Privacy Policy

1. Principles of Data Processing

Vanguard E-commerce Private Limited ("we", "us", "our") values the privacy of our customers and visitors. We operate this single-vendor storefront in strict compliance with the **Digital Personal Data Protection (DPDP) Act, 2023** and the **Information Technology Act, 2000**.

We collect and process personal data solely for lawful purposes related to providing you with premium items, dispatching orders, and maintaining secure digital transactions. Processing is based on either your explicit, unambiguous consent or standard legal grounds (such as processing an invoice or fulfilling a logistics shipment).

2. Personal Data We Collect

In the course of your interactions with our storefront, we collect the following categories of personal information:

• Identity Data: Full name, age/date of birth (to ensure contract eligibility under the Indian Contract Act).
• Contact Data: Shipping address, billing address, email address, and active telephone numbers (validated using the `+91` country code format).
• Financial Details: Dynamic billing records, transactional amounts, and localized GST identifiers (GSTIN) for corporate billing claiming Input Tax Credits (ITC). Financial credentials are captured securely by our authorized payment processor, RazorPay, and never stored directly on our servers.
• Technical Data: IP addresses, browser types, device information, and security session cookies used strictly to prevent checkout frauds and session hijacking.

3. Absolute Data Localization

In accordance with data sovereignty mandates issued by Indian regulatory bodies, all database backups, customer records, and communication histories are processed and stored on **secured physical or virtual servers located strictly within the geographical boundaries of India**. No personal data is transferred across international borders or shared with third-party servers outside India.

4. Security & Sanitization Protocols

We maintain rigorous architectural safeguards to protect your personal information:

• CSRF Shielding: All customer-facing interactive forms include strict Laravel `` cryptographic directives to block cross-site request forgery attacks.
• XSS Mitigation: Any incoming data collected through the contact forms or search queries is strictly filtered using server-side functions like `strip_tags()` and `htmlspecialchars(..., ENT_QUOTES, 'UTF-8')` to prevent Cross-Site Scripting injections.
• Encrypted Communications: All communication links between the client browser, our storefront, and integrated microservices (RazorPay, ShipRocket) are fully encrypted using standard Transport Layer Security (TLS/HTTPS).

5. Rights of the Data Principal

Under Section 6 of the DPDP Act, 2023, you hold absolute rights regarding your personal data:

• Right to Access: You can request a summary of the personal data we hold about you and the processing operations performed on it.
• Right to Correction & Erasure: You have the right to correct, complete, update, or request the deletion of your personal data when it is no longer required for the purpose it was collected.
• Right to Withdraw Consent: You may withdraw your consent for future marketing communications at any point without impacting the legality of any data processed based on prior consent.

6. Grievance Redressal Officer

If you have questions about this Privacy Policy, wish to exercise your data principal rights, or register a complaint, you may contact our designated Grievance Officer: