Lunar Luxury

The Scientific Spiritual Consulting House

Privacy Notice

Your chart begins with three details — a date, a time, a place. This is how we hold them: with consent, in confidence, and only for as long as they serve your reading.

Last updated: 9 September 2026 · Effective immediately

The short version

  • Your birth details are treated as sensitive personal data — collected only to compute your reading.
  • We act on your consent, which you may withdraw at any time.
  • We never sell, rent, or trade your data. Ever.
  • You can ask us to show, correct, or delete your data — and we will.
  • We collect the least we can, and keep it no longer than we must.

§ 01

Who we are

Lunar Luxury is a Vedic astrology consulting practice operated from India, serving clients in India and across the global Indian diaspora. Chart positions are computed by Bharat Ephemeris; its positional benchmarks do not measure the accuracy of personal interpretations.

For the purpose of India's Digital Personal Data Protection Act, 2023 (DPDP Act), Lunar Luxury is the Data Fiduciary — the party that decides how and why your personal data is processed. When you share your details with us, you are the Data Principal, and the rights described in this notice are yours.

Operator of recordLunar Luxury · Laksha Solanki, trading as Lunar Luxury Store · WZ-803, Palam Village, Bata Chowk, New Delhi, South West Delhi, Delhi 110045, India. Reach us on WhatsApp at +91 99833 54547 or via the grievance contact in §13.

§ 02

What we collect

We collect only what a reading, a consultation, or a purchase genuinely requires. In practice, that is:

Data you give us directly

  • Birth details — your date of birth, exact time of birth, and place of birth. These are the inputs to every chart. Treated as sensitive — see §3.
  • Identity & contact — your name, email address, phone/WhatsApp number, and country/timezone (so a live session lands at the right hour for you).
  • Your questions & context — anything you choose to tell us about what you'd like the reading to address.
  • Payment confirmation — we receive confirmation of a successful payment and an order reference. We do not see or store your full card, UPI, or bank details — those go directly to our payment processor (§6).

Data collected automatically

  • Basic usage data — pages visited, approximate region, device/browser type, collected in an aggregated and, where possible, anonymised form to keep the site working and understand what's useful. See §7.
§ 03

Birth details are sensitive data

We treat your date, time, and place of birth as sensitive personal information. Combined, they are precise and personal to you, and we apply appropriate access controls and use them for the requested reading.

The single reason we collect themYour birth details are collected solely to compute your astrological chart and reading. They are not used to profile you for advertising, not enriched with data from elsewhere, and not repurposed for anything you didn't ask for.

If you provide birth details on behalf of another person — for a Family Architecture reading, a relationship study, or a gift — you confirm that you have that person's permission to share their information with us for this purpose.

§ 04

Lawful basis: your consent

Under the DPDP Act, we process your personal data on the lawful basis of your consent, freely given when you request a reading, book a session, or purchase from us. That consent is:

  • Specific — given for the defined purposes in this notice, not a blanket permission.
  • Informed — this notice tells you plainly what we do before you decide.
  • Withdrawable — you can withdraw consent at any time (see §9). Withdrawing is as easy as giving it, and it doesn't affect processing already completed lawfully.

Where we keep limited records to meet a legal, tax, or accounting obligation, we do so only to the extent the law requires.

§ 05

How we use your data

We use your data for these purposes and no others:

  • To compute your chart and prepare your reading or consultation.
  • To deliver your reading — by email, sealed document, or live session — and to schedule it at a time that suits your timezone.
  • To respond to your questions and provide support.
  • To process your order and issue receipts or, where applicable, refunds.
  • To keep the site secure and working, and to understand in aggregate what content is useful.
  • To send you service messages about something you asked for. We only send optional updates if you've opted in, and every such message has an easy unsubscribe.

We do not make automated decisions that produce legal or similarly significant effects about you, and we do not sell your data to anyone.

§ 06

Sharing & our processors

We never sell or trade your personal data. We share it only with a small set of trusted service providers (Data Processors) who help us run the practice, and only for the specific task each performs — under contract, and never for their own purposes.

Providers used by this site:
PurposeProvider (category)What they receive
PaymentsRazorpayPayment & billing details you enter with them directly; we receive only confirmation and an order reference.
Email deliveryResendYour name and email address, to deliver your reading and service messages.
Secure storageSupabaseYour order and reading records, held under access controls.
AnalyticsGoogle Analytics 4 (only if you allow analytics)Page and interaction events, browser/device information and approximate region. Purchase events include a transaction reference, service and amount. No birth details or email addresses are sent as event fields.

