PRIVACY POLICY

1. Introduction

BYTEVOLVE COMMERCE PRIVATE LIMITED ("Velour Man", "we", "us", "our"), operator of https://velourman.store, is committed to protecting the privacy and personal data of our customers and website visitors. This Privacy Policy explains what personal data we collect, how we use and store it, your rights regarding your data, and how we comply with applicable Indian data protection laws including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

By using our website or placing an order, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website.

2. Data We Collect

We collect only the personal data necessary to process your orders and provide you with a good shopping experience:

2.1 Information You Provide Directly: Full name, email address, phone number, shipping address (including city, state, and pincode), order notes, and any information submitted through our contact form.

2.2 Information Collected Automatically: IP address, browser type and version, device type, operating system, pages visited on our website, time and date of visit, referral source, and general usage patterns. This data is collected through server logs and analytics tools.

2.3 Order-Related Information: Products purchased, order amounts, payment method selected (COD or UPI), order status, and delivery information.

2.4 Information We Do NOT Collect: We do not collect or store credit card numbers, debit card numbers, UPI PINs, bank account details, or any financial credentials. All electronic payment processing is handled by third-party payment gateways in compliance with RBI Tokenisation Guidelines.

3. Purpose of Data Collection

We use your personal data for the following lawful purposes:

3.1 Order Fulfilment: Processing, confirming, shipping, and delivering your orders; generating invoices; communicating order status updates and tracking information.

3.2 Customer Service: Responding to your inquiries, resolving complaints, and providing support related to orders, returns, or general questions.

3.3 Website Operations: Ensuring the website functions properly, diagnosing technical issues, preventing fraud, and maintaining security.

3.4 Legal Compliance: Complying with applicable laws, regulations, and legal obligations, including GST reporting and tax compliance.

3.5 Communication: Sending order confirmation emails, shipping notifications, and responses to contact form submissions. We do not send unsolicited marketing emails without your explicit consent.

4. Legal Basis for Processing (DPDP Act Compliance)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on the following grounds:

4.1 Consent: By placing an order or submitting a contact form, you provide your informed consent for us to process your data for the stated purposes. You may withdraw consent at any time by contacting us.

4.2 Legitimate Use: Processing necessary for the performance of a contract (your order), compliance with legal obligations (tax reporting), or for our legitimate interests (fraud prevention, website security) as permitted under the DPDP Act.

5. Data Storage and Security

5.1 Storage: Your personal data is stored on secure servers hosted by our hosting provider. Data is retained only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are retained for a period of 7 years to comply with Indian tax and commercial laws.

5.2 Security Measures: We implement industry-standard security measures to protect your data, including SSL/TLS encryption for data transmission, secure database storage with access controls, password hashing for administrative accounts, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5.3 Data Breach: In the event of a personal data breach that is likely to cause harm, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only as necessary:

6.1 Shipping and Logistics Partners: Your name, phone number, and shipping address are shared with our delivery partners solely for the purpose of delivering your order.

6.2 Payment Processors: If you use UPI payment, your transaction is processed by a third-party payment gateway. We share only the minimum information required to complete the transaction.

6.3 Legal Authorities: We may disclose your data if required by law, regulation, legal process, or enforceable governmental request.

6.4 Service Providers: We may share data with trusted service providers (such as email service providers and hosting companies) who assist us in operating the website, subject to confidentiality obligations.

7. Cookies and Tracking

Our website uses cookies and similar technologies for essential website functionality (session management, cart persistence) and analytics (understanding how visitors interact with our site through Google Analytics). We use localStorage for cart functionality, which stores data locally on your device and is not transmitted to external servers. You can control cookie settings through your browser preferences.

8. Your Rights (Under DPDP Act, 2023)

As a data principal under the DPDP Act, you have the following rights:

8.1 Right to Access: You may request information about the personal data we hold about you and how it is being processed.

8.2 Right to Correction: You may request correction of any inaccurate or incomplete personal data.

8.3 Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records (such as order and tax records).

8.4 Right to Withdraw Consent: You may withdraw your consent for data processing at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8.5 Right to Grievance Redressal: If you are not satisfied with our response to your data request, you have the right to file a complaint with the Data Protection Board of India.

To exercise any of these rights, please contact us at info@velourman.store. We will respond to your request within 30 days.

9. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child without parental consent, we will take steps to delete such data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of the website after any changes constitutes acceptance of the revised policy.

11. Grievance Officer

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the following Grievance Officer is designated:

12. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us: