Privacy Policy
Who we are. https://buyvorastores.online ("the Website") is owned and operated by BUYVORA PRIVATE LIMITED, a company incorporated in India under the Companies Act, 2013, trading under the brand name "Buyvora".
Registered office: Unit No. A-203, 204, Kotia Nirman Commercial, Andheri, Mumbai, Maharashtra 400053, India
CIN: U62099MH2026PTC470105 · PAN: AAOCB6154B · GSTIN: 27ADWPO3971H1ZT
Udyam registration: UDYAM-MH-19-0430940
Email: support@buyvorastores.online · Phone: +91 00000 00000
Support hours: Monday to Saturday, 10:00 AM to 7:00 PM IST
BUYVORA PRIVATE LIMITED respects your privacy. This Policy explains what personal data we collect through buyvorastores.online, why we collect it, how we use and protect it, who we share it with, and the rights available to you. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.
1. Data we collect
| Category | Examples | Why we need it |
|---|---|---|
| Account data | Name, email address, mobile number, hashed password | To create and secure your account and to authenticate you at sign-in |
| Order & delivery data | Shipping address, city, state, PIN code, contact number, order contents and value | To process, pack, dispatch and deliver your order and to handle returns |
| Transaction data | Order amount, payment method, gateway transaction reference and status | To confirm payment, issue invoices, process refunds and meet tax obligations |
| Support data | Ticket subject, message content, correspondence history | To investigate and resolve the issue you raised and to keep an audit trail |
| Optional business data | Business name, PAN, GSTIN and supporting document images | Only if you voluntarily apply for a business account and GST tax invoicing |
| Technical data | IP address, browser type, device type, pages viewed, session cookie | To keep the site secure, to keep your cart and session working, and to diagnose faults |
What we never collect. We do not collect or store card numbers, CVV codes, UPI PINs, net-banking passwords or any other payment authentication credentials. These are captured directly by our PCI-DSS compliant payment gateway on its own secure infrastructure and are never visible to Buyvora.
Aadhaar. Aadhaar details are not required to register, browse or purchase on buyvorastores.online. Where a business customer voluntarily supplies an identity document as part of an optional business-account application, it is used solely to verify that business, is never used for Aadhaar authentication or e-KYC, and can be withdrawn and deleted on request.
2. Lawful basis and consent
We process your personal data on the basis of the consent you give when you create an account or place an order, and for the performance of the contract between us. Certain records — invoices and transaction records in particular — are retained to comply with legal obligations under Indian tax and company law. You may withdraw consent at any time by writing to grievance@buyvorastores.online; where withdrawal prevents us from fulfilling a pending order, we will tell you before acting on it.
3. How we use your data
- To create, secure and administer your account.
- To accept, process, pack, dispatch, deliver and invoice your orders.
- To handle cancellations, returns, replacements and refunds.
- To respond to support tickets and to keep a record of the correspondence.
- To detect, investigate and prevent fraud, payment abuse and misuse of the Website.
- To meet accounting, GST, and other statutory record-keeping obligations.
- To send transactional messages about your orders. We send marketing messages only if you have opted in, and every such message carries an unsubscribe option.
4. Who we share data with
We do not sell, rent or trade your personal data. We share it only as necessary, and only with:
- Payment gateway partners — to authorise, capture, verify and refund payments;
- Logistics and courier partners — the name, address and phone number needed to deliver your parcel;
- Technology service providers — hosting and infrastructure providers acting on our instructions under confidentiality obligations;
- Professional advisers and auditors — where required for accounting, tax or legal compliance;
- Law-enforcement or regulatory authorities — where we are legally compelled to disclose.
5. Cookies
We use a small number of cookies, all of them functional:
- Session cookie — keeps you signed in and preserves your shopping cart between pages. The site cannot function without it.
- Security cookie — carries the anti-forgery token that protects your forms from being submitted by a third-party site.
We do not run third-party advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings, but sign-in and checkout will stop working if you do.
6. Data security
- The entire Website is served over HTTPS with a valid TLS certificate.
- Passwords are stored only as salted one-way hashes and are never recoverable in plain text — not even by us.
- Customer records and uploaded documents are stored outside the public web root and are not directly reachable by URL.
- Access to production data is limited to authorised personnel who need it to do their job.
- Forms are protected against cross-site request forgery, and credential endpoints are rate-limited.
No system can be guaranteed perfectly secure. In the event of a personal data breach that is likely to cause you harm, we will notify you and the relevant authority without undue delay.
7. How long we keep data
| Record | Retention period |
|---|---|
| Account records | For as long as your account is open, plus 12 months after closure |
| Order, invoice and tax records | 8 years, as required under Indian tax and company law |
| Support tickets | 3 years from resolution |
| Optional business verification documents | Until the business relationship ends, or on your deletion request, whichever is earlier |
| Server and security logs | Up to 180 days |
8. Your rights
Subject to applicable law, you may:
- Access the personal data we hold about you;
- Correct data that is inaccurate, incomplete or out of date;
- Erase data we no longer need for a legal or contractual purpose;
- Withdraw consent to processing that relies on it;
- Opt out of marketing communications at any time;
- Complain to our grievance officer, and thereafter to the competent authority.
To exercise any of these, email grievance@buyvorastores.online from your registered email address. We respond to verified requests within 30 days.
9. Children
The Website is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy from time to time. The current version, with its "last updated" date, is always published on this page. Material changes will be highlighted on the Website.
11. Grievance officer
Grievance Officer, BUYVORA PRIVATE LIMITED
Unit No. A-203, 204, Kotia Nirman Commercial, Andheri, Mumbai, Maharashtra 400053, India
Email: grievance@buyvorastores.online
Hours: Monday to Saturday, 10:00 AM to 7:00 PM IST
Questions about this document? Write to support@buyvorastores.online or see our Contact page for postal and phone details.