Privacy Policy

Last updated: 23 October 2025
Website: https://vihaalaya.in/
Brand: Vihaalaya
Legal entity / proprietor (Data Fiduciary): SPR COLLECTIONS
Registered address: 214/86B, Jeeva Nagar, Sirumugai, Coimbatore – 641302.
Contact email (support): sprcollectionsjr@gmail.com
Grievance email: vihaalaya@gmail.com

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit or make a purchase from our Site, create an account, contact us via email/phone/WhatsApp, or interact with our social media. It is drafted for India with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the SPDI Rules, 2011, the Consumer Protection (E‑commerce) Rules, 2020, and related regulations.

1) Scope & Roles

Data Fiduciary: SPR COLLECTIONS (“we”, “us”).
Data Principal: The individual whose personal data is processed (“you”).
This Policy applies to our e‑commerce operations in India and to processing carried out by our vendors on our behalf (payment gateways, logistics, analytics, etc.).

2) Personal Data We Collect

We collect the following categories of personal data: 1. Identity & Contact: name, billing/shipping address, email, phone/WhatsApp number, PIN code.
2. Account Data: username, encrypted password, wishlist, saved addresses, order history.
3. Order & Transaction: items purchased, order amounts, payment method, partial masked card details/UPI VPA as returned by the gateway, invoices, GSTIN (if provided).
4. Customer Support: messages, emails, attachments/photos/videos (e.g., defect claims), call/WhatsApp logs and timestamps.
5. Device & Usage: IP address, device/browser type, cookies, pages viewed, time on page, referring URLs, search terms, and general location derived from IP.
6. Marketing Preferences: opt‑in/opt‑out flags for email/SMS/WhatsApp promotions.
7. Social/UGC: reviews, ratings, comments, and images you upload.

We do not collect or store full card numbers, CVV, or UPI PINs; these are processed by secure payment gateways. If you provide business details (e.g., GSTIN) for invoicing, we process them as part of your order.

3) How We Collect Data

Directly from you at checkout, account creation, forms, support chats, or contests.
Automatically via cookies, pixels, and analytics tools when you use the Site.
From third parties (payment gateways, courier partners) in connection with your orders and deliveries.

4) Purposes & Lawful Bases

We process personal data for:
– Order processing & delivery (contract performance): to receive, verify, fulfill, dispatch, and support your orders.
– Payments & refunds (contract/legal obligation): via gateways, issuing invoices, handling returns/defect claims.
– Account & customer support (contract/legitimate interests): to create/manage your account and respond to your queries.
– Fraud prevention & security (legitimate interests/legal obligation): to protect our services and users.
– Marketing communications (consent/legitimate interests): email/SMS/WhatsApp offers, with opt‑out anytime.
– Analytics & improvement (legitimate interests/consent where required): to understand usage and improve UX, products, and performance.
– Compliance (legal obligation): tax, audit, and statutory record‑keeping.

5) Cookies & Similar Technologies

We use necessary cookies to enable core functions (cart, checkout, account). With your consent (where required), we use:
– Functional cookies for preferences and faster login;
– Analytics cookies to measure traffic and performance;
– Advertising pixels (if enabled later) for remarketing.
You can control cookies via your browser settings. Blocking some cookies may impact Site functionality.

6) Payments

Online payments are processed by third‑party gateways (e.g., UPI, cards, net‑banking). We receive limited payment confirmations (transaction ID, status, last 4 digits of card, masked UPI VPA) and do not store full payment credentials. COD orders may require phone verification.

7) Disclosures & Sharing

We share data only as necessary for the purposes above: – Service providers / data processors: hosting, payment gateways, fraud tools, courier/shipping partners, warehousing/fulfilment, customer support tools, email/SMS/WhatsApp platforms, analytics providers, and technical contractors.
– Legal & compliance: regulators, law enforcement, auditors, or tax authorities when legally required.
– Business transfers: in the event of a merger, acquisition, or asset sale, subject to protections consistent with this Policy.
We do not sell your personal data.

8) Cross‑Border Transfers

If vendors/store infrastructure are located outside India, your data may be processed in those locations with contractual safeguards. By using the Site, you consent to such transfers as permitted by applicable law.

9) Retention

We retain personal data for as long as needed to fulfil the purposes described, comply with legal obligations (e.g., tax and accounting), resolve disputes, and enforce agreements. Typical retention:
– Orders, invoices & GST records: 8 years (or as mandated).
– Account data: while the account is active and for a reasonable period thereafter.
– Marketing preferences: until you opt‑out (plus limited logs for compliance).
– Support tickets & defect claims: until resolution plus audit window.

10) Security

We apply reasonable technical and organizational safeguards appropriate to the nature of the data, including encryption in transit, access controls, and secure development/ops practices. However, no method of transmission or storage is 100% secure.

11) Your Rights (DPDP Act)

Subject to applicable law, you may:
– Access your personal data processed by us;
– Correct inaccurate or incomplete data;
– Delete data that is no longer necessary or where consent is withdrawn and no other legal basis applies;
– Withdraw consent for marketing communications at any time;
– Nominate an alternate contact for exercising rights (where applicable under DPDP).

How to exercise your rights

Email us at sprcollectionsjr@gmail.com or the Grievance Officer below with your request and identity verification details. We will respond within timelines prescribed under applicable law.

12) WhatsApp, SMS & Email Communication

By providing your mobile number or clicking “Notify on WhatsApp/SMS”, you consent to receive transactional and promotional messages from us. You can reply STOP or use provided unsubscribe links to opt out of marketing. Transactional alerts related to orders may still be sent.

13) Children’s Privacy

Our Site is intended for individuals 18+. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us to delete it.

14) Third‑Party Links & Social Media

Our Site may link to third‑party websites or social platforms. Their privacy practices are not governed by this Policy. Review their policies before providing personal data.

15) Changes to this Policy

We may update this Policy from time to time. Changes will be posted on this page with the updated date. Material changes may also be communicated by email/notification.

16) Grievance Officer (IT Rules, 2021)

Name: Manager
Email: vihaalaya@gmail.com
Phone: +91 75300 86657
Address: 214/86B, Jeeva Nagar, Sirumugai, Coimbatore – 641302.
Working hours: Mon–Sat, 10:00–18:00 IST

17) Contact Us

For privacy questions, data requests, or complaints:
– Email (support): sprcollectionsjr@gmail.com
– Email (grievance): vihaalaya@gmail.com
– Phone/WhatsApp: +91 75300 86657
– Postal: 214/86B, Jeeva Nagar, Sirumugai, Coimbatore – 641302.