Privacy Policy - How We Use Store Data

This page describes how the VEETREE store currently handles personal information.

What we collect

When you shop or contact us, we may collect:

• Your name, phone number, and email address.
• Your delivery address and pincode.
• Order details and communication history.
• Payment status and order references. Card, UPI and wallet credentials are handled by Razorpay, not entered into the VEETREE store database.
• If you submit a review: the product, display name, rating, optional title and review text. The review form does not ask for your phone number or email address.

The store also receives basic technical information needed to serve and protect the site, such as the requested page, browser or device details, timestamps and network information sent with the request. Google Analytics records page visits and interactions after its script loads.

Why we collect it

• To process, confirm, pack, and deliver your orders, including payment confirmation.
• To provide customer support and handle returns or refunds.
• To send order and service updates. The current store does not have a newsletter sign-up.
• To moderate and publish customer reviews, count helpful votes and limit spam.
• To understand store use, diagnose problems and improve navigation through Google Analytics.

Browser storage and analytics

• Your bag and recently viewed product slugs are stored in your browser's local storage.
• A helpful-review choice is stored locally, and the server sets a random HttpOnly cookie to keep one active vote per browser. The cookie expires after one year.
• Google Analytics is scheduled after a first interaction or an idle delay following page load. Its script is supplied by Google and may use cookies or similar identifiers under Google's terms.

You can block or clear cookies and local storage in your browser. Doing so can clear your saved bag, recently viewed list or review-vote selection.

Reviews and helpful votes

• A submitted review stays unpublished until it is checked. If approved, its display name, rating, title and text appear publicly on the store.
• A helpful vote sets a random, HttpOnly browser cookie so one browser keeps one active vote per review. Your browser also stores the choice locally so the selected button remains visible. The server stores a one-way hash of the random token with the vote, not your name.
• To slow automated submissions, the store temporarily records a secret-keyed, one-way code derived from the network address with the action time. It does not store the network address in the rate-limit table. Events stop affecting limits after one day, and records older than two days are removed during later review activity.

Sharing

We share only what a provider needs for its part of the service:

• Vercel hosts the storefront and its server functions.
• Supabase stores order, review and store-operation records.
• Razorpay creates and verifies online payments. It receives the order reference and checkout contact details needed for payment; VEETREE does not store card, UPI or wallet credentials.
• Google Analytics receives analytics events and the technical information sent when its script loads.
• A courier or logistics provider receives the recipient name, phone number and delivery address needed to deliver the parcel.
• Gmail or WhatsApp handles message data when you choose those contact channels.

We may also disclose information to professional advisers or public authorities when required by law. We do not sell personal data.

Retention

We keep order and contact information for as long as needed to fulfil orders, meet legal and tax obligations, and resolve disputes, after which it is deleted or anonymised. Approved reviews and their vote counts stay on the store until they are removed or no longer needed. The helpful-vote cookie expires after one year; you can remove it sooner by clearing this site's browser data.

Provider-held records, including payment and analytics records, are also subject to the provider's retention settings and legal duties. We do not publish a shorter fixed period where the store's operational or legal record-keeping period has not yet been confirmed.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw marketing consent at any time. We may need to retain records required for tax, fraud prevention, dispute resolution or another legal obligation. To make a request, contact us from the email address or phone number connected with your order where possible.

Security

The production store uses encrypted HTTPS connections. Administrative database credentials stay on the server, and payment credentials are handled by Razorpay rather than stored in the VEETREE order database. No online service can promise absolute security, so please do not send passwords or full payment credentials by email or WhatsApp.

Applicable Indian data law

India's Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 have phased commencement dates. VEETREE will apply the provisions that are in force and update this policy as later provisions take effect, alongside other applicable Indian law.

Privacy requests and complaints

Current published contact
Email veetree.life@gmail.com. This inbox currently receives privacy requests and complaints. Include enough detail for us to identify the relevant order, message or review without sending passwords or payment credentials. A separate officer name is not shown unless it has been confirmed for publication.