Privacy Policy — Veilforce

At Veilforce, we respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why we collect it, and how we use it — in compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India).

1. Information We Collect

Account Information:

Name, email address, and password (hashed)
Shipping address and phone number (at checkout)

Order & Transaction Data:

Items purchased, quantities, prices, and order status
Payment method (COD or Razorpay) — we do not store card/UPI details

In-Store Data:

RFID scan events and product scanner activity tied to your account
In-store session timestamps

Technical Data:

IP address, browser type, device type
Cookies and session identifiers (see Cookie Policy)

2. How We Use Your Information

To process and fulfil your orders (online and in-store)
To manage your account and authenticate sessions
To improve our RFID and scanner systems
To communicate order updates and support responses
To comply with legal obligations under Indian law

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Data Sharing

We share your data only where necessary:

Razorpay — for in-store payment processing. Subject to Razorpay's own privacy policy.
Delivery Partners — name, address, and phone for order delivery purposes only.
Legal Authorities — if required by Indian law or court order.

4. Data Retention

We retain your personal data for as long as your account is active or as required by law. Order records are retained for a minimum of 5 years in compliance with Indian accounting and GST regulations. You may request deletion of your account data by contacting us via Instagram DM.

5. Your Rights

Under the DPDP Act 2023, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Withdraw consent and request erasure (subject to legal obligations)
Nominate a representative for your data in case of incapacity

To exercise any of these rights, contact us at @veilforce on Instagram.

6. Data Security

We implement industry-standard security measures including encrypted password storage, HTTPS, and JWT-based authentication. However, no system is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.

7. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete the data immediately.

8. Governing Law

This Privacy Policy is governed by the laws of India, including the IT Act 2000, the DPDP Act 2023, and applicable rules. Disputes shall be subject to the jurisdiction of courts in Gujarat, India.