Vercel hosts the site and processes technical request logs. Bharat Ephemeris computes chart positions from birth inputs. WhatsApp processes conversations when you choose that contact channel. This list is updated when our providers change.

We may also disclose data if required by law — for instance, in response to a valid legal request from an authority — limited strictly to what is required.

§ 07

Cookies & analytics

We keep our use of cookies deliberately light.

  • Essential cookies keep the site functioning — security, basic preferences, and your session. These are necessary for the site to work.
  • Analytics help us understand, in aggregate, which pages are useful. We load Google Analytics only after your explicit choice, and we do not use it to build advertising profiles of you.

We do not run third-party advertising trackers. You can control or clear cookies in your browser settings at any time; blocking essential cookies may affect how the site works. Optional Google Analytics loads only after you choose Allow analytics. Use Analytics preferences on this page to change your choice; you can clear existing cookies through your browser settings.

§ 08

Retention & deletion

We keep personal data only for as long as it serves the purpose it was collected for, and then we remove or anonymise it.

  • Birth details & reading inputs — retained while we prepare and deliver your reading, and under our standard retention policy of up to 24 months from your last engagement, unless you request earlier deletion or a legal retention obligation applies. This policy is administered by our grievance contact.
  • Order & payment records — retained for the period required by tax and accounting law, then removed.
  • Support correspondence — kept only as long as needed to resolve your query and honour our commitments.

Deletion on requestYou can ask us to delete your personal data at any time (see §9). Once we have no lawful reason to keep it, we will erase it from our active systems and instruct our processors to do the same — usually within 30 days of verifying your request.

§ 09

Your rights as a Data Principal

The DPDP Act gives you clear rights over your data. To exercise any of them, contact us using the details in §13 — we may ask you to confirm your identity so we protect your data from someone impersonating you.

Access

Ask for a summary of the personal data we hold about you and how we've processed it.

Correction

Have inaccurate or incomplete data corrected or completed — including a wrong birth time.

Erasure

Ask us to delete your personal data where we no longer need it or you withdraw consent.

Withdraw consent

Withdraw your consent at any time, as easily as you gave it, for any future processing.

Grievance redressal

Raise a concern and receive a considered response through our grievance channel (§13).

Nominate

Nominate another individual to exercise your rights in the event of death or incapacity.

We respond to rights requests within a reasonable timeframe. If you're not satisfied with our response, you may escalate to the Data Protection Board of India established under the DPDP Act.

§ 10

Children's data

Our services are intended for adults. You must be 18 or older to purchase a reading or share data with us on your own behalf. We do not knowingly collect data directly from anyone under 18 without verifiable consent from a parent or lawful guardian, as the DPDP Act requires.

If a reading concerns a child — for example, a natal chart requested by a parent — the parent or guardian provides and consents to that data. If you believe a child's data has reached us without proper consent, contact us (§13) and we will delete it promptly.

§ 11

International transfers

We serve clients across the Indian diaspora, so your data may be accessed or processed in a country other than the one you live in. Some of our processors (§6) operate infrastructure outside India.

Wherever your data travels, it stays protected by this notice and by our contracts with those processors. We only work with providers that offer appropriate safeguards, and we transfer data in line with the DPDP Act and any restrictions the Government of India may notify. If you'd like to know where your specific data is processed, just ask.

§ 12

How we protect it

We apply reasonable technical and organisational safeguards to keep your data secure — encryption in transit, access controls that limit who can see reading inputs, and processors chosen for their own security posture. We collect the minimum we need, which is itself a protection.

No system is ever perfectly secure, but if a personal data breach were to occur, we would act on it and notify the Data Protection Board of India and affected individuals as the DPDP Act requires.

§ 13

Grievance & contact

If you have a question about this notice, want to exercise a right, or wish to raise a concern about how we've handled your data, please reach our Data Protection / Grievance contact. We take every message seriously and will respond.

Data Protection & Grievance Officer

Name
Pardeep Sehrawat
Email
hello@lunarluxury.in
WhatsApp
+91 77899 38993
Postal
WZ-803, Palam Village, Bata Chowk, New Delhi, South West Delhi, Delhi 110045, India

If your concern is not resolved to your satisfaction, you may approach the Data Protection Board of India constituted under the DPDP Act, 2023.

§ 14

Changes to this notice

As our practice and the law evolve, we may update this notice. When we make a meaningful change, we'll revise the date at the top and, where appropriate, tell you directly. Continuing to use our services after an update means you've had the chance to review it. This page always holds the current version.