Privacy Policy

PRIVACY POLICY

Last updated: 16 September 2026

This Privacy Policy explains how Samar Enterprises, trading as Leemak ("we", "us", "our"), collects, uses, shares, and protects your personal information when you use leemak.in ("Platform"), in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and applicable rules made thereunder. Under the DPDP Act, we act as the "Data Fiduciary" and you, as our customer, are the "Data Principal."

1. INFORMATION WE COLLECT

We collect information that you give us directly, and some information automatically as you use the Platform:

- Account details — your name, phone number and/or email address, and a securely hashed password if you set one.

- Order & delivery details — the delivery address(es) you save, your order history, and the products, sizes, and quantities you buy.

- Payment status — whether an order is paid, pending, or refunded, and which payment method you chose. We do NOT collect or store your full card number, CVV, UPI PIN, or netbanking password — these are entered directly with, and processed by, our payment gateway partner.

- Content you post — product reviews, ratings, any photos you choose to upload with a review, and the unboxing video you upload when raising a return (used solely to verify the condition the product arrived in).

- Communications — messages you send us for support, and the OTPs we send you to verify your phone or email.

- Automatically collected data — your IP address (used, among other things, to apply reasonable limits against abuse), browser/device information, and a cookie that remembers products you've recently viewed.

We do not use any third-party analytics or advertising trackers on the Platform.

2. COOKIES

The Platform uses a small number of cookies to work correctly: a session cookie (keeps you signed in and your cart intact), a security cookie (protects forms from cross-site attacks), and a "recently viewed" cookie that remembers products you've looked at for up to 90 days so we can show them back to you. We do not use these cookies to track you across other websites. You can clear cookies at any time from your browser settings, though this will sign you out and clear your recently-viewed list.

3. CONSENT & LEGAL BASIS

By creating an account, placing an order, or otherwise providing your personal information on the Platform, you give your consent to its collection and use as described in this Policy, for the specific purposes listed in Section 4. Where we rely on your consent, you may withdraw it at any time by contacting us at help@leemak.in — noting that withdrawing consent for information necessary to fulfil an order already placed (for example, your delivery address) may mean we're unable to complete that order.

4. HOW WE USE YOUR INFORMATION

We use your information to: create and manage your account; process, pack, and ship your orders; send order and delivery updates by SMS and/or email; process payments and refunds; respond to support requests; show you your order history, wishlist, and saved addresses; apply reasonable fraud- and abuse-prevention checks (for example, on repeated returns or COD refusals); and improve the Platform. We do not use your information for any purpose beyond these without asking you first.

5. WHO WE SHARE IT WITH

We share only what's needed, with the following categories of service providers, so your order can actually reach you:

- Payment gateway partners (such as Razorpay/Cashfree) — to process your online payment and any refund.

- Courier/logistics partners (such as Shiprocket and Ekart) — your name, delivery address, and phone number are shared with the courier assigned to your order, solely to deliver it.

- SMS and email service providers — used to send OTPs, order confirmations, and delivery updates to your phone/email.

- Google — only if you choose to sign in with your Google account, in which case Google shares your basic profile (name, email) with us as part of that sign-in. This may involve your information being processed on Google's servers, which can be located outside India.

Each of these providers is only given the information it needs to perform its specific role, and is not permitted to use it for its own independent purposes. We do not sell your personal information to anyone. We may disclose information if required to by law, court order, or a government authority.

6. DATA SECURITY

We take reasonable technical measures to protect your information — including enforcing HTTPS across the Platform, storing passwords and OTPs as one-way hashes (never in plain text), and never storing your full card or bank details ourselves. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices, and will inform affected users and, where legally required, the relevant authorities without unreasonable delay in the event of a personal data breach.

7. DATA RETENTION

We keep your account and order information for as long as your account is active, and for a further period afterward as required to meet our tax, accounting, and legal obligations (for example, GST-related records) or to resolve disputes. Once no longer needed for these purposes, we take reasonable steps to delete or anonymise it.

8. YOUR RIGHTS

Subject to the DPDP Act, you have the right to:

- Access the personal information we hold about you.

- Correct or update inaccurate or incomplete information (you can do this directly for your profile and addresses from your account).

- Request erasure of your personal information, or closure of your account.

- Withdraw consent you previously gave, as described in Section 3.

- Register a grievance regarding how we handle your information (see Section 10).

- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to us at help@leemak.in. We will act on a genuine request as quickly as reasonably possible, subject to any information we're required to retain by law.

9. CHILDREN'S PRIVACY

The Platform is not intended for children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

10. GRIEVANCE OFFICER / CONTACT US

For any privacy-related question, concern, or complaint, contact our Grievance Officer:

Grievance Officer

Samar Enterprises (Leemak)

Plot No. 161, Phase 1, Barhi, Ganaur, Sonipat, Haryana 131101

Email: help@leemak.in

We will acknowledge and address a genuine complaint as quickly as reasonably possible. If you remain dissatisfied, you may also approach the Data Protection Board of India as provided under the DPDP Act.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page will change when we do — please check back periodically.

12. GOVERNING LAW

This Privacy Policy is governed by the laws of India, and any dispute relating to it is subject to the exclusive jurisdiction of the courts at Sonipat, Haryana.