Privacy Policy

• Account data: Name, email address, phone number, and password (hashed)
• Order data: Shipping address, order history, and payment method (we do not store card numbers)
• Usage data: Pages visited, clicks, session duration, browser type, and IP address
• Communications: Messages you send us via contact forms or email
• Device data: Device type, OS, and referring URL

• Process and fulfil your orders
• Send order confirmations, shipping updates, and invoices
• Provide customer support
• Improve our products, website, and user experience
• Send marketing communications (with your consent; opt-out anytime)
• Comply with legal obligations under Indian law
• Detect and prevent fraud

We do not sell or rent your personal data. We share data only with:

• Logistics partners (Delhivery, Shiprocket) to fulfil deliveries
• Payment processors (Razorpay) to handle transactions
• Email providers (Resend) to send transactional emails
• Analytics tools (Vercel Analytics) for aggregate insights
• Legal authorities when required by law

We use cookies and similar technologies to maintain your session, remember preferences, and analyse traffic. You can disable cookies in your browser settings, but some features may not function correctly.

Your data is stored securely on Supabase-managed PostgreSQL servers with row-level security (RLS). All data in transit is encrypted via TLS 1.3. Payment data is processed by Razorpay and never stored on our servers.

We retain your account and order data for up to 5 years after your last transaction to comply with Indian tax law (GST records). You may request deletion of non-financial data at any time.

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete data
• Deletion — request deletion of your account and non-financial data
• Opt-out — unsubscribe from marketing emails at any time

To exercise these rights, email privacy@dvissa.com.

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

We may update this policy periodically. Significant changes will be communicated via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance.

For privacy-related concerns, contact our Data Protection Officer at privacy@dvissa.com or write to: DVISSA Natural Foods Pvt. Ltd., Patna, Bihar – 800001, India.