Privacy policy

PRIVACY POLICY

Effective Date: 26^th August 2026
Last Updated: 26^th August 2026

1. ABOUT THIS PRIVACY POLICY

Gardens of Vaitarna (“GoV”) is a brand operated by Vaitarna Estate Private Limited (“Vaitarna Estate”, “we”, “us” or “our”).

This Privacy Policy (“Policy”) explains how we collect, use, store, disclose and otherwise process your personal data when you:

- visit or use the Gardens of Vaitarna website (“Website”);

- create an account;

- place an order;

- make a purchase or payment;

- contact us or communicate with our customer support team;

- subscribe to our communications;

- participate in an offer, promotion, survey or other activity; or

- otherwise interact with GoV through the Website or related digital services.

Our website is powered by Shopify, which provides the e-commerce technology and infrastructure used to operate our online store.

This Policy should be read together with our Terms of Service, Returns, Refunds & Cancellations Policy and Shipping & Delivery Policy.

2. OUR APPROACH TO YOUR PRIVACY

We respect your privacy and are committed to handling your personal data responsibly.

We collect and use personal data for legitimate purposes, including processing and fulfilling orders, delivering products, providing customer support, improving our website, communicating with you and complying with applicable law.

We aim to collect only personal data that is reasonably necessary for these purposes.

3. PERSONAL DATA WE COLLECT

Depending on how you interact with GoV, we may collect the following categories of personal data.

3.1 Contact and delivery information

This may include:

- name;

- email address;

- mobile or telephone number;

- billing address;

- shipping or delivery address; and

- other information reasonably required to process and deliver your order.

3.2 Order and transaction information

This may include:

- products viewed or purchased;

- items added to your cart;

- order history;

- order number;

- transaction details;

- cancellations, returns, refunds or replacements; and

- other information relating to your transactions with us.

3.3 Payment-related information

When you make a purchase, payment related information may be processed by the relevant payment service provider.

Depending on the payment method, this may include transaction details, payment confirmation and information necessary to process the payment.

We do not ordinarily need to store complete payment card information such as your full card number, CVV or PIN.

3.4 Account information

If you create an account, we may collect information such as:

- username or account identifier;

- login information;

- account preferences; and

- other information associated with your account.

3.5 Communications and customer support information

When you contact us, we may collect information contained in your communication, including information provided in connection with:

- product enquiries;

- order enquiries;

- complaints;

- refund or replacement requests;

- product-quality concerns; and

- other customer-service interactions.

3.6 Device and usage information

When you visit or use our website, certain information may be collected automatically, including:

- IP address;

- browser type;

- device type;

- operating system;

- network information;

- pages viewed;

- products viewed;

- date and time of access;

- referring website;

- interactions with the Website; and

- other technical or usage information.

This information may be collected through cookies and similar technologies.

4. HOW WE COLLECT PERSONAL DATA

We may collect personal data from the following sources:

4.1 Directly from you

For example, when you:

- create an account;

- place an order;

- provide delivery or billing information;

- contact us;

- subscribe to communications;

- submit a review or feedback; or

- otherwise provide information to us.

4.2 Automatically through the Website

We may automatically collect technical and usage information when you browse or interact with the Website through cookies, pixels and similar technologies.

4.3 From service providers

Our service providers may collect or process personal data on our behalf in connection with services such as:

- e-commerce technology;

- payment processing;

- order fulfilment;

- delivery and logistics;

- customer support;

- analytics;

- hosting and IT services; and

- communications.

4.4 From other third parties

We may receive information from other third parties where permitted by applicable law and where reasonably necessary to provide or improve our services, prevent fraud, protect our business or comply with legal obligations.

5. HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes.

5.1 To process and fulfil orders

We use your personal data to:

- process your order;

- confirm your purchase;

- process payments;

- arrange delivery;

- provide order updates and tracking information;

- process cancellations, refunds and replacements; and

- provide customer support.

