Privacy policy

Privacy Policy

Last updated: 26 May 2025

The Viral Vault ("we," "us," or "our") operates the website https://theviralvault.co.in (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Site or make a purchase. By using our Site, you consent to the practices described in this policy.

This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), and the Consumer Protection (E-Commerce) Rules, 2020.

  1. Information We Collect

a) Information You Provide Directly

When you make a purchase, create an account, or contact us, we may collect:

  • Full name
  • Email address
  • Phone number
  • Shipping and billing address
  • Payment information (processed securely — we do not store card details)
  • Any messages or queries you send us via our Contact page

b) Information Collected Automatically

When you browse our Site, we automatically collect:

  • IP address
  • Browser type and version
  • Device type (mobile, desktop, tablet)
  • Operating system
  • Pages visited, time spent on pages, and navigation patterns
  • Referring website or source
  • Date and time of access

c) Information from Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. These include:

  • Essential cookies — required for the Site to function (cart, checkout, session)
  • Analytics cookies — Google Analytics, to understand how visitors use our Site
  • Marketing cookies — Meta (Facebook) Pixel, to measure ad performance and deliver relevant advertisements
  • Shopify cookies — used by our e-commerce platform for site functionality, analytics, and fraud prevention

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect Site functionality.

  1. How We Use Your Information

We use the personal data we collect for the following purposes:

  • Order fulfilment — processing, shipping, and delivering your orders
  • Communication — sending order confirmations, shipping updates, and responding to your queries
  • Payment processing — facilitating secure transactions through Razorpay
  • Marketing — sending promotional offers, product updates, and newsletters (only with your consent; you can unsubscribe at any time)
  • Advertising — running targeted advertisements on platforms such as Meta (Facebook/Instagram) and Google using anonymised or aggregated data
  • Site improvement — analysing browsing behaviour to improve website design, product offerings, and user experience
  • Fraud prevention — detecting and preventing fraudulent transactions and unauthorised access
  • Legal compliance — meeting our obligations under applicable Indian laws
  1. Third-Party Sharing and Disclosure

We do not sell your personal data. We share your information only with the following categories of trusted third parties, solely for the purposes described above:

  • Shopify — E-commerce platform hosting, order management, and analytics
  • Razorpay — Secure payment processing
  • Shiprocket — Order delivery and shipment tracking
  • Google (Google Analytics) — Website traffic analysis and performance monitoring
  • Meta (Facebook/Instagram Pixel) — Advertising measurement and audience targeting

These third parties are bound by their own privacy policies and are not permitted to use your data for purposes other than those we have specified.

We may also disclose your information if required by law, court order, or government authority, or to protect our rights, property, or safety.

  1. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

  • Order and transaction records — 5 years (for tax, accounting, and legal compliance)
  • Customer account information — Until you request deletion or account closure
  • Communication records (emails, queries) — 2 years from the date of last communication
  • Analytics and browsing data — 26 months (as per Google Analytics default)
  • Marketing consent records — Until consent is withdrawn

After the retention period expires, your data is securely deleted or anonymised.

  1. Your Rights Under the DPDP Act, 2023

As a data principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

  • Right to Access — You may request a summary of your personal data that we hold and how it is being processed.
  • Right to Correction — You may request correction of any inaccurate or incomplete personal data.
  • Right to Erasure (Deletion) — You may request deletion of your personal data, subject to legal retention requirements.
  • Right to Withdraw Consent — You may withdraw your consent for data processing at any time. This will not affect the lawfulness of processing done prior to withdrawal.
  • Right to Nominate — You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
  • Right to Grievance Redressal — You have the right to file a complaint if you are unsatisfied with how we handle your data.

To exercise any of these rights, please contact us at the details provided in Section 9 below. We will respond to your request within 30 days.

  1. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • SSL/TLS encryption on all pages of our Site
  • PCI-DSS compliance for payment processing (handled by Razorpay)
  • Secure hosting through Shopify's infrastructure
  • Access controls limiting employee access to personal data on a need-to-know basis
  • Regular review of data collection, storage, and processing practices

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to following industry best practices.

  1. Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

  1. Third-Party Links

Our Site may contain links to third-party websites or services (e.g., social media profiles, payment gateways, shipping tracking pages). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal data.

  1. Grievance Officer

In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, 2023, the details of our Grievance Officer are as follows:

Name: Akhil Dev Singh Email: viralvault.co.in@gmail.com Address: The Viral Vault, India

The Grievance Officer shall acknowledge your complaint within 24 hours and resolve it within 30 days of receipt.

For general queries, you may also reach us at our Contact page: https://theviralvault.co.in/pages/contact

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

  • The "Last updated" date at the top of this page will be revised
  • For significant changes, we will notify you via email or a prominent notice on our Site
  • Your continued use of the Site after any changes constitutes acceptance of the updated policy

We encourage you to review this page periodically for the latest information on our privacy practices.

  1. Consent

By using our Site, placing an order, or providing your personal information, you consent to the collection, use, and sharing of your data as described in this Privacy Policy. You may withdraw your consent at any time by contacting us, though this may affect our ability to provide certain services to you.

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: viralvault.co.in@gmail.com Website: https://theviralvault.co.in/pages/contact