Privacy Policy

Leumas Private Limited ("the Company," "we," "us," or "our") operates lemuasware.com, a contract development and manufacturing (CDMO) platform for supplement and nutraceutical brands. This Privacy Policy describes the personal data collected through the platform and website, the reasons and methods for using and protecting it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian law.

Supplement and nutraceutical brands provide proprietary formula specifications and batch parameters through our platform. We handle this information with the care used in physical manufacturing. This policy covers both personal data and confidential business data, explaining how we handle information clients share.

1. About Us

The Company acts as a Data Fiduciary under the DPDPA for personal data processed through lemuasware.com. Our physical manufacturing facility and registered office are located at:

Leumas Private Limited
Cyber Towers Block A, Madhapur, HITEC City
Hyderabad, Telangana 500081, India
Email: [email protected]
Phone: +91 40 4020 6350

The Company manufactures supplements and nutraceuticals under contract for brand clients. Our batch scheduling system plans production runs for capsules, powder blends, liquids, softgels, and gummies. Providing this service requires processing the limited personal data described below.

2. What We Collect

Through lemuasware.com and our production management system, we collect these information categories:

• Account and contact data: Name, work email address, job title, and company or brand name provided when you register for a member account or submit a batch inquiry form.
• Batch specification data: Formula specifications, ingredient declarations, target batch parameters, requested dosage form, quantity targets, and label compliance requirements submitted for a production order or formulation inquiry. This describes your product and is confidential business data, as explained in Section 5.
• Production and correspondence data: Communication records, batch order confirmations, Certificate of Analysis delivery records, and quality-documentation correspondence between your brand and our production team.
• Website usage data: IP address, browser type and version, operating system, pages visited on lemuasware.com, referral URL, session duration, and comparable technical signals collected automatically during site visits.
• Inquiry and form data: Details sent through our contact form, including the inquiry type, such as batch request, formulation inquiry, quality question, or partnership, together with any free-text description.

In the ordinary course of operating lemuasware.com, we do not collect sensitive personal data under the DPDPA, including health data, biometric data, financial account credentials, or similar categories. If a particular production engagement requires such data, we will address it in a separate written agreement with the relevant client.

3. How We Use Information

We process personal data for the purposes below, relying on consent, performance of a contract with you, or a legitimate interest that does not outweigh your privacy rights:

• To receive, review, and fulfil batch production orders and formulation inquiries submitted through the platform.
• To create and maintain your member account and deliver production documentation (batch records, Certificates of Analysis, traceability reports) to you.
• To update you on batch status, quality results, scheduling timelines, or departures from agreed specifications.
• To operate and enhance lemuasware.com, diagnose technical issues, understand page usage, and improve the batch inquiry and order management interface.
• To satisfy Indian legal obligations, including the DPDPA, the Information Technology Act 2000 (IT Act), applicable FSSAI regulations, and lawful regulatory requests made to us.

We do not use personal data for automated individual decisions producing legal or similarly significant effects. We also do not sell or rent it to third parties for marketing.

4. Sharing

We share information only as set out below:

• Ingredient and raw material suppliers: Relevant batch specification data is shared to source materials for your production run, limited to what each supplier needs to fulfil its part of the order.
• Third-party analytical testing laboratories: Retain samples and specification data go to accredited laboratories conducting identity testing, potency assays, microbial testing, and heavy-metal testing for you. Each laboratory operates under a written service agreement.
• Logistics and courier providers: We provide name, delivery address, and order reference to freight and courier providers so finished products can be shipped to your specified destination.
• Technology sub-processors: Cloud infrastructure and software tools support lemuasware.com and the batch management system. These processors follow our instructions under contracts containing data protection terms.
• Regulatory and law enforcement authorities: We disclose information to government agencies and courts when applicable Indian law or a lawful order requires it, and only as required.

We do not share personal data or formula specification data with other manufacturing clients or expose it for competitive purposes.

5. Formula Specification Confidentiality

Formula specifications, ingredient lists, and batch parameters submitted through lemuasware.com are proprietary product information. The Company treats them as confidential manufacturing information, in addition to and separately from personal-data duties under the DPDPA.

We do not use a client's formula data to develop competing products. We disclose formula specifications only as strictly necessary to manufacture, test, and deliver the ordered batch. We do not use client formula data to train machine-learning or artificial intelligence models without the client's explicit prior written consent.

6. Retention and Security

We keep personal data for as long as needed for the purposes in this policy, then for periods required by applicable law or our quality-management obligations. Specifically:

• Account data remains during the account and for a reasonable period after closure to answer follow-up questions about historical batch orders.
• Batch records, Certificates of Analysis, and production documents are kept under GMP-aligned quality system requirements, which typically call for multi-year retention of manufactured-product records.
• Analytics-based website usage data is retained in anonymised or aggregated form for up to 13 months, then deleted or further anonymised.

We use technical and organisational safeguards suited to the sensitivity and volume of personal data processed. These include production-management access controls, encrypted storage and transmission, and staff training on DPDPA data-handling duties.

7. Your DPDPA 2023 Rights

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have these rights concerning personal data we hold about you:

• Right of access: You may ask for a summary of your personal data that we process and the purposes of that processing.
• Right to correction and erasure: You may ask us to correct inaccurate or incomplete personal data and to erase data no longer needed for its collection purpose, subject to applicable-law retention duties.
• Right to withdraw consent: If processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfulness before withdrawal.
• Right to grievance redressal: You may have complaints about our personal-data handling addressed by our Grievance Officer, as described in Section 8.
• Right to nominate: You may nominate another individual to exercise your DPDPA rights for you if you die or become incapacitated.

To exercise these rights, email [email protected]. We respond within a reasonable period, typically 30 days after receiving a complete request. We may require identity verification before acting.

8. Grievance Officer

Under the Information Technology Act 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the Digital Personal Data Protection Act, 2023, the Company has appointed a Grievance Officer for personal-data complaints and queries:

Grievance Officer: Nitesh Kumar
Leumas Private Limited
Cyber Towers Block A, Madhapur, HITEC City
Hyderabad, Telangana 500081, India
Email: [email protected]
Phone: +91 40 4020 6350

The Grievance Officer will acknowledge complaints or grievances within 48 hours and, where possible, resolve them within 30 days of receipt.

9. Cross-Border Transfers

Our operations are in India. If technology sub-processors store or process data outside India, we ensure transfer to a country providing adequate personal-data protection or use appropriate contractual safeguards, consistent with rules notified under the DPDPA.

10. Cookies

We use cookies on lemuasware.com to run the site and measure usage. Our Cookie Policy explains the cookies used and how to manage them.

11. Changes and Contact

This policy may be revised to reflect changes in our data practices or applicable law. Material revisions will appear with an updated "Last updated" date at the top of this page.

Leumas Private Limited
Cyber Towers Block A, Madhapur, HITEC City
Hyderabad, Telangana 500081, India
Email: [email protected]
Phone: +91 40 4020 6350