Who we are
This website is run by CAELIORA LUXE, a fashion jewellery brand. The name and registered address of the business behind it will be published here before the store opens. You can reach us about privacy at any time at hello@caelioraluxe.com or through our grievance officer.
What we collect
- Private List. Your email address, and your WhatsApp number only if you tick the box asking for WhatsApp updates.
- Your account. Your name, mobile number and/or email address, your account choices and sign-in records (device type and approximate time).
- When you shop. Your orders, delivery and billing addresses, and the messages we exchange about them. We never see your card or UPI details: our payment partner collects them on its own secure page.
- Messages to us. What you write to us, and our replies.
- How the site is used. With your permission only, a random visitor identifier and the pages you view (see the cookie policy). Without permission we count page views and page speed in aggregate only.
- Technical data. Your browser type, device type and IP address, kept briefly to keep the site secure and working.
Why we use it
To confirm your place on the Private List and tell you about new collections; to create and secure your account and send sign-in codes; to take, deliver and support your orders; to answer your messages; to keep the site secure and prevent fraud; and, only with your permission, to measure how the site is used so we can improve it.
Your choices
Marketing messages are off unless you turn them on, separately for WhatsApp and email, and you can turn them off at any time from any message or your account. Sign-in codes and order updates are part of the service. Optional cookies are off until you choose otherwise, and you can change that from "Cookie preferences" at the foot of every page.
The AI Stylist and virtual try-on
AI Stylist. Your answers (occasion, outfit, colours, budget and any short note you type) are used to choose pieces from our collection. To write the styling notes, those answers and the details of the chosen pieces are sent to an AI language-model provider under a data-processing agreement. Your name, phone number, email address and account details are never sent, and notes that look like contact details are removed first. If the model is unavailable, we write the notes ourselves from templates. Stylist sessions made without signing in are deleted after 90 days; when you are signed in, your stylist answers and saved looks stay with your account (and in your data export) until you delete them or your account.
Virtual try-on. Your photo is processed on your own device and is not uploaded. If you choose "Keep this photo", it is stored encrypted on that device only, for up to 180 days, and you can delete it at any time from the try-on page or your account. The optional studio render is different: with your separate consent, the photo is uploaded once to our private storage, checked by an automated safety service, deleted as soon as the render is made, and the render is kept for 24 hours, or 30 days if you save it. Try-on photos are never used to train models.
Who helps us
We share personal data only with the providers that help us run the service, each for its own task:
- Hosting: our servers and database are in India (Mumbai).
- Email delivery: a provider that sends our emails, such as Private List confirmations.
- Error monitoring: a service that records technical errors so we can fix them. It receives no names, contact details, cookies or form contents.
- Messaging, payments and delivery partners: WhatsApp and SMS providers, our payment partner and couriers, once the store opens.
- AI Stylist and studio render: the language model and the safety check described above.
Some providers process data outside India. The final policy will name each one. We do not sell your personal data.
How we protect it
Connections to the site are encrypted. Your contact details are stored encrypted, staff access is limited to what each role needs and protected by two-step sign-in, and we keep a record of who changes what in our console.
How long we keep it
Account data stays until you delete your account. Private List addresses stay until you leave the list; unconfirmed sign-ups are removed. Message records are kept for 180 days; sign-in records for 30 days after they end; site analytics for 25 months, under a random identifier. Consent records are kept for as long as the consent lasts plus three years, as proof. Order and invoice records are kept as the law requires.
Your rights
You can access, correct or erase your data, withdraw consent, and nominate someone to act for you. Signed-in customers can export or delete their data from their account; anyone can write to us. You can raise a grievance with our grievance officer and, if it is not resolved, complain to the Data Protection Board of India.
Children
The site is meant for adults. If you are under 18, please use it with a parent or guardian.
Changes
When this policy changes we will publish the new version here with its date, and ask for your consent again where the change needs it.