Privacy Policy

Effective Date: 19 July 2026
Last Updated: 19 July 2026

1. About This Privacy Notice

This Privacy Notice explains how Prestige Commerce (Private) Limited, trading under the brand name Luvernia (“Luvernia,” “Prestige Commerce,” “we,” “us,” or “our”), may collect, use, store, disclose, transfer, and otherwise process information relating to identifiable individuals.

This Privacy Notice applies when you:

  • Visit or use a Luvernia website, online store, application, or other digital service;

  • Browse, enquire about, order, purchase, customise, return, repair, or receive a Luvernia product;

  • Communicate with us through telephone, email, WhatsApp, social media, live chat, forms, or other channels;

  • Visit a Luvernia showroom, experience centre, warehouse, event, or other location;

  • Participate in a survey, promotion, collaboration, competition, or marketing activity;

  • Deal with us as a supplier, contractor, service provider, representative, or business contact; or

  • Otherwise interact with Luvernia.

This Privacy Notice is intended to describe our practices in a clear and transparent manner. It does not create rights or obligations beyond those arising under applicable law or an express written agreement.

Nothing in this Privacy Notice limits any right that cannot lawfully be limited.

2. Our Legal Identity

The party responsible for Luvernia’s business operations is:

Prestige Commerce (Private) Limited
Trading as Luvernia

Registered office: 2nd Floor , Plaza No.46, street 144, Block-H commercial, Phase-1, DHA LAHORE, Punjab, Pakistan - 54000
General contact email: support@luvernia.com
Privacy contact email: akash@luvernia.com
Telephone or WhatsApp: +923336666280

References to “Luvernia” in this Privacy Notice refer to Prestige Commerce (Private) Limited unless the context indicates otherwise.

3. Important Limitations

This Privacy Notice has been prepared primarily for Luvernia’s operations in Pakistan.

Where the law of another jurisdiction applies to a particular activity, transaction, or individual, we will process personal data in accordance with the requirements that legally apply to us in those circumstances.

Our reference to internationally recognised privacy principles does not mean that Luvernia:

  • Is certified under any particular international privacy framework;

  • Is established or registered in every jurisdiction;

  • Is subject to every foreign privacy law;

  • Voluntarily accepts the jurisdiction of every foreign regulator; or

  • Grants every individual every right available under every privacy law worldwide.

Additional notices, disclosures, consents, or rights may be provided where required by applicable law.

4. Meaning of Personal Data

In this Privacy Notice, “personal data,” “personal information,” or similar terms mean information that identifies an individual or can reasonably be connected with an identifiable individual.

The exact meaning may vary under applicable law.

Personal data may include names, contact details, delivery information, transaction records, online identifiers, communications, photographs, account information, and other information connected with an individual.

Information that has been irreversibly anonymised so that no individual can reasonably be identified is not treated as personal data.

Pseudonymised or coded information may continue to be treated as personal data where it can reasonably be reconnected with an identifiable individual.

5. Information We May Collect

We may collect some or all of the categories described below, depending on how you interact with Luvernia. We do not necessarily collect every category from every individual.

5.1 Identity and contact information

This may include:

  • Full name;

  • Email address;

  • Telephone number;

  • WhatsApp number;

  • Billing address;

  • Delivery address;

  • City, province, postal code, and country;

  • Account username;

  • Company or business name;

  • Job title;

  • Tax or invoicing information; and

  • Contact details of an authorised representative or delivery recipient.

We do not ordinarily require a customer to provide a government-issued identity document for a standard retail order.

We may, however, request identity or verification information where reasonably necessary for fraud prevention, payment verification, financing, high-risk transactions, delivery disputes, legal compliance, privacy requests, or the protection of customers and Luvernia.

