Effective Date: [Insert Date]
Last Updated: [Insert Date]
At Vardhaman.shop, we are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and relevant data protection laws. This policy outlines how we collect, use, store, and protect your personal data when you interact with our e-commerce platform, whether by purchasing products, registering an account, or using other services available on our website.
By using our website, you agree to the collection and use of your personal data as described in this policy.
1. Data Controller
Vardhaman.shop is the data controller for the purposes of GDPR, meaning we are responsible for how your personal data is processed and for ensuring it is handled in compliance with the law.
2. Personal Data We Collect
We may collect the following types of personal data from you:
- Contact Information
Full name, email address, phone number, and postal address.
- Payment Information:
Credit/debit card details or other payment information required to complete transactions.
- Transaction Data:
Details of the products you purchase, payment history, and order preferences.
- Account Information:
Username, password, and any preferences or settings you create within your account.
- Usage Data:
Information on how you use our website, such as browsing behavior, IP address, and device information, gathered through cookies and similar technologies.
3. How We Use Your Data
We process your personal data for the following purposes:
- Order Processing:
To complete your purchases, process payments, and deliver goods.
- Account Management:
To manage your account, handle returns and exchanges, and provide customer support.
- Communication:
To send order confirmations, shipping updates, and promotional materials (with your consent).
- Improving Services:
To analyze usage patterns and improve our website, products, and services.
- Compliance:
To comply with legal obligations, including accounting and tax requirements.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual Necessity:
Processing is necessary to fulfill our contract with you (e.g., processing orders, payments, and customer service).
- Legitimate Interests:
Processing is necessary for our legitimate interests, such as improving customer experience and marketing, provided your rights do not override these interests.
- Consent:
Where required, we will ask for your explicit consent before collecting certain data, such as for marketing purposes.
- Legal Obligation:
We process data as required to comply with legal obligations (e.g., tax records, fraud prevention).
5. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or for as long as required by applicable laws or regulations. Once the data is no longer needed, we will securely delete or anonymize it.
6. Sharing Your Data
We do not sell or rent your personal data to third parties. However, we may share your data with trusted service providers and partners who assist in the operation of our website and business, such as:
- Payment processors:
To facilitate payment transactions.
- Delivery services:
To ensure timely delivery of your orders.
- Marketing partners:
To send you relevant marketing communications, if you have consented to receive them.
7. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR:
- Right to Access:
You have the right to request copies of your personal data.
- Right to Rectification:
You can request corrections or updates to your personal data if it is inaccurate or incomplete.
- Right to Erasure:
You may request the deletion of your personal data in certain circumstances.
- Right to Restrict Processing:
You may request that we limit the way we process your data.
- Right to Object:
You have the right to object to certain types of data processing, including marketing.
- Right to Data Portability:
You can request to receive your personal data in a structured, commonly used, and machine-readable format and transfer it to another organization.
- Right to Withdraw Consent:
You can withdraw your consent at any time where we rely on consent to process your data.
To exercise any of these rights, please contact us at +91 91122 30606.
8. Data Security
We employ industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, firewalls, secure servers, and regular security audits. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
9. Cookies and Tracking Technologies
Our website uses cookies and other tracking technologies to enhance your user experience, analyze usage patterns, and deliver personalized content and advertisements. You can manage cookie settings through your browser, but please note that disabling cookies may affect the functionality of the website.
10. International Transfers of Data
If you are located outside of India, your personal data may be transferred and processed in India or other countries where we operate. We will ensure that any international data transfers comply with applicable data protection laws and that adequate safeguards are in place.
11. Complaints
If you believe that we have violated your rights under the GDPR or any other data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In India, this would be the Data Protection Authority of India.
11. Changes to This Policy
We may update this GDPR Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will post the updated policy on this page and revise the "Effective Date" at the top of the policy. We encourage you to review this policy periodically.
If you have any questions or concerns about this GDPR Policy, please contact us at:
Vardhaman Shop
Pune, India
Email: hello@vardhaman.shop
Phone: +91 91122 30606
Website: https://vardhaman.shop