Privacy Policy

• Order details: your name, email address, mobile number and delivery address, so we can deliver your order and keep you updated about it.
• Account details, if you create one: your name, email address, an optional phone number, and a securely hashed password. We never store your password itself.
• Messages you send us through the contact form or WhatsApp.
• Reviews you submit, including the display name and city you choose to publish with.
• Basic technical information your browser sends with each request, such as IP address, which is used for security measures like rate limiting.

We do not collect, process or store card numbers, CVVs, UPI PINs or net banking credentials. Online payments are handled entirely by our payment gateway on its own hosted checkout. We receive only a payment reference and whether the payment succeeded.

• To process, pack, deliver and support your order.
• To respond to enquiries you send us.
• To publish a review, if you submit one and it is approved.
• To send occasional updates and recipes, only if you subscribed to our newsletter. Every email includes an unsubscribe option.
• To protect the store against abuse — for example, rate limiting sign-in and checkout attempts.

• Courier partners, who receive the name, address and phone number needed to deliver your parcel.
• Our payment gateway, which receives the details needed to process a payment.
• Nobody else. We do not sell personal information, and we do not share it for third-party advertising.

Order records are kept for as long as needed for accounting, tax and warranty obligations. Account details are kept until you ask us to delete the account. Newsletter subscriptions are kept until you unsubscribe.

• You can ask for a copy of the personal information we hold about you.
• You can ask us to correct anything that is inaccurate.
• You can ask us to delete your account and associated personal data, subject to records we are required to retain.
• You can unsubscribe from the newsletter at any time.
• To make any of these requests, write to hello@lacmora.in.

We use a single cookie to keep you signed in when you choose to create an account. Your shopping cart is stored in your own browser and never leaves your device until you place an order. We do not use advertising or cross-site tracking cookies.

Passwords are stored as salted hashes. Sessions use signed, HTTP-only cookies. Order totals are always recalculated on our server rather than trusted from your browser. No system is perfectly secure, but we take these measures seriously and review them.

If this policy changes materially, the updated date at the top of this page will change. Please check back occasionally.