Privacy Policy

1. Overview

VD Electronics Pvt. Ltd. ("VD Electronics", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

By using our website, you consent to the practices described in this policy. If you do not agree, please discontinue use of our website.

2. Data We Collect

2.1 Information You Provide Directly

• Account registration: Name, email address, phone number, password (stored as bcrypt hash)
• Orders: Delivery address, billing address, product preferences
• Payment: We do not store card details — payments are processed by Razorpay (PCI DSS Level 1 certified)
• Franchisee application: Business details, PAN, Aadhaar, bank account details
• Support: Messages, emails, chat transcripts

2.2 Information Collected Automatically

• Device & browser: IP address, browser type, OS, screen resolution
• Usage data: Pages visited, time on site, clicks, scroll depth (via Google Analytics 4)
• Cookies: Session cookies, preference cookies, analytics cookies
• Purchase behaviour: Products viewed, cart items, wishlist

2.3 Data from Third Parties

• Delivery status from Shiprocket (AWB, delivery timestamps)
• Payment confirmation from Razorpay
• Review signals from our verified purchase system

3. How We Use Your Data

• Process and fulfil your orders, including delivery tracking
• Send order confirmation, shipping updates, and invoices
• Provide customer support and respond to queries
• Personalise your shopping experience (product recommendations)
• Improve website performance and fix bugs
• Send promotional emails (only with your explicit consent — you can unsubscribe at any time)
• Prevent fraud, abuse, and unauthorised access
• Comply with legal obligations (GST, banking KYC for franchisees)

4. Cookies & Tracking Technologies

4.1 Types of Cookies We Use

• Essential cookies: Required for login sessions, cart, checkout (cannot be disabled)
• Analytics cookies: Google Analytics 4 — help us understand how visitors use our site
• Marketing cookies: Facebook Pixel — for relevant ads on social media (requires consent)
• Preference cookies: Remember your region, currency, and display preferences

4.2 Cookie Duration

• Session cookies: Deleted when you close your browser
• Analytics cookies: Up to 2 years
• Marketing cookies: Up to 90 days

You can manage cookie preferences via the cookie consent banner on our website, or through your browser settings. Disabling non-essential cookies will not affect your ability to shop.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

• Delivery partners: Shiprocket, Delhivery, DTDC — for order fulfilment
• Payment processors: Razorpay — for secure payment processing
• Analytics: Google Analytics — anonymised usage data
• Advertising: Facebook/Meta — only with your consent
• Legal requirements: If required by law, court order, or government authority
• Business transfer: In case of merger or acquisition, with advance notice to users

All third-party partners are contractually bound to process your data only for the stated purpose and to maintain appropriate security standards.

6. Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted over HTTPS (TLS 1.2+)
• Password storage: Bcrypt hashing with cost factor 12 (never stored in plaintext)
• Session security: HttpOnly, Secure, SameSite=Strict cookie flags
• CSRF protection: All forms protected with signed tokens
• SQL injection prevention: Prepared statements throughout
• File upload validation: MIME type and extension verification
• Activity logging: All admin actions are logged with IP and timestamp
• Backups: Encrypted daily database backups with 30-day retention
• Penetration testing: Annual third-party security audits

7. Your Rights

Under applicable data protection laws (including GDPR and India's DPDP Act 2023), you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Restriction: Request we limit processing of your data
• Objection: Object to processing for marketing purposes at any time
• Withdraw consent: Unsubscribe from marketing emails at any time

To exercise any right, email support@vdelectronics.in. We will respond within 30 days. Note: deletion of account data will not remove order records required for GST compliance.

8. Data Retention

• Account data: Retained while your account is active + 2 years after deletion
• Order records: 7 years (required by Indian tax law)
• Activity logs: 12 months
• Marketing consent: Until you withdraw consent
• Franchisee KYC documents: Duration of the franchisee relationship + 5 years

9. Children's Privacy

Our website is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child under 18, we will delete it promptly. If you believe we have such data, contact us at support@vdelectronics.in.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by a prominent notice on our website at least 7 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.

Continued use of our website after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights:

If you are in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.