlpage/gaoptout

Blocking strictly necessary cookies may prevent parts of the Site from working properly.

10. Marketing Communications

We send marketing communications only with your consent.

Email

  • We send promotional emails only after you opt in (typically at checkout or via newsletter signup)
  • Every email has an "unsubscribe" link at the bottom — one click and you're off the list
  • We never share your email with other companies for their marketing

WhatsApp

  • We send promotional WhatsApp messages only after explicit opt-in
  • Reply "STOP" to any message to opt out
  • We don't send marketing messages between 9pm and 9am IST

SMS

  • Used sparingly — typically only for high-value notifications or, with opt-in, occasional promotional messages
  • Reply "STOP" to any marketing SMS to opt out

Transactional communications

Order confirmations, shipping updates, security alerts, and account notifications are not marketing. They are part of providing the service you've requested and can't be opted out of as long as you have an active order or account.

11. Grievance Officer (Data Protection Contact)

In compliance with the DPDP Act, the Consumer Protection (E-Commerce) Rules 2020, and the Information Technology Rules 2021, our designated Grievance Officer is:

Name: Mr. Alban Fernandez

Email: alban@hausofbaumer.com

Hours: 10:00 am – 5:00 pm IST

The Grievance Officer will acknowledge your complaint within 48 hours and resolve it within one month of receipt.

If you remain unsatisfied

  • The Data Protection Board of India (for data protection matters)
  • The National Consumer Helpline at 1915 or consumerhelpline.gov.in
  • The relevant Consumer Disputes Redressal Commission under the Consumer Protection Act 2019

12. Children's Data

In accordance with the DPDP Act, we don't knowingly collect personal data from children under 18 years of age without verifiable parental or legal guardian consent.

We don't:

  • Use the personal data of children for tracking or behavioral monitoring
  • Target advertising at children
  • Collect or process children's data for marketing purposes

If you believe we have inadvertently collected data from a child without proper consent, please email our Grievance Officer immediately at alban@hausofbaumer.com and we will delete the data.

13. Data Security

We take reasonable steps to protect your personal data:

Encryption in transitAll data sent to/from our Site uses SSL/TLS encryption
Encryption at restStored data is encrypted where applicable (AES-256 standard)
Access controlsOnly authorized personnel can access personal data; role-based access
Secure hostingOur cloud infrastructure uses ISO 27001 certified data centers
Regular auditsPeriodic security assessments and vulnerability testing
Staff trainingMandatory data protection training for everyone handling personal data
Incident responseDocumented breach response plan and 72-hour notification policy

Despite our best efforts, no method of transmission or storage is 100% secure. If a data breach occurs that affects your personal data, we commit to:

  • Notify the Data Protection Board of India and affected Data Principals within 72 hours as required by the DPDP Act
  • Take immediate steps to contain and mitigate the breach
  • Investigate the cause and implement corrective measures
  • Be transparent with affected individuals about what happened and what we're doing about it

14. Third-Party Links

The Site may link to third-party websites, social media platforms, or services. We're not responsible for the privacy practices of those third parties. Their handling of your data is governed by their own privacy policies.

Before sharing personal data with any third-party service via our Site, we encourage you to review their privacy policy.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or services. For material changes, we'll notify you by:

  • Email (if we have your address on record)
  • A prominent notice on the Site
  • WhatsApp (if you've opted in)

Your continued use of the Site after such notice constitutes acceptance of the updated policy.

Privacy queries: privacy@hausofbaumer.com

Grievance Officer: alban@hausofbaumer.com

WhatsApp: +91 9008342742

Hours: 10:00 am – 5:00 pm IST

We aim to respond to every privacy enquiry within 48 hours.

“We are committed to handling your data with care, transparency, and respect.”

0 items

Your bag is empty.