5.2 Order and transaction information

This may include:

  • Products viewed, selected, or ordered;

  • Product prices;

  • Order numbers;

  • Order dates;

  • Invoices and receipts;

  • Payment status;

  • Advance-payment amounts;

  • Remaining balances;

  • Cash-on-delivery amounts;

  • Discounts;

  • Refunds;

  • Order changes;

  • Cancellations;

  • Returns;

  • Exchanges;

  • Complaints;

  • Warranty claims;

  • Repair or replacement information; and

  • Delivery and collection records.

5.3 Product-customisation information

Because Luvernia products may be custom-made, we may collect:

  • Product dimensions;

  • Configuration choices;

  • Fabric, colour, finish, material, and accessory selections;

  • Customisation instructions;

  • Room measurements;

  • Drawings;

  • Floor plans;

  • Photographs;

  • Videos;

  • Design references;

  • Delivery-access details;

  • Installation requirements; and

  • Other information supplied for manufacturing, design, delivery, or installation purposes.

You should remove or obscure unrelated personal information, private documents, faces, licence plates, screens, correspondence, and other sensitive details before sending room photographs, videos, floor plans, or design materials to us.

5.4 Payment-related information

Depending on the payment method, we may collect:

  • Payment method;

  • Amount paid;

  • Amount outstanding;

  • Bank-transfer reference;

  • Payment date;

  • Account title;

  • Limited account or transaction information;

  • Deposit receipt;

  • Payment screenshot;

  • Refund information;

  • Payment confirmation; and

  • Information required to investigate a failed, disputed, duplicated, reversed, or potentially fraudulent payment.

Banks, payment gateways, card processors, financing providers, and other financial-service providers may collect payment information directly and process it under their own terms and privacy notices.

Luvernia does not need your:

  • Online banking password;

  • Debit or credit card PIN;

  • One-time password;

  • Complete card security code;

  • Mobile banking login credentials; or

  • Remote access to your banking application.

You should never provide such information to any person claiming to represent Luvernia.

When providing a receipt or screenshot, you should redact information that is not reasonably necessary to verify the relevant payment.

5.5 Communications

We may collect and retain communications exchanged with us, including:

  • Emails;

  • WhatsApp messages;

  • Telephone-call details;

  • Live-chat messages;

  • Social-media messages;

  • Comments;

  • Customer-support requests;

  • Complaints;

  • Reviews;

  • Survey responses;

  • Feedback;

  • Customisation approvals;

  • Delivery instructions; and

  • Records of marketing preferences.

Calls may be recorded only where recording is used, lawful, and appropriately notified.

We do not represent that every call is recorded.

5.6 Website and device information

When you use our website or digital services, we or our technology providers may automatically collect information such as:

  • Internet Protocol address;

  • Browser type;

  • Device type;

  • Operating system;

  • Device and advertising identifiers;

  • Language settings;

  • Approximate location derived from technical information;

  • Referring website or advertisement;

  • Pages viewed;

  • Links selected;

  • Products viewed;

  • Shopping-cart activity;

  • Checkout activity;

  • Session information;

  • Cookie identifiers;

  • Login activity;

  • Error reports;

  • Server logs;

  • Security logs; and

  • Information associated with potentially fraudulent, malicious, or automated activity.

The availability and accuracy of this information depend on the relevant device, platform, browser, network, and service provider.

5.7 Marketing and preference information

We may collect or infer information concerning:

  • Newsletter subscriptions;

  • Marketing preferences;

  • Products of interest;

  • Previous purchases;

  • Advertisement interactions;

  • Promotion participation;

  • Abandoned carts;

  • Campaign source;

  • Website behaviour;

  • Social-media engagement; and

  • Responses to marketing communications.

5.8 Physical-location information

Where Luvernia operates a showroom, experience centre, warehouse, office, event, or other physical location, we may collect:

  • Appointment information;

  • Visitor records;

  • Delivery and collection details;

  • Access-control information;

  • Incident reports; and

  • CCTV footage where CCTV is installed.

The use and retention of CCTV may vary by location, security requirements, storage capacity, incident status, and applicable law.

