Privacy policy
Velun Ventures Private Limited respects your privacy. This policy explains what we collect, why, and the choices you have — in line with India's Digital Personal Data Protection Act, 2023.
Last updated 1 Sept 2026
1. What we collect
- Order details: name, business name, GSTIN, phone, email, delivery and billing addresses, items purchased.
- Enquiries: anything you type into the quote or contact forms, or send us on WhatsApp.
- Account data: login email and saved addresses if you create a portal account.
- Usage data: pages viewed, searches and device information via Google Analytics (anonymised IP).
2. Payments
Card, UPI and netbanking details are entered directly into Razorpay's PCI-DSS compliant checkout. We receive only a payment reference, method and status — never your card number or UPI PIN.
3. How we use it
- To process, invoice, dispatch and support your orders (including sharing your address and phone with the courier).
- To send order and dispatch updates by email, SMS or WhatsApp.
- To respond to quotes and enquiries.
- To comply with GST and accounting law — invoices are retained for 8 years.
- With your consent, to send occasional product or offer updates. You can opt out any time.
4. Who we share it with
Only service providers needed to run the business: Razorpay (payments), our courier partners (delivery), Supabase (database hosting), Resend (transactional email), Vercel (website hosting) and Google Analytics. We never sell your data.
5. Cookies
We use a session cookie for portal login, a local-storage entry for your cart, and Google Analytics cookies for aggregate traffic statistics. You can block analytics cookies in your browser without affecting ordering.
6. Your rights
You can ask us to access, correct or delete your personal data, or withdraw consent for marketing, by emailing packworks@velun.in. We respond within 30 days. Data needed for tax records is retained as required by law.
7. Security
Data is encrypted in transit (TLS) and at rest. Access to customer records is limited to staff who need it to fulfil orders. If a breach affecting your data ever occurs we will notify you and the Data Protection Board as required.