Privacy policy
Short version first: we collect what is needed to pack an order, get it to you, and answer questions about it. Nothing beyond that. The detail is below.
What is collected
- Order details: name, delivery address, phone number and email address – needed to pack the order, hand it to a courier and write to you about it.
- Order history: what was ordered and when, so returns and queries can be checked.
- Technical data: the minimum your browser sends when loading pages.
What is not collected
No card details are collected or stored. Casavora Vault does not accept cards, so there is nothing of that kind to hold. UPI payments are completed in your own banking application; the PIN never reaches this store.
Cookies
Cookies here are the essential kind only – the ones that let a cart persist and a checkout complete. No advertising or profiling cookies are used.
Who it is shared with
Sharing is limited to what running the shop requires: the courier needs the delivery address, the payment processor needs to settle the transaction, the host stores the site. Beyond those, information is disclosed only where the law requires it. It is never sold or rented, and never passed on for marketing.
How long it is kept
Retention is tied to purpose: records stay while they are reasonably needed for returns, queries and accounts, and for whatever period the law requires. There is no fixed calendar figure beyond that.
Your rights
Under the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000) you may ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be erased where there is no legal reason to keep it, and withdraw consent where the processing is based on consent. Write to [email protected] with your Order ID.
Grievance contact
Grievance contact for privacy complaints: [email protected]. Casavora Vault is a small business and has not appointed a separate named officer; privacy complaints are dealt with directly by the person responsible for operating Casavora Vault. Complaints are acknowledged within one business day.
Security
The site is served over HTTPS. Access to order records is limited to the people who need it to fulfil and support orders. No system is perfectly secure, and we do not claim otherwise.
Changes
If this policy changes, the updated version is published on this page.
Links to other sites
Where a page links to a courier tracking site or a payment provider, that site has its own privacy policy and we do not control it. This policy covers only what happens on this store.
Where data is held
Order records are held on the servers that run this website and in the systems of the delivery and payment providers named above. We do not move order data to any other system for analysis or resale.