5.9 Sensitive information

Luvernia does not ordinarily seek sensitive information such as:

  • Medical information;

  • Biometric identifiers;

  • Religious or philosophical beliefs;

  • Political opinions;

  • Sexual-orientation information;

  • Criminal-history information; or

  • Other specially protected information.

Please do not provide sensitive information unless we have specifically requested it for a legitimate and lawful purpose.

If you voluntarily provide information that is not required, we may delete, disregard, restrict, or retain it where reasonably necessary for legal, security, fraud-prevention, evidential, or operational purposes.

6. How We Obtain Information

We may obtain personal data:

  • Directly from you;

  • From a person acting on your behalf;

  • From a person who identifies you as a delivery recipient;

  • Through our website or checkout process;

  • Through telephone, email, WhatsApp, social media, or other communications;

  • From payment providers and financial institutions;

  • From delivery, logistics, installation, and collection providers;

  • From sales representatives or customer-support providers;

  • From fraud-prevention and security providers;

  • From advertising and analytics providers;

  • From professional advisers;

  • From public sources;

  • From social-media platforms;

  • From business partners; and

  • From other sources where collection is lawful and reasonably connected with our business.

If you provide personal data about another person, you are responsible for ensuring that you are authorised to provide it.

You should inform that person that their information has been provided to Luvernia where it is reasonable or legally required to do so.

7. How We May Use Personal Data

We may use personal data for purposes reasonably connected with operating, protecting, administering, and improving Luvernia’s business.

7.1 Orders and customer relationships

We may use personal data to:

  • Respond to enquiries;

  • Prepare quotations;

  • Confirm orders;

  • Verify order instructions;

  • Communicate customisation requirements;

  • Manufacture or arrange the manufacture of products;

  • Process advance payments;

  • Reconcile payments;

  • Collect outstanding balances;

  • Arrange delivery, installation, collection, return, or replacement;

  • Issue invoices and receipts;

  • Manage cancellations and refunds;

  • Provide customer service;

  • Administer warranties;

  • Investigate complaints;

  • Resolve disputes; and

  • Maintain records of the customer relationship.

7.2 Business administration

We may use personal data to:

  • Operate our website and business systems;

  • Maintain accounting and transaction records;

  • Manage suppliers and service providers;

  • Conduct internal reporting;

  • Analyse sales and demand;

  • Plan inventory and manufacturing;

  • Improve products and processes;

  • Measure customer satisfaction;

  • Train and supervise personnel;

  • Conduct audits;

  • Maintain business continuity;

  • Protect company assets; and

  • Support corporate governance.

Where practical, we may use aggregated, limited, or de-identified information for internal analysis.

7.3 Security and fraud prevention

We may process information to:

  • Verify identity;

  • Confirm the authenticity of orders and payments;

  • Detect suspicious transactions;

  • Prevent impersonation;

  • Prevent payment fraud;

  • Investigate chargebacks;

  • Protect accounts and systems;

  • Detect malware or automated activity;

  • Protect customers, personnel, suppliers, and property;

  • Investigate suspected misconduct;

  • Enforce our policies and agreements; and

  • Establish, exercise, or defend legal rights.

7.4 Legal and regulatory purposes

We may process, preserve, or disclose information where reasonably necessary to:

  • Comply with applicable law;

  • Meet taxation and accounting requirements;

  • Respond to legal proceedings;

  • Comply with court orders;

  • Respond to regulators or government authorities;

  • Investigate suspected unlawful activity;

  • Obtain legal advice;

  • Establish or defend legal claims;

  • Enforce contracts;

  • Protect legal rights;

  • Protect public safety; or

  • Meet other lawful obligations.

7.5 Marketing

Subject to applicable law and your available choices, we may use personal data to:

  • Send product updates;

  • Send promotions and offers;

  • Announce new products;

  • Send event invitations;

  • Request reviews or feedback;

  • Personalise content;

  • Recommend products;

  • Measure campaign performance;

  • Build advertising audiences; and

  • Display advertisements through third-party platforms.

