Privacy Policy
Privacy Policy
Privacy Policy
Who We Are and Scope
Who We Are and Scope
LIOFANT is a brand operated by Bullseye Viksitra India Private Limited ("LIOFANT", "we", "us" or "our"). This Privacy Policy applies when you visit www.liofant.com, create an account, place an order, contact us, submit an enquiry through our forms, subscribe to communications, or otherwise interact with our online store and related customer-support channels.
Our store is built on Zoho Commerce and may use other service providers for payments, communications, analytics, hosting, customer support and delivery. This policy describes our own practices and the categories of parties with whom information may be processed.
Information We Collect
Information We Collect
- Identity and contact details: name, mobile number, email address, billing and delivery address, and business/contact-person details.
- Account details: username or account identifiers, saved addresses, wishlist and account preferences. Authentication credentials are handled through the e-commerce platform and should not be shared with us by email or chat.
- Order and transaction details: products viewed or ordered, quantities, prices, discounts, delivery status, returns, refunds, invoices, GST/business information where supplied, and customer-support history.
- Payment-related information: payment method, transaction reference and status. Full card, UPI or banking credentials are generally collected and processed by the payment service provider; LIOFANT does not require you to send such credentials directly to us.
- Website and device information: IP address, browser/device type, operating system, referring pages, page interactions, timestamps, cookies and similar technologies.
- Enquiry information: the current Contact Liofant form requests Name and Phone as required fields and allows Email and Message information; other forms may collect only the fields stated at the point of collection.
- Communications and preferences: emails, calls, WhatsApp or other messages with us, feedback and marketing preferences.
How We Collect Information
How We Collect Information
We collect information directly from you, automatically through the website and cookies, and from service providers involved in a transaction (for example, payment confirmation from a payment provider or delivery status from a courier). We may also receive information from lawful business enquiries, referrals or other sources where you would reasonably expect such use.
Why We Use Information
- To create and manage accounts and remember your preferences;
- To process orders, payments, invoices, shipping, delivery, returns, exchanges and refunds;
- To respond to product, project, warranty, service and grievance enquiries;
- To prevent fraud, misuse and security incidents and to protect our customers, website and business;
- To maintain business, tax, accounting and regulatory records and comply with lawful requests;
- To improve product selection, website performance, search, customer experience and internal analytics; and
- To send offers, product news or marketing only as permitted by applicable law and your communication preferences. You may opt out of promotional messages without affecting transactional communications.
Sensitive Personal Data
Certain information such as passwords and financial information may qualify as sensitive personal data or information under applicable Indian information-technology rules. We seek to collect only what is reasonably necessary for the relevant service. Payment credentials are intended to be processed by the payment service provider, and authentication is managed through the platform. Please do not send passwords, CVVs, OTPs, PINs or unnecessary financial information to LIOFANT by email, form or messaging service.
Cookies and Similar Technologies
We may use essential cookies needed for sign-in, cart, checkout, fraud prevention and website operation; preference cookies that remember choices; and analytics or advertising technologies where enabled. Non-essential analytics/advertising technologies should be activated in accordance with applicable consent requirements. Browser settings can block cookies, but essential website functions may then not work correctly.
Sharing and Service Providers
We do not sell personal information as a standalone product. We may share or make information available only as reasonably necessary with:
1.Zoho and related e-commerce/form/technology providers that host or operate parts of the store and contact forms;
2.payment gateways, banks and payment processors to authorise, reconcile, refund and secure transactions;
3.couriers, freight providers, warehouses and logistics partners to deliver or collect goods;
4.IT, security, analytics, communications, customer-support and professional advisers acting for legitimate business or compliance purposes;
19.manufacturers, authorised service centres or suppliers where needed for a warranty, authenticity or technical-support request;
5.government, regulatory, law-enforcement, judicial or tax authorities where disclosure is required or permitted by law; and
6.A successor or acquirer in a lawful merger, reorganisation, sale or transfer of the business, subject to appropriate safeguards.
Our service providers may process information from locations in or outside India. Where cross-border processing occurs, we will apply the requirements of Indian law that are in force and applicable at the relevant time.
Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, for customer service, fraud prevention, dispute management and legitimate business records, and for any longer period required by tax, accounting, corporate, product-safety or other applicable law. Retention periods may therefore differ by record type. When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it, subject to backups and legal holds.
Security and Cyber Incidents
We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information and our business, including access controls, security practices required by applicable law and reliance on established service providers. No internet transmission, cloud service, payment environment or storage system is completely secure, and absolute security cannot be guaranteed. If you believe your account or personal information has been compromised, contact us promptly.
If we become aware of a suspected cyber-security or personal-data incident, we may take steps appropriate to the circumstances to contain, investigate and remediate it; preserve relevant records; reset or restrict credentials; temporarily suspend affected website functions; work with Zoho Commerce, payment providers, hosting/cloud providers and other processors; and cooperate with CERT-In, law-enforcement, regulators or affected persons. We will make any incident report or notification required by the law in force and applicable to LIOFANT at that time.
