Privacy policy

This policy explains how VedikCraft ("we", "us") handles personal data when you use vedikcraft.com. By using the site you agree to the practices described here.

1. Data we collect

Information you give us

• Account details: name, email address, and a password (stored as a one-way hash — we never see your plain-text password)
• Delivery information: shipping address, phone number and any special delivery instructions
• Order data: items purchased, quantities and order history. We currently operate on Cash on Delivery — no payment card details are collected or processed by us. When online payment methods launch, card details will be handled directly by our payment partners and will not be stored on our servers.
• Communications: messages you send us by email or through our contact page
• Newsletter subscription: your email address if you sign up for updates through our mailing list — used only to send you news about new crafts and VedikCraft updates. You can unsubscribe at any time via the link in any email we send.

Information collected automatically

• Functional cookies: we set first-party cookies to operate the site — a routing cookie (_medusa_cache_id) to link your session to your country's prices (1 day), a cart cookie (_medusa_cart_id) to preserve your basket (7 days), a locale cookie (_medusa_locale) to remember your chosen country (1 year), and an authentication cookie (_medusa_jwt) when you sign in (7 days). All are strictly necessary. We do not set advertising or third-party tracking cookies.
• Usage data: pages visited, referring URL, device type and browser — used in aggregate to improve the site. We do not build individual behavioural profiles for advertising.
• Server logs: IP addresses are retained for up to 30 days for security and fraud prevention, then deleted.

2. How we use your data

• To process and fulfil your orders and communicate order status
• To send transactional emails: order confirmation, dispatch notification, delivery updates and support replies
• To send marketing emails about new crafts and offers — only if you have opted in. You can unsubscribe at any time via the link in any email.
• To prevent fraud, abuse and keep the marketplace safe
• To improve the site based on aggregate usage patterns

Legal basis (EU/EEA users): contract performance for order processing; legitimate interests for security and site improvement; consent for marketing communications.

3. Sharing your data

We share personal data only where necessary:

• Artisans and sellers: your shipping address and order details so they can fulfil your order
• Delivery partners: name, address and phone number to arrange delivery of your order
• Payment processors: we currently take Cash on Delivery only and share no card or payment data with processors. When online payment methods launch, billing details will be shared only with the relevant payment processor to complete the transaction, under their own privacy policies.
• Infrastructure providers: our hosting, database and transactional-email providers process data on our behalf under data-processing agreements and are not permitted to use it for their own purposes

We do not sell your personal data to third parties, ever.

4. International transfers

VedikCraft is based in India and ships worldwide. Some of our service providers operate outside India. Where data is transferred internationally, we use standard contractual safeguards or rely on the data-protection adequacy of the recipient country.

5. Retention

• Order records are kept for 7 years to comply with Indian GST and accounting requirements
• Account data is kept while your account is active. You can request deletion at any time by emailing us.
• Marketing preference records are kept until you unsubscribe
• Server logs are retained for 30 days, then deleted automatically

6. Your rights

You can at any time:

• Access or correct your personal data via your account settings or by emailing us
• Request deletion of your account and associated personal data
• Withdraw consent for marketing emails via the unsubscribe link in any email we send
• Lodge a complaint with India's Data Protection Board (established under the DPDP Act 2023) or your local data-protection authority

7. Cookies

We set the following strictly-necessary first-party cookies. We do not set advertising, analytics, or third-party tracking cookies. No cookie consent banner is displayed because all cookies are essential or functional. We also record anonymous, cookie-free page-view counts (path and referrer only) to understand which crafts interest visitors.

• _medusa_cache_id — links your session to your country's regional pricing; expires after 1 day; httpOnly
• _medusa_cart_id — preserves your shopping basket between visits; expires after 7 days; httpOnly
• _medusa_locale — remembers your chosen country and currency; expires after 1 year
• _medusa_jwt — authentication token, set only when you sign in; expires after 7 days; httpOnly

8. Security

Passwords are stored as salted cryptographic hashes. All connections use HTTPS encryption. We apply industry-standard security practices and review them regularly. No internet service can guarantee absolute security; if you believe your account has been compromised, please contact us immediately at support@vedikcraft.com.

9. Children

VedikCraft is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

10. Grievance Officer

Under India's Consumer Protection (E-Commerce) Rules 2020 and the DPDP Act 2023, you may raise a data or privacy grievance with our designated Grievance Officer:

Grievance Officer — VedikCraft
Email: grievance@vedikcraft.com
We acknowledge all complaints within 24 hours and aim to resolve them within 15 days, in keeping with the IT (Intermediary Guidelines) Rules 2021.

11. Changes to this policy

We may update this policy as the platform evolves. Material changes will be communicated by email (if you have an account) or by a notice on the site. The "Last updated" date at the top shows when the current version took effect.

Questions about your data? Email privacy@vedikcraft.com.