You may ask us to stop sending direct marketing.

An opt-out from marketing does not prevent us from sending non-marketing communications concerning:

  • An existing order;

  • A payment;

  • Delivery;

  • Installation;

  • Warranty service;

  • Product safety;

  • Account security;

  • Fraud prevention;

  • A complaint;

  • A legal matter; or

  • Another service-related issue.

8. Legal Grounds for Processing

Privacy laws do not use identical terminology in every jurisdiction.

Where applicable law requires us to identify a legal ground for processing, we may rely on one or more of the following, as appropriate:

  • Processing necessary to take steps requested by you;

  • Processing necessary to enter into or perform a contract;

  • Processing required by law;

  • Processing necessary for our legitimate business interests or those of another party;

  • Processing based on consent;

  • Processing necessary to protect a person’s vital interests;

  • Processing necessary to establish, exercise, or defend legal claims; or

  • Another ground permitted by applicable law.

Our legitimate interests may include:

  • Selling and delivering products;

  • Providing customer support;

  • Managing custom orders;

  • Maintaining records;

  • Improving our business;

  • Preventing fraud;

  • Protecting systems and property;

  • Managing suppliers;

  • Conducting proportionate marketing; and

  • Protecting legal rights.

Where we rely on consent and applicable law permits withdrawal, withdrawal will apply prospectively and will not invalidate processing already lawfully undertaken.

9. Information Required to Provide Products or Services

Certain information may be necessary to:

  • Prepare a quotation;

  • Confirm an order;

  • Manufacture a custom product;

  • Verify a payment;

  • Deliver a product;

  • Provide warranty service;

  • Process a refund; or

  • Meet a legal obligation.

If required information is not provided, is inaccurate, or cannot reasonably be verified, we may be unable to accept, manufacture, process, deliver, refund, or support an order.

We may suspend or cancel an order where reasonably necessary because of:

  • Incomplete information;

  • Inconsistent instructions;

  • Suspected fraud;

  • Payment concerns;

  • Security concerns;

  • Legal restrictions;

  • Delivery limitations; or

  • An inability to verify material information.

Any cancellation, refund, or payment consequences will also be governed by Luvernia’s applicable order, payment, cancellation, refund, delivery, and warranty terms.

10. Cookies and Similar Technologies

Our website and third-party services may use:

  • Cookies;

  • Pixels;

  • Tags;

  • Local storage;

  • Analytics tools;

  • Advertising identifiers; and

  • Similar technologies.

These technologies may be used for:

  • Website operation;

  • Shopping-cart functionality;

  • Checkout;

  • Security;

  • Fraud prevention;

  • Remembering preferences;

  • Measuring website usage;

  • Diagnosing errors;

  • Analysing performance;

  • Marketing attribution;

  • Advertising; and

  • Personalisation.

The technologies used may change as our website, providers, and marketing activities change.

Where required by applicable law, we may provide cookie choices or request consent for non-essential technologies.

You may also be able to manage cookies through your browser, device, or platform settings. Blocking cookies may affect website functionality.

A separate Cookie Notice or cookie-preference tool may provide additional information where available.

11. Marketing Preferences

You may request that we stop sending marketing communications by:

  • Using an unsubscribe mechanism where provided;

  • Replying with a clear opt-out request;

  • Changing available account or communication settings; or

  • Contacting us through the privacy contact details in this Notice.

We may retain limited suppression information to ensure that a marketing opt-out continues to be respected.

Your opt-out may take a reasonable period to process across active systems, campaigns, and service providers.

You may continue to see general or non-personalised advertisements after opting out of direct marketing.

12. Disclosure of Personal Data

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Notice.

Recipients may include the categories below.

12.1 Manufacturers and production providers

Custom-order details may be provided to manufacturers, assemblers, upholsterers, fabric suppliers, quality-control providers, repair providers, and other production partners.

Where practical, we may limit the customer information shared with production providers.

12.2 Delivery and installation providers

We may provide delivery, collection, or installation providers with information such as:

  • Customer name;

  • Recipient name;

  • Telephone number;

  • Delivery address;

  • Location instructions;

  • Product details;

  • Handling requirements;

  • Delivery schedule;

  • Order reference;

  • Amount to be collected; and

  • Other information required to complete or document the service.

12.3 Payment and financial-service providers

We may share relevant information with:

  • Banks;

  • Payment gateways;

  • Card processors;

  • Financial institutions;

  • Refund processors;

  • Financing providers;

  • Fraud-prevention providers; and

  • Payment-reconciliation providers.

12.4 Technology and communication providers

We may use providers for:

  • E-commerce services;

  • Website hosting;

  • Cloud services;

  • Data storage;

  • Email;

  • Messaging;

  • Customer support;

  • Customer-relationship management;

  • Analytics;

  • Advertising;

  • Cybersecurity;

  • Order management; and

  • Business administration.

12.5 Professional advisers and insurers

We may disclose relevant information to:

  • Lawyers;

  • Accountants;

  • Auditors;

  • Tax advisers;

  • Consultants;

  • Insurers;

  • Investigators; and

  • Other professional advisers.

12.6 Government and legal recipients

We may disclose information to:

  • Courts;

  • Tribunals;

  • Regulators;

  • Tax authorities;

  • Law-enforcement authorities;

  • Government departments;

  • Judicial officers;

  • Dispute-resolution bodies; and

  • Other persons authorised by law.

12.7 Corporate transactions

Information may be disclosed in connection with a proposed or completed:

  • Merger;

  • Acquisition;

  • Financing;

  • Investment;

  • Restructuring;

  • Reorganisation;

  • Sale of assets;

  • Transfer of business;

  • Insolvency process; or

  • Change in control.

Disclosure may occur during due diligence, negotiation, completion, or integration, subject to applicable law and any protections reasonably appropriate in the circumstances.

13. Service Providers and Independent Third Parties

Some recipients process information only for services they provide to Luvernia.

Other recipients may determine their own purposes and means of processing and may therefore operate as independent parties under applicable law.

Independent parties may include:

  • Banks;

  • Payment processors;

  • Delivery companies;

  • Social-media platforms;

  • Advertising platforms;

  • Telecommunications providers;

  • Government authorities; and

  • Other third-party services selected or used by you.

Their use of personal data may be governed by their own privacy notices and contractual terms.

Luvernia is not responsible for an independent third party’s privacy or security practices except to the extent responsibility cannot lawfully be excluded.

14. International Processing

Luvernia, its personnel, or its service providers may process, access, or store information in Pakistan or in other countries.

Those countries may have privacy, cybersecurity, data-access, and government-disclosure rules that differ from the rules applicable in your location.

Where applicable law requires a particular safeguard for an international transfer, we will take steps reasonably appropriate to the transfer and the legal requirements that apply to us.

This may depend on:

  • The countries involved;

  • The recipient;

  • The type of information;

  • The purpose of processing;

  • Available contractual arrangements;

  • Technical measures; and

  • Applicable legal requirements.

We do not represent that every country in which a provider operates offers the same legal protections as Pakistan or your country of residence.

15. Retention of Personal Data

We retain personal data for as long as we reasonably consider necessary for the purposes for which it was collected and for related legitimate purposes.

Retention may depend on:

  • The nature of the information;

  • Whether an order was placed;

  • The custom-made nature of a product;

  • Payment and transaction requirements;

  • Warranty and after-sales requirements;

  • Taxation and accounting obligations;

  • Fraud-prevention needs;

  • Chargeback periods;

  • Security requirements;

  • Complaint history;

  • Legal limitation periods;

  • Actual or anticipated disputes;

  • Regulatory requirements;

  • Backup processes; and

  • The cost and technical practicality of deletion.

Different categories of information may therefore be retained for different periods.

We may retain information after a customer relationship ends where reasonably necessary for:

  • Taxation;

  • Accounting;

  • Warranty support;

  • Product identification;

  • Fraud prevention;

  • Payment disputes;

  • Chargebacks;

  • Complaints;

  • Legal claims;

  • Security investigations;

  • Regulatory compliance;

  • Enforcement of agreements; or

  • Other lawful purposes.

A request for deletion does not require us to delete information that we are legally permitted or required to retain.

Information stored in backups, archives, system logs, disaster-recovery systems, or technically isolated environments may remain for a period after deletion from active systems. Such information may be deleted or overwritten through the ordinary operation of those systems.

We may retain anonymised or aggregated information for longer periods where it no longer reasonably identifies an individual.

16. Security

We take security seriously and seek to use administrative, organisational, physical, and technical measures that we consider reasonable and appropriate in light of:

  • The nature of the information;

  • The sensitivity of the information;

  • The way it is processed;

  • The available technology;

  • The size and nature of our business;

  • The likelihood of harm;

  • The cost and practicality of safeguards; and

  • Applicable legal requirements.

Security measures may be changed, replaced, strengthened, or removed as systems, risks, providers, technology, and business requirements change.

For security reasons, we do not publicly disclose detailed information about our internal systems, architecture, access controls, monitoring, vulnerabilities, incident procedures, or other protective measures.

No method of transmission, communication, payment, storage, or electronic processing is completely secure.

We therefore cannot guarantee that:

  • A system will never be compromised;

  • Information will never be intercepted;

  • A service provider will never experience a security incident;

  • Communications will always be confidential;

  • Data will never be lost; or

  • Unauthorised activity will always be prevented or detected.

Nothing in this section excludes responsibility that cannot lawfully be excluded.

17. Your Security Responsibilities

You are responsible for taking reasonable steps to protect your own information, including by:

  • Protecting your devices;

  • Protecting your email and messaging accounts;

  • Using secure passwords;

  • Keeping authentication codes confidential;

  • Avoiding public or insecure networks for sensitive transactions;

  • Confirming that you are communicating with an official Luvernia channel;

  • Reviewing payment instructions carefully;

  • Avoiding unauthorised account sharing;

  • Redacting unnecessary information from documents and screenshots;

  • Notifying us of suspected impersonation; and

  • Keeping delivery and contact information current.

You should independently verify any unexpected request to change Luvernia’s bank account or payment instructions.

Luvernia will not ask you to provide your banking password, PIN, or one-time password.

18. Security Incidents

If we become aware of a suspected security incident involving personal data, we may:

  • Investigate the incident;

  • Take containment or remediation steps;

  • Seek assistance from service providers or advisers;

  • Preserve relevant evidence;

  • Notify relevant authorities;

  • Notify affected individuals; and

  • Take other measures we consider appropriate.

Whether notice is provided, the timing of notice, the recipients, and the information included will depend on:

  • The nature of the incident;

  • Available facts;

  • Risk to affected individuals;

  • Applicable law;

  • Law-enforcement instructions;

  • Security considerations; and

  • The status of the investigation.

We will provide notifications where and when required by applicable law.

19. Your Privacy Requests

Depending on the law that applies to you and to our processing, you may have rights relating to your personal data.

These may include rights to request:

  • Confirmation that we process personal data;

  • Access to certain personal data;

  • Correction of inaccurate information;

  • Deletion of certain information;

  • Restriction of certain processing;

  • Objection to certain processing;

  • Withdrawal of consent;

  • A portable copy of certain information;

  • An opt-out from certain advertising activities; or

  • Review of certain automated decisions.

The existence, scope, conditions, exceptions, and procedures for these rights depend on applicable law.

The inclusion of a possible right in this Privacy Notice does not mean that the right applies in every case or to every individual.