5.2 To operate and improve our website

We may use personal data to:

- operate and maintain the Website;

- understand how customers use our website;

- improve products, services and user experience;

- analyse Website performance;

- identify and resolve technical issues; and

- develop and improve our online store.

5.3 To communicate with you

We may use your contact information to communicate with you regarding:

- your account;

- orders and purchases;

- payments;

- delivery;

- cancellations;

- refunds and replacements;

- customer support;

- important changes to our services; and

- other service-related matters.

5.4 Marketing and promotional communications

Where permitted by applicable law and, where required, with your consent, we may send you information about:

- new products;

- offers and promotions;

- special events;

- campaigns; and

- Gardens of Vaitarna updates.

You may opt out of promotional communications at any time using the unsubscribe mechanism provided in the relevant communication or by contacting us.

Opting out of marketing communications will not prevent us from sending essential communications relating to your orders, transactions, account or other services you have requested.

5.5 Security and fraud prevention

We may use personal data to:

- protect the security of our website and services;

- authenticate accounts;

- detect and prevent fraudulent or unauthorised activity;

- investigate suspected misuse;

- protect customers and our business; and

- maintain the integrity and security of our systems.

5.6 Legal and regulatory purposes

We may process personal data where reasonably necessary to:

- comply with applicable law;

- respond to lawful requests from government authorities or regulators;

- establish, exercise or defend legal rights;

- investigate suspected unlawful activity; or

- enforce our Terms of Service and other applicable policies.

6. HOW WE DISCLOSE PERSONAL DATA

We may disclose personal data to third parties where reasonably necessary to operate our business, provide our services, fulfil orders or comply with applicable law.

These third parties may include:

- Shopify, which provides the e-commerce platform supporting our website;

- payment gateways and payment service providers;

- courier, logistics and fulfilment providers;

- hosting, IT and technology service providers;

- analytics and Website-performance providers;

- customer-support and communication providers;

- professional advisers, including legal, accounting and audit advisers;

- business partners where necessary to provide a service you have requested;

- government authorities, regulators or law-enforcement agencies where required or permitted by law; and

- other parties where necessary to protect our rights, customers, property or business.

We do not sell your personal data as a standalone commercial product.

Where third parties process personal data on our behalf, we seek to use appropriate contractual, technical or organisational safeguards as required by applicable law.

7. SHOPIFY AND OUR E-COMMERCE PLATFORM

Our website is powered by Shopify.

When you interact with our website or place an order, information may be transmitted to and processed by Shopify and other service providers involved in providing the e-commerce services.

Shopify may also process information in accordance with its own privacy terms and applicable data-protection obligations.

Shopify's current documentation distinguishes between customer personal data processed for a Shopify merchant and personal data Shopify processes for its own purposes.

For information about how Shopify handles personal data in connection with its own services, please refer to Shopify's applicable privacy notices.

Shopify Privacy Policy: Shopify Privacy Policy

Where Shopify processes personal data for purposes for which Shopify is independently responsible, requests concerning that processing may need to be directed to Shopify.

8. PAYMENT PROCESSING

Payments made through the Website may be processed by third-party payment gateways or payment service providers.

We receive and retain transaction information necessary to confirm and administer your purchase.

We do not ordinarily store complete payment-card information such as your full card number, CVV or PIN.

Payment service providers may collect and process payment information under their own terms, privacy policies and applicable legal requirements.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our Website may use cookies, pixels and similar technologies.

These technologies may be used to:

- keep the Website functioning;

- maintain shopping-cart functionality;

- remember preferences;

- understand how customers use the Website;

- measure Website performance;

- improve user experience; and

- support marketing and advertising activities, where applicable.

Some cookies may be necessary for the Website to function properly.

Where required by applicable law, appropriate controls will be provided for non-essential cookies and similar technologies.

Further information will be provided in our Cookie Policy.

10. MARKETING AND ADVERTISING

Where applicable, we may use personal data and certain online activity information to understand customer interests and communicate relevant products, offers and promotions.

Depending on the technologies and services used on our website, this may involve third-party advertising, analytics or marketing service providers.

