Privacy Policy

Welcome to Velaash, operated by VELAASH TRADER'S ("Velaash", "we", "us", or "our"), a sole proprietorship registered in Tamil Nadu, India.

We respect your privacy and are committed to safeguarding your personal data in accordance with applicable Indian legal standards, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) framework.

This Privacy Policy describes what personal information we collect through our website, why we collect it, how it is secured, and your rights regarding your data.

We strictly collect only the personal information essential for fulfilling your orders, delivering customer service, and providing secure account access:

• Customer Identity & Contact Information: Full name, email address, and mobile phone number provided when registering an account, requesting a passwordless sign-in OTP, placing an order, or submitting an inquiry via our contact form.
• Delivery & Billing Addresses: Street address lines, city, state, postal PIN code, and recipient phone number entered during checkout or saved within your Account Addresses portal.
• Order & Fulfillment History: Unique order numbers (e.g. ORD-2026-XXXX), line items purchased, garment sizes, prices, order dates, payment statuses, and courier tracking details.
• Local Shopping Bag (Browser LocalStorage): Cart contents (selected product variant IDs, quantities, and chosen sizes) are stored directly on your personal device within your browser's localStorage. Guest cart contents remain on your machine and are not recorded in a server-side profile until you proceed to checkout.

We process your personal information exclusively for lawful, legitimate purposes:

• Order Processing & Dispatch: Verifying order contents, printing domestic shipping labels, and handing packages over to courier partners for delivery across India.
• Essential Transactional Communications: Sending automated order confirmations, passwordless login access codes, tracking numbers, and payment status receipts via email.
• Customer Support Assistance: Answering sizing, exchange, or return inquiries initiated by you through email, WhatsApp, or our contact form.
• Statutory & Financial Records: Retaining mandatory accounting records, tax invoices, and financial audit records as required under applicable Indian commercial, taxation, and auditing laws.

All online payments on Velaash are securely processed through Razorpay (Razorpay Software Private Limited), an RBI-authorized payment aggregator supporting UPI, Credit and Debit Cards (Visa, Mastercard, RuPay), and Net Banking.

Our database only receives and stores non-sensitive transaction tokens (such as razorpay_order_id, razorpay_payment_id, and payment status) for the sole purpose of reconciling your order.

For eligible Cash on Delivery (COD) orders, payment is made in physical cash directly to the courier delivery executive upon doorstep parcel handover.

Our operational database is hosted on Supabase (managed PostgreSQL cloud infrastructure). We employ appropriate administrative and technical safeguards to secure your personal data:

• Encryption in Transit: All communication between your browser and our servers is secured using modern Transport Layer Security (TLS / HTTPS).
• Database Row-Level Security (RLS): Our database enforces fine-grained Row-Level Security policies ensuring that authenticated customers can only query and modify their own addresses and orders.
• Parameterized Ingestion: All database operations utilize parameterized queries through our Supabase client to protect against injection attacks.

Note: While we maintain diligent safeguards, no method of transmission over the Internet or electronic storage is completely infallible. We encourage users to maintain security over their registered email accounts.

We share your data only with vetted third-party service providers essential for store operations:

• Razorpay: Facilitates authorized online payment processing and payment refunds.
• Resend: Provides transactional email delivery infrastructure for sending order receipts, dispatch updates, and account OTP authentication codes.
• Domestic Logistics Partners: When your order is packed, recipient shipping details (name, delivery address, postal PIN code, contact phone) are shared with licensed domestic courier carriers for physical package transportation and doorstep delivery across India. Automated shipping partner integrations (e.g. Shiprocket) are planned for future logistics automation; courier consignments are currently managed directly with licensed domestic couriers.

At Velaash, we believe in transparent, consent-first technology. We classify client-side storage and cookies into two distinct tiers: essential functionality and optional web analytics.

As a customer, you hold the following rights regarding your personal information:

• Access & Review: You can review your profile email, order history, and saved addresses anytime by logging into your account (/account).
• Address Updates: You can add, edit, or delete delivery addresses at any time via your Saved Addresses dashboard.
• Account & Data Deletion Requests: While self-service account deletion is not currently built into the account portal, you may request deletion of your account and associated personal data by writing to our support team at bestrchandra@gmail.com. Upon verification of identity, we will purge or anonymize your customer record, except where retaining transaction data is legally required by applicable Indian commercial and tax regulations (such as financial auditing and bookkeeping compliance).

Velaash offers contemporary adult apparel and is not intended for use by individuals under the age of 18 without parental or guardian oversight. We do not knowingly collect personal information from minors. If you believe a minor has created an account without parental consent, please contact us immediately to have the information removed.

We may periodically revise this Privacy Policy to reflect updates in our technical features, operational practices, or applicable statutory laws. Any modifications will be posted directly to this page with an updated "Last Updated" date at the top.

Pursuant to the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, if you have any questions, feedback, or grievances regarding our privacy practices or personal data processing, please contact our designated grievance channel: