Privacy Policy

1. Introduction

This Privacy Policy explains how Valoracraft (“Company”, “we”, “our”, “us”) collects, uses, processes, stores, and protects personal data when you visit or transact on https://valoracraft.com (“Website”).

We operate from Delhi, India, and manufacture and dispatch products from Delhi.

This Policy is issued in compliance with:

Digital Personal Data Protection Act, 2023 and applicable Rules
Information Technology Act, 2000
Consumer Protection (E-Commerce) Rules, 2020

This Privacy Policy should be read along with the specific Privacy Notice displayed at the time of data collection (e.g., checkout, account registration, newsletter sign-up).

2. Lawful Basis & Consent

We process personal data:

To perform a contract (order fulfilment, shipping, invoicing)
To comply with legal obligations (GST, accounting)
Based on your explicit consent (marketing communications, non-essential cookies)

We do not rely on implied consent from mere website usage for non-essential processing.

Where consent is required:

It is obtained through clear affirmative action (e.g., checkbox opt-in).
It is specific and purpose-limited.
It may be withdrawn at any time.

Withdrawal of consent does not affect processing already lawfully carried out.

3. Personal Data We Collect

We collect only data necessary for specified purposes.

A. Information You Provide Directly

When placing an order or contacting us:

Full name
Billing address
Shipping address
Email address
Mobile number
GST details (if applicable)
Order history
Customer support communications

Payment Information

Payments are processed via RBI-compliant third-party payment gateways. We do not store full debit/credit card numbers, CVV, UPI PIN, or net banking credentials.

B. Automatically Collected Information

When you visit our Website:

IP address
Device and browser type
Pages viewed
Session duration
Referral URLs
Cookie identifiers

This data helps us improve performance, detect fraud, and enhance user experience.

4. Purpose of Processing

We process personal data only for the following specific purposes:

Order fulfilment and delivery
Customer service and support
GST invoicing and statutory compliance
Fraud detection and risk mitigation
Website performance analytics
Marketing communications (only with explicit consent)

We do not sell or rent personal data.

5. Sharing of Personal Data

We share personal data only when necessary:

Shipping & Logistics Providers

Name, address, and phone number for delivery purposes.

Payment Gateways

To securely process transactions.

Technology & Hosting Providers

For website hosting, analytics, and system maintenance.

Legal Authorities

Where required by law or court order.

All service providers are contractually required to process data only for authorized purposes.

6. Data Retention

We retain data only for as long as necessary for stated purposes:

Order and GST records: 7 years (as required under Indian tax laws)
Customer support records: Up to 3 years from last interaction
Marketing data: Until consent is withdrawn
Website analytics data: As per provider retention settings (typically 14–26 months)

Upon expiry of retention periods, data is deleted or anonymized.

7. Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request erasure (subject to legal retention obligations)
Withdraw consent for marketing
Nominate another person to exercise rights in case of incapacity
Lodge a grievance

To exercise your rights:

Email: valoracraft@gmail.com
Or use the unsubscribe link in marketing emails (where applicable).

We respond within a reasonable period as required by law.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India, once operational as notified by the Government of India.

8. Cookies & Tracking Technologies

We use:

Essential cookies (required for checkout and cart functionality)
Performance/analytics cookies
Marketing cookies (if enabled)

Non-essential cookies are activated only after obtaining consent via our cookie banner. You may withdraw cookie consent through browser settings or our cookie preference tool.

9. Cross-Border Data Transfers

Some third-party service providers (e.g., analytics providers or payment processors) may process data outside India. Where such transfers occur, we implement appropriate contractual and security safeguards consistent with Indian law.

10. Data Security

We implement reasonable security measures including:

SSL encryption
Secure hosting infrastructure
Restricted internal access controls
Payment gateway tokenization
Periodic technical review

In the event of a material data breach, we will take steps required under applicable law, including notifying affected individuals and relevant authorities where mandated.

11. Children’s Data

Our Website is not directed toward individuals under 18 years of age. We do not knowingly collect personal data from minors. If such data is identified, it will be deleted.

12. Grievance Officer (As Required Under E-Commerce Rules, 2020)

Grievance Officer: Dhruv Bhardwaj

Designation: Grievance Officer

Email: support@valoracraft.com

Phone: +91 9717581100

Registered Office Address: M/S VALORA CRAFT, Shop No. 10/11, Ground Floor, Rohtak Road, Faiz Road Corner, Delhi-110005.

Complaints will be acknowledged within 48 hours and resolved within one month as per applicable law.

13. Data Breach Response

In the event of a personal data breach that is likely to cause harm, we will:

Assess impact promptly
Take remedial measures
Notify affected individuals and competent authorities as required under the DPDP Act and Rules

14. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with the updated date. Continued use of the Website after updates constitutes acceptance of the revised Policy.