How to submit a request

Privacy requests should be sent to:

Email: akash@luvernia.com

or

Address:
Privacy Contact
Prestige Commerce (Private) Limited
2nd Floor , Plaza No.46, street 144, Block-H commercial, Phase-1, DHA LAHORE, Punjab, Pakistan - 54000

Requests submitted through unofficial social-media accounts, individual employees, sales representatives, delivery personnel, or unrelated channels may not be treated as formally received until they reach the designated privacy contact.

20. Verification of Requests

Before providing access to, correcting, transferring, restricting, or deleting personal data, we may require information reasonably necessary to:

  • Verify your identity;

  • Verify your authority;

  • Locate the relevant information;

  • Understand the request;

  • Protect another person’s information;

  • Prevent fraud;

  • Prevent unauthorised account access; and

  • Maintain security.

Verification requirements may vary depending on the sensitivity of the information and the nature of the request.

We may decline to disclose information where we cannot reasonably verify the requester.

An authorised representative may be required to provide evidence of authority, and we may contact the individual directly where permitted.

Information collected for verification may be used and retained for security, fraud prevention, legal compliance, and documentation of the request.

21. Limits on Privacy Requests

To the extent permitted by applicable law, we may decline, restrict, delay, or charge a lawful fee for a request that is:

  • Unverified;

  • Fraudulent;

  • Abusive;

  • Manifestly unfounded;

  • Excessive;

  • Repetitive;

  • Disproportionately burdensome;

  • Technically infeasible;

  • Contrary to law;

  • Inconsistent with another person’s rights;

  • Subject to legal privilege;

  • Relevant to security or fraud prevention;

  • Relevant to an investigation;

  • Required for taxation or accounting;

  • Required for a contract;

  • Required for warranty support;

  • Required for a legal claim;

  • Contained in protected backups or archives; or

  • Subject to another lawful exception.

We will respond within the period required by applicable law, where a legally prescribed response period applies.

We do not promise a fixed response period where no fixed period applies.

22. Automated Tools

We may use automated or partly automated tools for purposes such as:

  • Fraud screening;

  • Security monitoring;

  • Payment-risk assessment;

  • Website personalisation;

  • Product recommendations;

  • Advertising;

  • Customer segmentation;

  • Order prioritisation;

  • Analytics; and

  • Operational decision support.

Automated outputs may not always be accurate and may be reviewed, supplemented, or overridden by personnel.

Where applicable law provides a right relating to a decision based solely on automated processing, we will provide that right to the extent legally required.

23. Children

Luvernia’s products and commercial services are intended primarily for adults.

We do not knowingly seek to create commercial accounts for, enter into custom-order contracts directly with, or direct personalised marketing specifically to children where doing so would be unlawful.

A person under the legal age to enter into a binding transaction should involve a parent or legal guardian.

If you believe a child has provided personal data to us without appropriate authority, you may contact us.

We may request information necessary to verify the request and determine the appropriate action.

24. Customer Materials and User-Generated Content

You may provide photographs, videos, reviews, testimonials, floor plans, drawings, measurements, designs, comments, or other materials.

We may use those materials for the purpose for which they were submitted and for reasonably related purposes, including:

  • Preparing quotations;

  • Confirming specifications;

  • Manufacturing;

  • Quality control;

  • Delivery planning;

  • Installation;

  • Customer support;

  • Warranty administration;

  • Dispute resolution;

  • Fraud prevention;

  • Internal training;

  • Legal compliance; and

  • Record management.

We will not intentionally use identifiable photographs of a customer’s private interior in public marketing without permission, unless another lawful basis clearly permits the use.

Where you provide content containing another person, you are responsible for obtaining any permission required to provide and use that content.

Content posted publicly on social-media platforms may remain subject to the relevant platform’s policies and public visibility settings.

25. Aggregated and De-Identified Information

We may create statistical, aggregated, anonymised, or de-identified information from information collected through our business.

We may use such information for:

  • Analytics;

  • Product planning;

  • Demand forecasting;

  • Business intelligence;

  • Performance measurement;

  • Research;

  • Security;

  • Fraud modelling;

  • Service improvement; and

  • Other lawful business purposes.

