Your privacy, plainly explained

1. Who we are

Pon Vayal ("Pon Vayal", "we", "us" or "our") runs this website and is the data fiduciary responsible for the personal data described in this policy. If you have any question about how we handle your data, you can write to us at info@ponvayal.com.

This policy explains what we collect, why we collect it, who helps us process it, and the rights you have over your own data.

2. What we collect

We try to collect only what we genuinely need to answer you and fulfil your order. Depending on how you use the site, that may include:

• Contact and enquiry details, when you use our contact or enquiry form, we collect your name, email address, phone number and the message you choose to send us.
• Order and delivery details, if you place an order, the information needed to process and deliver it, such as your delivery address, items ordered and any instructions you give us.
• Basic technical and usage data, like most websites, our hosting may automatically record limited technical information such as your approximate location, browser type, device and the pages you visit, which helps keep the site working and secure.
• Cookies, small files that may be stored on your device. See section 5 below.

We do not ask you to share sensitive personal data, and we would request that you do not include any in your messages to us.

3. How we use your data

We use the information above only for clear, limited purposes:

• to respond to your enquiries and stay in touch about them;
• to process, fulfil and deliver any orders you place;
• to provide customer support and resolve any issues with your order;
• to keep the website running, secure and working as intended; and
• to meet our legal, accounting and regulatory obligations.

We do not use your data for purposes you would not reasonably expect, and we will ask for your consent where the law requires it.

4. Our form and the processors we rely on

To run a small, mostly static website, we depend on a few trusted third parties who process data strictly on our behalf:

• Contact form, our contact and enquiry form is processed by Web3Forms, which receives what you submit and forwards it as an email to our inbox. Your message therefore passes through Web3Forms before it reaches us.
• Payment partners, because we work on an enquiry basis, payment is taken by the method we agree when we confirm your order. Where a payment service or bank is involved, it processes the data needed to take the payment on our behalf; we do not store full card or banking details ourselves. We will name the specific payment service we use here once it is in place.
• Delivery partners, to ship your order, we share only the delivery details necessary with the courier or logistics partner handling your parcel.

These partners are permitted to use your data only to provide their service to us, and not for their own unrelated purposes.

5. Cookies and analytics

To be plain about it: this is a lightweight website and we keep cookies to a minimum. Any cookies that are set are used to help the site function and remember basic preferences.

We may use a privacy-respecting analytics tool to understand, in aggregate, how the site is used so we can improve it. Where an analytics service is in use, we will name it here and explain what it collects. You can also control or block cookies through your browser settings at any time.

6. Sharing and disclosure

We share your personal data only in two situations: with the service providers described in section 4, who help us run the site and fulfil orders, and where we are required to do so by law, a court, or a competent authority, or to protect our rights and the safety of others.

We do not sell your personal data, and we do not rent or trade it for marketing purposes.

7. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy, or for as long as we are required to keep it to meet legal, tax and accounting obligations. After that, we delete it or anonymise it. Our current retention period is [retention period, Pon Vayal to confirm].

8. Your rights under the Digital Personal Data Protection Act, 2023

India's Digital Personal Data Protection Act, 2023 gives you rights over your personal data. Subject to the conditions in the Act, you may:

• Access a summary of the personal data we hold about you and how we process it;
• Correct data that is inaccurate, and complete or update data that is incomplete or out of date;
• Erase your data where it is no longer needed for the purpose it was collected;
• Withdraw consent where we rely on it, and nominate another person to exercise your rights in the event of death or incapacity; and
• Seek grievance redressal, raise a concern with us first (see section 12), and, if it is not resolved to your satisfaction, approach the Data Protection Board of India.

To exercise any of these rights, write to us at info@ponvayal.com. We may need to verify your identity before we act on a request.

9. How we keep your data secure

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, and we ask the processors we work with to do the same. No method of transmission over the internet is completely secure, however, so while we work to protect your data we cannot guarantee absolute security.

10. Children

Our website and products are not directed at children under the age of 18, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in how we work or in the law. When we do, we will revise the "last updated" date at the top of this page. Please check back occasionally so you stay informed.

12. Contact and Grievance Officer

If you have any question, concern or complaint about your personal data, or if you wish to exercise any of your rights, please contact our Grievance Officer:

• Grievance Officer: [name, Pon Vayal to confirm]
• Email: [email, Pon Vayal to confirm; default info@ponvayal.com]

We will acknowledge and respond to your request within the timelines required by applicable law.