Privacy Policy
This Privacy Policy describes how LetsXott ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website. We are committed to keeping your data safe and being fully transparent about how we use it.
We may collect the following types of information:
- Usage data: Pages visited, time spent, referring URL, browser type and device information — collected automatically via server logs.
- Newsletter subscriptions: Your email address if you choose to subscribe to our newsletter.
- Contact form submissions: Your name, email address, and message content when you reach out to us.
- Payment information: If you make a payment, transaction details are handled securely by Razorpay. We do not store card or banking details on our servers.
We use the information we collect to:
- Provide, operate, and continuously improve our website and content quality.
- Send newsletters and updates to subscribers — only if you explicitly opted in.
- Respond to enquiries submitted via our contact form.
- Analyse traffic patterns to improve user experience and page performance.
- Detect and prevent fraudulent activity or abuse of our services.
We do not sell, rent, or trade your personal information to third parties under any circumstances.
We use cookies to maintain your session, remember your preferences (such as dark/light mode), and gather anonymised analytics data. By continuing to use our site, you consent to our use of cookies.
You may disable cookies in your browser settings at any time. Please note that some features of the site may not function correctly without cookies enabled.
We use the following third-party services that may process your data according to their own privacy policies. We encourage you to review each provider's policy separately.
We implement industry-standard security measures to protect your information, including:
- HTTPS encryption for all data transmitted to and from our website.
- Secure HTTP headers and rate limiting to prevent abuse.
- Data sanitisation to prevent injection attacks.
- Password hashing using bcrypt with 12 salt rounds.
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to taking every reasonable precaution.
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete information.
- Deletion — request that we delete your personal data from our systems.
- Unsubscribe — opt out of our newsletter at any time using the unsubscribe link in any email.
To exercise any of these rights, please reach out to us through our contact page.
If you have any questions, concerns, or requests regarding this Privacy Policy, please get in touch with us. We aim to respond to all privacy-related enquiries within 48 hours.