Where information no longer reasonably identifies an individual, we may retain and use it without applying the same restrictions that apply to personal data.

We may test whether de-identification remains effective where reasonably necessary for security, quality assurance, or legal compliance.

26. Third-Party Websites and Platforms

Our website, advertisements, messages, or social-media pages may contain links to third-party services.

Third-party services may include:

  • Social-media platforms;

  • Banks;

  • Payment services;

  • Maps;

  • Messaging platforms;

  • Delivery-tracking systems;

  • Review platforms;

  • Applications; and

  • Other websites.

Luvernia does not control the privacy, security, availability, content, or data practices of independent third parties.

You should review the relevant third party’s privacy notice and terms before providing information.

27. Legal Requests and Protection of Rights

We may preserve, use, or disclose information where we reasonably believe in good faith that doing so is necessary or appropriate to:

  • Comply with applicable law;

  • Respond to apparently valid legal process;

  • Respond to a court or government authority;

  • Investigate suspected unlawful conduct;

  • Protect a person from harm;

  • Protect Luvernia, Prestige Commerce, customers, personnel, or third parties;

  • Detect or prevent fraud;

  • Protect systems and property;

  • Obtain legal advice;

  • Enforce an agreement;

  • Recover an amount owed;

  • Resolve a dispute; or

  • Establish, exercise, or defend a legal claim.

Where appropriate and legally permitted, we may seek clarification, narrow a request, object to a request, or require appropriate legal authority before disclosure.

We are not required to notify an individual of a disclosure where notification is prohibited by law, would prejudice an investigation, would create a security risk, or is otherwise not reasonably appropriate.

28. Changes to This Privacy Notice

We may amend this Privacy Notice from time to time to reflect changes in:

  • Our products;

  • Our services;

  • Our website;

  • Our technology;

  • Our providers;

  • Our business model;

  • Our processing activities;

  • Legal requirements; or

  • Regulatory guidance.

The revised version will be posted with an updated “Last Updated” date.

Changes may take effect when published unless applicable law requires another process.

Where legally required, we may provide additional notice or request consent before using personal data for a materially different purpose.

Administrative, explanatory, formatting, contact-detail, or non-material changes may be made without individual notice.

You should review this Privacy Notice periodically.

29. Complaints

You may submit a privacy concern to our designated privacy contact.

We may request information necessary to:

  • Understand the concern;

  • Verify identity;

  • Locate relevant records;

  • Investigate the matter; and

  • Provide an appropriate response.

Where applicable law gives you the right to complain to a court, regulator, consumer-protection authority, data-protection authority, or other competent body, nothing in this Privacy Notice prevents you from exercising that right.

30. Language

This Privacy Notice may be translated into another language for convenience.

Unless prohibited by applicable law, the English version will prevail where there is an inconsistency, ambiguity, or difference in interpretation between versions.

31. Severability and Interpretation

If any provision of this Privacy Notice is found to be unlawful, invalid, or unenforceable, that provision will apply to the maximum extent legally permitted and the remaining provisions will continue to apply.

Headings are included for convenience and do not limit the meaning of a provision.

The words “including,” “such as,” and similar expressions mean “including without limitation.”

References to a law include amendments, replacements, subordinate legislation, and legally binding requirements made under that law, where applicable.

Any limitation, reservation, discretion, exclusion, or qualification in this Privacy Notice applies only to the maximum extent permitted by applicable law.

32. Contact Information

For questions or requests concerning this Privacy Notice or Luvernia’s handling of personal data, contact:

Privacy Contact
Prestige Commerce (Private) Limited
Trading as Luvernia

Registered office: 2nd Floor , Plaza No.46, street 144, Block-H commercial, Phase-1, DHA LAHORE, Punjab, Pakistan - 54000
Privacy email: akash@luvernia.com
Customer-support email: support@luvernia.com
Telephone or WhatsApp: +923336666280