Privacy Policy

Last updated: 22 August 2026

This policy explains what personal data Vachansutra collects when you use vachansutra.com, why we collect it, and what rights you have over it. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Who is responsible for your data

Vachansutra, 21/31, Mall Ville, Lucknow Road, 1st Floor, Delhi – 110054, India, is the Data Fiduciary. Contact: vachansutra@gmail.com.

2. What we collect

Contact and order details: name, email address, phone number, billing and shipping address, order history.
Payment information: processed directly by our payment gateway. We receive confirmation of payment and the last four digits of a card — we never see or store full card numbers or CVVs.
Account details: username and password, saved addresses, wishlist and preferences, if you create an account.
Technical data: IP address, browser and device type, pages viewed, referring site, and cookie identifiers.
Communications: what you write to us by email, WhatsApp or through forms, and our replies.

3. Why we use it

To process, pack, ship and track your order, and to handle returns and refunds.
To answer your questions and provide customer support.
To send order updates by email, SMS and WhatsApp — these are service messages, not marketing.
To send marketing communications, only where you have opted in. You can unsubscribe at any time.
To detect and prevent fraud, and to secure the website.
To understand how the site is used so we can improve it.
To meet legal, tax and accounting obligations.

4. Legal basis

We process your data on the basis of your consent, the performance of our contract with you when you place an order, and our compliance with legal obligations. Where processing rests on consent, you may withdraw it at any time by writing to us — withdrawal does not affect processing already carried out.

5. Who we share it with

We do not sell your personal data. We share it only with parties who need it to run the store:

Shopify, which hosts this store and processes orders.
Payment gateways, to take and verify payment.
Courier and logistics partners, to deliver your order and arrange pickups.
Communication and analytics providers, to send order updates and understand site usage.
Government authorities, where we are legally required to disclose.

6. Cookies

We use cookies to keep your cart working, remember your preferences, and measure how the site performs. You can block or delete cookies in your browser settings, but parts of the site — including checkout — may stop working correctly.

7. Data retention

We keep order and transaction records for as long as required under Indian tax and accounting law (currently eight years). Account and marketing data is kept until you ask us to delete it or your account becomes inactive.

8. Data transfers

Some of our service providers, including Shopify, store data on servers outside India. Where data is transferred abroad, we require appropriate contractual safeguards.

9. Security

The site runs over encrypted HTTPS and payments are handled by PCI-DSS compliant gateways. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect your data. If a breach occurs that affects you, we will notify you and the Data Protection Board as required.

10. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

Access a summary of the personal data we hold about you and how it is processed.
Have inaccurate or incomplete data corrected, or outdated data updated.
Ask us to erase your personal data where we no longer need it.
Nominate another person to exercise these rights on your behalf.
Register a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these, write to vachansutra@gmail.com. We respond within 30 days.

11. Children

This store is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us their data, write to us and we will delete it.

12. Grievance Officer

Complaints about how we handle your data can be sent to our Grievance Officer at vachansutra@gmail.com, or by post to the address above. We acknowledge within 48 hours and respond within 30 days.