Privacy Policy

Effective Date: October 2025

This Privacy Policy explains how VDesign (operating as “TAVISTRA”)
collects, uses, shares, and protects your information when you use our Platform or interact with us.

1) Scope & Controller

This Privacy Policy explains how TAVISTRA handles your data across our website, platform, and services.
By using our platform, you agree to this Policy and our Terms of Use.

2) Information We Collect

• Contact & Account Data: name, email, phone, shipping/billing addresses, login data.
• Order & Payment Metadata: order details, payment status/method (processed via Razorpay; we do not store card or UPI credentials).
• Device/Technical Data: IP address, device identifiers, browser type, cookies, and related technologies.
• Usage Data: pages visited, clicks, time spent, referring URLs.
• Communications: support messages, reviews, surveys, and responses.
• Media (Optional): photos or videos uploaded for reviews or services.

3) How We Use Your Information

• To process orders, payments, returns, exchanges, and provide customer support.
• To operate, maintain, and improve our Platform (including analytics, debugging, and security).
• To communicate transactional updates and respond to queries.
• To send marketing communications where consent is provided.
• To comply with legal obligations and enforce our Terms.

4) Legal Bases (India)

We rely on one or more of: your consent, performance of a contract, our legitimate interests
(such as fraud prevention and service improvement), and legal compliance.

5) Cookies & Analytics

• We use cookies and similar technologies for essential site functions, performance, and analytics.
• We currently use Google Analytics and may include other providers. You can manage cookies via browser settings.

6) Payment Processing

Payments are processed by Razorpay. Sensitive payment data such as card numbers or UPI PINs are handled securely by Razorpay —
TAVISTRA does not store this information.

7) Sharing of Information

• With service providers (payment gateways, logistics, analytics, cloud hosting, customer support tools) under strict safeguards.
• With authorities where required by law or to protect rights, safety, and security.
• As part of business transfers in case of reorganisation, merger, or similar transactions.

8) Data Retention

Personal data is retained as long as necessary for providing services, complying with laws (including tax and audit),
resolving disputes, and enforcing agreements. Retention varies by category and legal requirements.

9) Your Rights

• Request access, correction, updating, or deletion of your personal data.
• Withdraw consent where processing is based on consent.
• Lodge grievances or complaints with our Grievance Officer (see Contact section).
• Opt out of marketing communications via unsubscribe link or Support.

10) Children

Our Platform is not intended for children under 18. We do not knowingly collect data from minors.

11) Security

We use reasonable technical and organisational safeguards to protect data, though no method is 100% secure.

12) International Transfers

If your data is transferred outside India, we ensure appropriate safeguards as per applicable law.

13) Updates to this Policy

We may update this Privacy Policy periodically. Significant changes will be posted here with a revised effective date.

14) Contact