You are responsible for keeping your devices, email/phone access and account credentials secure and for not sharing OTPs, passwords, PINs or other authentication secrets. User-caused cyber/data incidents are addressed under Section 15 below; events genuinely beyond reasonable control are addressed under Section 16. Neither section removes a legal security, reporting or remediation duty that applicable law requires LIOFANT itself to perform.
Your Choices and Requests
Subject to the law applicable at the time of your request, you may ask us to review or correct information you provided, withdraw consent where processing depends on consent, opt out of marketing, close your account, or request access, correction, updating or erasure where such rights are legally available. Some information may need to be retained to complete an order, meet legal obligations, establish or defend claims, prevent fraud or maintain required records.
The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 have phased commencement. LIOFANT will apply rights, notices, safeguards and grievance mechanisms required by those instruments as the relevant provisions become legally operative and applicable.
Children
LIOFANT sells industrial, construction, maintenance and related products and is not intended for purchase by children. We do not knowingly solicit personal data from children for independent purchasing. If we learn that a child's personal data has been collected contrary to applicable law, we will take appropriate steps to address it.
Third-Party Links
Our website may link to manufacturer, payment, logistics, social-media or other third-party sites. Their privacy practices are governed by their own notices. We encourage you to review them before providing information.
Changes to This Policy
We may update this Privacy Policy when our practices, service providers, features or legal obligations change. The current version will be posted on www.liofant.com with the revised date. Where required, we will provide additional notice or obtain consent for material changes.
Questions, Complaints and Grievances
You may contact Customer Care or the Grievance Officer using the details below. Consumer complaints should be acknowledged within the period required by the Consumer Protection (E-Commerce) Rules and handled within the applicable statutory timeframe. Privacy grievances will be addressed within the timeframe required by the law in force at the relevant time.
Indemnity and Protection of LIOFANT Parties
For these policies and the LIOFANT Terms & Conditions, "Protected Parties" means Bullseye Viksitra India Private Limited; LIOFANT; every other brand owned, licensed or lawfully operated by the Company; its past, present and future holding, subsidiary, affiliate or group entities (where applicable); and their respective founders, promoters, shareholders (in that capacity), directors, key managerial personnel, officers, employees, authorised representatives, agents, professional advisers, contractors, successors and permitted assigns. Relevant licensors, technology and cloud providers, payment providers, suppliers, manufacturers, warehouses, carriers and logistics partners are also Protected Parties only to the extent a claim against them arises from or is materially connected with a user's breach, misuse, unlawful conduct or the LIOFANT transaction concerned.
The full indemnity in the LIOFANT Terms & Conditions is incorporated into this Privacy Policy. Without limiting it, to the fullest extent permitted by law you agree to indemnify the Protected Parties against third-party claims, direct losses and reasonable legal or professional costs to the extent caused by: providing personal data, confidential material or account credentials without lawful authority; unlawful scraping, collection, upload, disclosure or use of another person's data; malware, credential sharing, impersonation, attempted unauthorised access or other security abuse attributable to you; or instructions, content or data supplied by you that cause LIOFANT to infringe another person's privacy, confidentiality or intellectual-property rights where LIOFANT reasonably relied on your authority.
This indemnity does not transfer to you a statutory privacy, security, breach-reporting or remediation duty that law requires LIOFANT itself to bear, and it does not protect a Protected Party from its own fraud or wilful misconduct. Consumer liability is limited to what is lawful, reasonable and proportionate. For business users, the indemnity survives account closure and termination for events occurring before or during use.
To the fullest extent permitted by law, an ordinary contractual claim arising solely from a LIOFANT website transaction or Company obligation shall be pursued against Bullseye Viksitra India Private Limited and not personally against a founder, promoter, shareholder, director, officer, employee or representative merely because of that person's office, status or relationship with the Company. This does not protect any person from liability that applicable law imposes personally for that person's own fraud, wilful misconduct or other conduct that cannot lawfully be excluded.
Force Majeure
For this Privacy Policy, a Force Majeure Event has the meaning and scope set out in the LIOFANT Terms & Conditions and includes qualifying natural disasters, war/civil disruption, governmental or legal restrictions, major power/telecommunications/internet/DNS/cloud/data-centre failures, payment/e-commerce platform outages, and sophisticated ransomware, denial-of-service, zero-day, third-party compromise or other cyber incidents beyond LIOFANT's reasonable control that could not reasonably have been prevented by safeguards legally required of LIOFANT.
To the fullest extent permitted by law, LIOFANT and the Protected Parties will not be contractually liable for delay, temporary service unavailability or loss caused solely by a Force Majeure Event. LIOFANT may temporarily suspend affected website, account, support or processing functions; isolate systems; reset/restrict credentials; use alternative technology or service providers; or take other reasonable containment and continuity measures.
LIOFANT will take commercially reasonable mitigation steps. Force majeure does not waive or extend, by contract, any mandatory security, incident-reporting, notification, data-subject rights, regulatory, consumer or remediation obligation that applicable law requires within a fixed period, and it does not exclude liability that applicable law makes non-excludable.
Governing Law, Mediation, Arbitration and Jurisdiction
These policies, the Terms and any transaction with LIOFANT are governed by the laws of India, without prejudice to any mandatory law that applies to a consumer or transaction.
Good-faith resolution. Before commencing contractual proceedings, a party should send a written Dispute Notice describing the dispute and relief sought to the other party (a notice to LIOFANT may be sent to the Grievance Officer/contact details stated below). Senior or authorised representatives will attempt in good faith to resolve the dispute for 15 business days after receipt. This step does not prevent urgent interim relief, a statutory complaint, recovery action expressly preserved by law, or a filing reasonably necessary to preserve limitation.
Mediation. If a business/commercial dispute is not resolved by negotiation, the parties shall attempt confidential mediation in Bengaluru, Karnataka, before arbitration. The mediator will be independent and mutually agreed within 10 business days; if no mediator is agreed within that period, or mediation does not settle the dispute within 30 calendar days after appointment (unless extended by written agreement), the mediation step is deemed exhausted. Mediation may be conducted physically, online or in hybrid form. The Mediation Act, 2023 will apply only to the extent its relevant provisions have been brought into force and are applicable at that time; otherwise the parties may follow mutually agreed institutional or mediator procedures. No party is required to accept a settlement.
B2B arbitration. Any dispute arising out of or relating to these policies, the Terms, a website transaction, quotation or order that is not settled through the process above and is legally capable of arbitration shall, where the purchaser acts wholly for business or commercial purposes, be finally resolved by arbitration under the Arbitration and Conciliation Act, 1996, as amended. The arbitration will be administered by the Arbitration & Conciliation Centre - Bengaluru (Domestic & International), an initiative of the High Court of Karnataka, under its rules then in force, by a sole arbitrator appointed in accordance with those rules. The juridical seat and legal place of arbitration shall be Bengaluru, Karnataka; the language shall be English. Hearings may be conducted online or at another convenient venue without changing the Bengaluru seat. If the Centre is unavailable or declines administration, the arbitration shall proceed before a sole independent arbitrator jointly agreed by the parties, failing which appointment may be sought under section 11 of the 1996 Act. LIOFANT will not have a unilateral right to appoint the sole arbitrator.
Interim relief, confidentiality and costs. A party may seek interim, conservatory or protective relief from a competent court or arbitral tribunal, including under sections 9 and 17 of the Arbitration and Conciliation Act, 1996, without waiving arbitration. Mediation and arbitration will be kept confidential to the extent required by applicable law and the applicable rules, subject to disclosures needed for professional advice, regulatory compliance, enforcement or challenge. Arbitration costs will be determined in accordance with applicable law and the institutional rules; no pre-dispute term requires one party to bear all arbitration costs regardless of outcome.
Consumers and mandatory statutory forums. Nothing in this dispute clause restricts a consumer from approaching a Consumer Commission, the National Consumer Helpline or any other statutory authority/forum having jurisdiction, nor does it compel a consumer to arbitrate where applicable law leaves that choice to the consumer. If a consumer elects arbitration after a dispute has arisen, the Bengaluru arbitration framework above may be used to the extent lawful and agreed. Nothing here limits any mandatory right or forum available to LIOFANT or a qualifying supplier under the Micro, Small and Medium Enterprises Development Act, 2006, or any other overriding statutory mechanism.
Jurisdiction. For proceedings arising from an arbitration seated in Bengaluru, the courts at Bengaluru, Karnataka having supervisory jurisdiction under the Arbitration and Conciliation Act, 1996 shall have exclusive jurisdiction. For non-arbitrable non-consumer court disputes, the competent courts at Bengaluru shall have exclusive jurisdiction to the extent the parties may lawfully agree and those courts otherwise have jurisdiction. Statutory consumer, regulatory, cyber/data-protection, criminal and other non-waivable jurisdiction rules remain unaffected.
Contact and Grievance Details
Customer care: care@liofant.com | +91 90366 54393
Grievance Officer: Naziya Gheewala, Co-Founder
Grievance email/phone: care@liofant.com | +91 90366 54393
Registered office / principal geographic address: No. 30/2, Dominion Business Centre, 2nd Cross, SGN Layout, Lalbagh Road, Bengaluru. Karnataka. India. Pin: 560027.
Corporate Identity Number (CIN): U46633KA2025PTC204156
GSTIN: 29AANCB6689A1Z9
Legal Framework Considered
This policy is drafted for an India-facing e-commerce website and should be read subject to applicable law as amended and brought into force from time to time. Key instruments considered include:
Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and CERT-In Directions dated 28 April 2022 under section 70B(6), including applicable cyber-incident reporting and log-retention requirements.
Digital Personal Data Protection Act, 2023; Digital Personal Data Protection Rules, 2025; and the 13 November 2025 commencement notification (phased commencement).
Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020, as amended.
Indian Contract Act, 1872, including sections 32, 56 and 124-125 as applicable to force majeure/contingency, impossibility and contractual indemnity.
Arbitration and Conciliation Act, 1996, as amended; Mediation Act, 2023 only to the extent relevant provisions are in force and applicable; and mandatory consumer/statutory forums preserved as stated above.
