We keep only what is needed to pack a box, deliver it and contact you if something is wrong. This sets out what Velvora Studio holds, why, who else sees it and how you have it erased, under the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000).
What we hold
- Name, delivery address, PIN code, phone number and email address.
- Order history — items, dates and amounts.
- Your emails and our replies, so the next person helping you has the context.
- Anonymous page and device counts used to find slow or broken pages.
Card numbers, CVV codes, UPI PINs and bank credentials are never collected or stored. They cannot reach us: we do not process cards at all.
Why
To pack and deliver your order, give the courier a working address and phone number, answer questions and handle returns or replacement requests, and detect fraudulent ordering. We build no advertising profiles and sell, rent or trade nothing.
Who receives it
Delhivery / XpressBees receive your name, address and phone number for delivery. The UPI provider receives the amount and reference, never what you bought. Our email host stores your messages. Nothing else, save a lawful request from an Indian authority.
Cookies
Functional cookies hold your cart and session; simple analytics cookies count visits. Block them and the site still reads, but the cart forgets itself. No third-party advertising cookies run here.
How long
Order records for as long as Indian tax and consumer-protection rules require, then deleted. Support email for two years. Analytics aggregated, with nothing pointing back to you.
What you can ask for
Under DPDP 2023: a copy of your data, correction of errors, deletion where no legal duty requires retention, and withdrawal of consent for anything not needed to complete an order. Write from the address on the order; we act within 30 days at no charge.
Keeping it safe
Encrypted connection, administrative access limited to the people who run the shop, and no payment data on our servers because we take UPI and Cash on Delivery only. If a breach ever affected your data we would notify you and the relevant authority, as DPDP 2023 requires.
Children
Orders are for customers aged 18 and over, even where the goods are children’s pretend-play sets. We do not knowingly collect data from children.
Grievance Officer
Data complaints go to our Grievance Officer, appointed as required under the Information Technology Act, 2000 (IT Act 2000) and DPDP 2023. Write to connect@velvorastudio.shop with “Grievance” in the subject, or by post to Lower Ground Floor, Plot no. 123 Mansoor Estate, Road No. 12, Banjara Hills, Hyderabad, Telangana 500028, India. Acknowledged within 24 hours, resolved within 30 days.
Changes to this policy
Any update appears on this page; we do not email them. Questions are welcome, Open daily, 10:30 AM – 10:00 PM IST.