Where consent is required by applicable law, we will obtain the appropriate consent before carrying out the relevant processing.

You may opt out of promotional communications at any time.

11. THIRD-PARTY WEBSITES AND SERVICES

The Website may contain links to third-party websites, applications or services.

These third parties operate independently from GoV and may have their own privacy policies, terms and security practices.

GoV is not responsible for the privacy or security practices of third-party websites or services that we do not control.

We encourage you to review the applicable privacy policies before providing personal information to third parties.

12. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, use, alteration, disclosure, loss or destruction.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You should also take reasonable steps to protect your account credentials and should not share passwords or other account-access information with others.

Where a personal-data breach occurs, we will take the steps required under applicable law.

13. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law.

The period for which particular personal data is retained may depend on:

- the purpose for which it was collected;

- whether you maintain an account;

- whether we need the information to fulfil an order;

- legal, tax, accounting or regulatory requirements;

- dispute resolution;

- fraud prevention; and

- the establishment, exercise or defence of legal claims.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or otherwise dispose of it, subject to applicable legal and operational requirements.

14. YOUR PRIVACY RIGHTS

Subject to applicable law, you may have rights relating to your personal data, including the right to:

- request information about personal data processed about you;

- request correction of inaccurate or incomplete personal data;

- request deletion of personal data where permitted by law;

- withdraw consent where processing is based on consent;

- opt out of certain marketing communications; and

- exercise other rights available under applicable data-protection law.

The availability and scope of these rights may depend on the applicable law and the circumstances of the processing.

Where applicable, requests may be made using the contact details provided in this Policy.

We may need to verify your identity before processing a request to protect your personal data from unauthorised access or disclosure.

The Digital Personal Data Protection Act, 2023 provides a framework for rights and obligations relating to digital personal data, while the Digital Personal Data Protection Rules, 2025 provide further implementation requirements. The Rules were notified with a phased commencement schedule.

15. WITHDRAWAL OF CONSENT

Where processing of your personal data is based on consent, you may withdraw that consent subject to applicable law.

Where technically and legally applicable, withdrawal should be as easy as providing consent.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Withdrawal may also not stop processing where we are otherwise required or permitted by law to continue processing the relevant personal data, or where processing is necessary for purposes such as completing an order or transaction already initiated.

16. CHILDREN'S DATA

The Website is not intended to be used independently by children who are not legally capable of entering into a transaction.

We do not knowingly seek to collect personal data from children in circumstances where such collection is not permitted under applicable law.

If you believe that personal data relating to a child has been provided to us in circumstances where it should not have been collected, please contact us using the details below.

17. INTERNATIONAL DATA PROCESSING

Some of our service providers, including technology and e-commerce service providers, may process or store personal data outside India.

Where personal data is transferred, stored or processed outside India, we will do so in accordance with applicable law and any requirements governing such transfers.

Shopify's current documentation also addresses international processing and transfers associated with its services.

18. GRIEVANCES AND PRIVACY REQUESTS

If you have a question, concern or complaint about the way we handle your personal data, or if you wish to exercise a privacy right available to you, please contact us.

We will review and respond to your request in accordance with applicable law.

Privacy / Grievance Contact:
Email: support@gardensofvaitarna.com
Phone / WhatsApp: +91-7977642095

Where applicable, we may request additional information to verify your identity before processing your request.

19. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in:

- our business practices;

- the services we provide;

- technology;

- applicable law or regulations; or

- our privacy and data-processing practices.

The latest version will be published on the Website with the applicable “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

20. CONTACT US

For questions about this Privacy Policy, our privacy practices or your personal data, please contact:

Gardens of Vaitarna
A brand operated by Vaitarna Estate Private Limited

Email: support@gardensofvaitarna.com
Phone / WhatsApp: +91-7977642095
Registered Office / Business Address: Unit No.18, Unique Industrial Estate, Off Veer Savarkar Marg, Prabhadevi, Mumbai 400025.

Landmark – Near Siddhivinayak Temple