Privacy policy

Vlyomi by Lovely (“Vlyomi”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you use vlyomi-vlyomi.vercel.app, why we collect it, and the choices you have. It is written in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. What we collect

• Account details — your name, email address, mobile number (optional) and a securely hashed password. We never store your password in readable form.
• Order details — delivery addresses, the items you buy, personalisation text, order notes and your order history.
• Payment details — online payments are processed by Razorpay. We receive a payment reference and status, but we never see or store your card number, UPI PIN or bank login.
• Messages — anything you send through our contact form, and your email if you join our newsletter.
• Technical data — basic information your browser sends (such as IP address) which we use to keep the site secure, for example to block repeated failed logins.

2. Why we use it

• To create and manage your account and keep it secure.
• To process, make, pack, ship and deliver your order, and to contact you about it.
• To handle payments, refunds, returns and customer service.
• To send newsletters — only if you sign up, and you can unsubscribe at any time.
• To meet our legal, tax and accounting obligations.

We process your data on the basis of your consent, given when you create an account, place an order or subscribe, and for the legitimate uses permitted by law. We do not sell your personal data, and we do not use it for third-party advertising.

3. Who we share it with

Only with the people who help us run the shop, and only what they need:

• Courier and logistics partners — your name, address and phone number, to deliver your parcel.
• Payment processor (Razorpay) — to take payments and issue refunds.
• Email and hosting providers — to send order emails and run this website.
• Authorities — where required by law, a court order or to prevent fraud.

4. Cookies and browser storage

We use a single essential cookie to keep you signed in. Your shopping bag is saved in your own browser’s local storage so it’s still there when you come back. We do not use advertising or cross-site tracking cookies.

5. How long we keep it

We keep your account data for as long as your account is open. Order and invoice records are kept for up to 8 years, as required by Indian tax and accounting laws. Contact messages are deleted once they are no longer needed. When you ask us to delete your account, we remove your personal data except what we must legally keep.

6. Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• correct, complete or update your data — most of it you can edit yourself in your account;
• ask us to erase your data, and withdraw consent you have given;
• nominate someone to exercise these rights on your behalf; and
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these, email care@vlyomi.com. We’ll respond within 30 days.

7. Children

Our shop is meant for adults. If you are under 18, please use the site and place orders with the involvement and consent of a parent or guardian. We do not knowingly collect data from children without such consent.

8. Security

Passwords are hashed with bcrypt, the site is served over encrypted HTTPS connections, and access to order data is limited to the shop owner. No system is perfectly secure, but we take reasonable care to protect your information and will notify you and the authorities as required by law if a breach affects you.

9. Grievance officer

Lovely
Email: care@vlyomi.com
Address: Studio address, City, State, PIN — India

10. Changes

If we change this policy, we’ll update the date at the top of this page. Significant changes will be emailed to account holders.