Skip to content
Legal

Privacy policy

How we collect, use and protect your information — in plain language.

Last updated: June 2026

This policy explains how VedikCraft ("we", "us") handles personal data when you use vedikcraft.com. By using the site you agree to the practices described here.

1. Data we collect

Information you give us

  • Account details: name, email address, and a password (stored as a one-way hash — we never see your plain-text password)
  • Delivery information: shipping address, phone number and any special delivery instructions
  • Order data: items purchased, quantities and order history. Payment card details are processed directly by our payment partners and are never stored on our servers.
  • Communications: messages you send us by email or through any contact form

Information collected automatically

  • Region preference cookie: we set one first-party cookie (vedikcraft_region) to remember your country and currency preference so you are not redirected on every visit. It contains only a region code and expires after 1 year. We do not use advertising or third-party tracking cookies.
  • Usage data: pages visited, referring URL, device type and browser — used in aggregate to improve the site. We do not build individual behavioural profiles for advertising.
  • Server logs: IP addresses are retained for up to 30 days for security and fraud prevention, then deleted.

2. How we use your data

  • To process and fulfil your orders and communicate order status
  • To send transactional emails: order confirmation, dispatch notification, delivery updates and support replies
  • To send marketing emails about new crafts and offers — only if you have opted in. You can unsubscribe at any time via the link in any email.
  • To prevent fraud, abuse and keep the marketplace safe
  • To improve the site based on aggregate usage patterns

Legal basis (EU/EEA users): contract performance for order processing; legitimate interests for security and site improvement; consent for marketing communications.

3. Sharing your data

We share personal data only where necessary:

  • Artisans and sellers: your shipping address and order details so they can fulfil your order
  • Delivery partners: name, address and phone number to arrange delivery of your order
  • Payment processors: billing details to complete payment (processed under their own privacy policies)
  • Infrastructure providers: our hosting, database and transactional-email providers process data on our behalf under data-processing agreements and are not permitted to use it for their own purposes

We do not sell your personal data to third parties, ever.

4. International transfers

VedikCraft is based in India and ships worldwide. Some of our service providers operate outside India. Where data is transferred internationally, we use standard contractual safeguards or rely on the data-protection adequacy of the recipient country.

5. Retention

  • Order records are kept for 7 years to comply with Indian GST and accounting requirements
  • Account data is kept while your account is active. You can request deletion at any time by emailing us.
  • Marketing preference records are kept until you unsubscribe
  • Server logs are retained for 30 days, then deleted automatically

6. Your rights

You can at any time:

  • Access or correct your personal data via your account settings or by emailing us
  • Request deletion of your account and associated personal data
  • Withdraw consent for marketing emails via the unsubscribe link in any email we send
  • Lodge a complaint with India's Data Protection Board (established under the DPDP Act 2023) or your local data-protection authority

7. Cookies

We use one first-party functional cookie (vedikcraft_region) to store your country/currency preference. We do not set advertising, analytics or third-party tracking cookies. No cookie consent banner is displayed because we do not set non-essential cookies.

8. Security

Passwords are stored as salted cryptographic hashes. All connections use HTTPS encryption. We apply industry-standard security practices and review them regularly. No internet service can guarantee absolute security; if you believe your account has been compromised, please contact us immediately at support@vedikcraft.com.

9. Children

VedikCraft is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

10. Grievance Officer

Under India's Consumer Protection (E-Commerce) Rules 2020 and the DPDP Act 2023, you may raise a data or privacy grievance with our designated Grievance Officer:

Grievance Officer — VedikCraft
Email: privacy@vedikcraft.com
We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

11. Changes to this policy

We may update this policy as the platform evolves. Material changes will be communicated by email (if you have an account) or by a notice on the site. The "Last updated" date at the top shows when the current version took effect.

Questions about your data? Email privacy@vedikcraft.com.