VoltaLux is a brand owned and operated by Workstore Private Limited, and the website voltalux.in (the “Website”) is owned and operated by Workstore Private Limited. In this Privacy Policy, “VoltaLux”, “we”, “us” and “our” refer to Workstore Private Limited, which is the Data Fiduciary in respect of the personal data described here. “You” refers to any person who visits the Website, places an order, visits our Experience Centre, or otherwise deals with us.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights available to you. It should be read with our Terms of Use and Returns, Refund & Exchange Policy, of which it forms part.
We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, the Information Technology Act, 2000 and the rules made under it, and other applicable Indian law.
By using the Website, placing an order, or giving us your details, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please do not use the Website or share your details with us.
1. The personal data we collect
We collect only what we need in order to sell, deliver and support our Products.
Information you give us
• Identity and contact details: name, email address, telephone or mobile number, and, where relevant, your company or firm name and GSTIN.
• Order details: billing address, delivery address, order history, invoice details, and any delivery instruction or site contact you provide.
• Project details: where you or your architect, designer or contractor share them with us, information about the site and requirements, such as room dimensions, ceiling height, drawings, moodboards and specifications.
• Correspondence: the content of emails, WhatsApp messages, enquiry forms, feedback, reviews and photographs or video you send us, including material sent in support of a return, exchange or warranty claim.
• Experience Centre visits: name and contact details recorded when you visit or book an appointment at our Experience Centre, and notes of your requirements. Our premises may be under CCTV surveillance for security.
• Account details: your login credentials and saved preferences, where you create an account.
Information collected automatically
• Device and usage data: IP address, device and browser type, operating system, referring page, pages viewed, time spent, and similar analytics data collected through cookies and comparable technologies. Please see Clause 8.
Payment information
• We do not collect or store your card number, CVV, UPI PIN, net-banking password or OTP. Payments are processed by our third-party payment gateway on its own systems, subject to its terms and privacy policy. We receive only the transaction reference, the status of the payment, and limited details such as the payment method and the last four digits of the instrument, for reconciliation, refunds and fraud prevention.
2. How we use your personal data
• To process, confirm, invoice, dispatch, deliver and, where applicable, install your order, and to communicate with you about it.
• To handle returns, exchanges, cancellations, refunds and warranty claims under our Returns, Refund & Exchange Policy, including assessing photographs and video you submit.
• To respond to your enquiries, provide product and technical guidance, prepare quotations, and manage appointments at our Experience Centre.
• To verify orders, prevent and investigate fraud, misuse of discount codes, chargebacks and unauthorised resale, and to enforce our Terms of Use.
• To maintain our accounts and records, and to comply with obligations under tax, company, consumer protection and other applicable law, and to respond to lawful requests from authorities and courts.
• To improve the Website, our Products and our service, including through analytics and aggregated reporting.
• With your consent, to send you marketing communications about new collections, offers and events, by email, SMS, WhatsApp or other channels. You may withdraw this consent at any time as described in Clause 6.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, and we do not sell your personal data.
3. Consent, and processing without consent
We process your personal data on the basis of the consent you give when you place an order, create an account, complete a form, or opt in to marketing. Your consent is specific to the purposes set out in Clause 2, and we will seek fresh consent if we wish to use your data for a materially different purpose.
Where the law permits, we may also process personal data for certain legitimate uses without separate consent, including where you have voluntarily provided data for a specified purpose and have not indicated that you object, to comply with a legal obligation or an order of a court or authority, and to respond to a medical or safety emergency.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and does not require us to delete records we are required by law to retain. If you withdraw consent for processing that is necessary to fulfil an order, we may be unable to complete that order.
4. Sharing your personal data
We do not sell, rent or trade your personal data. We share it only as set out below, and only to the extent needed:
• Logistics and delivery partners, to deliver your order and to arrange collection of a return. This includes your name, delivery address, telephone number and order details.
• Payment gateway, banks and card networks, to process payments, refunds and chargebacks.
• Installation, service and technical partners, where installation or a site visit is arranged through us.
• Technology and service providers who support our business, such as our website and hosting provider, order management and CRM systems, email, messaging and analytics providers, and cloud storage, in each case under contractual obligations of confidentiality and security.
• Professional advisers, such as our auditors, accountants and lawyers, where required.
• Group companies and affiliates within the Workstore Group, for internal administration, order fulfilment and, with your consent, marketing.
• Authorities, where disclosure is required by law, by a court, or by a regulatory or enforcement agency, or is necessary to establish, exercise or defend a legal claim, or to protect the rights, property or safety of any person.
• A successor entity, in the event of a merger, acquisition, restructuring or sale of business, subject to this Policy continuing to apply.
5. Storage, retention and transfers
• Your personal data is stored on servers operated by us or by our service providers. Where data is stored or processed outside India, we do so in accordance with applicable law and require appropriate contractual safeguards.
• We retain personal data only for as long as it is needed for the purposes in Clause 2, or for as long as required by law. Invoices, transaction records and related data are retained for the period prescribed under tax, GST and company law, which is presently eight financial years.
• Records relating to a warranty claim may be retained for the duration of the warranty period and for a reasonable period afterwards.
• Where personal data is no longer required and there is no legal obligation to retain it, we will erase it or anonymise it.
6. Your rights
Subject to applicable law, you may:
• Access a summary of the personal data we hold about you and the processing carried out on it.
• Correct, complete or update personal data that is inaccurate or incomplete.
• Erase personal data where it is no longer needed for the purpose for which it was collected, unless retention is required by law.
• Withdraw your consent at any time, with effect for the future. You can unsubscribe from marketing using the link in our emails, by replying STOP to a message, or by writing to us.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Raise a grievance with our Grievance Officer, as set out in Clause 10.
To exercise any of these rights, write to us at the address in Clause 10 from the email address registered with us, describing your request. We may ask for information to verify your identity before acting, and we may decline a request that is unfounded, excessive or repetitive, or where acting on it would prejudice the rights of another person or a legal obligation of ours. You are responsible for the accuracy of the information you give us, and for not sharing false or another person’s details.
7. Security
We maintain reasonable security safeguards appropriate to the nature of the data we hold, including access controls, encryption of data in transit, restricted internal access on a need-to-know basis, and contractual security obligations on our service providers.
No method of transmission over the internet or of electronic storage is completely secure. While we take the measures described above, we cannot guarantee absolute security, and to the extent permitted by law we are not liable for any unauthorised access, disclosure, alteration or loss of data that occurs despite reasonable safeguards, or that results from your own act or omission, including sharing your password or responding to a phishing attempt.
We will never ask you for your card number, CVV, UPI PIN, OTP or net-banking password by telephone, email or message. Please do not share these with anyone claiming to represent VoltaLux, and report any such approach to us.
In the event of a personal data breach, we will notify affected persons and the Data Protection Board of India in the manner and within the timelines required by law.
8. Cookies and similar technologies
The Website uses cookies and similar technologies to keep you signed in, remember the contents of your cart, secure the Website, measure how the Website is used, and, where you consent, to show you relevant advertising. Some cookies are set by third parties such as our analytics and advertising providers.
You can control or delete cookies through your browser settings, and where a cookie banner is presented on the Website you can manage your preferences there. Blocking certain cookies may affect how parts of the Website function, including checkout.
9. Children
The Website and our Products are intended for persons aged 18 and over, and we do not knowingly collect personal data of a child. We do not process a child’s personal data, or undertake tracking, behavioural monitoring or targeted advertising directed at children, without verifiable consent from a parent or lawful guardian as required by law. If you believe a child has provided us with personal data, please write to us and we will delete it.
10. Grievance Officer and contact
If you have a question about this Policy, wish to exercise a right under Clause 6, or wish to make a complaint about how we have handled your personal data, please contact:
Email: enquire@voltalux.in
We will acknowledge your communication within 48 hours of receipt and endeavour to resolve it within 30 days, and in any event within the period prescribed by applicable law. If you are not satisfied with our response, you may approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.
11. Third-party websites
The Website may link to third-party websites, social media platforms and payment pages. This Policy does not apply to them. We do not control those websites and are not responsible for their content or their privacy practices. Please read their privacy policies before sharing your personal data with them.
12. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices or in the law. The revised version will be posted on the Website with a new “Last updated” date and takes effect on posting. Where a change is material, we will take reasonable steps to notify you. Please review this page periodically.
