Privacy Policy

Effective date: 28 October 2026

This Privacy Policy explains what personal information AUM (“we”, “us”) collects, why we use it, who we share it with and the choices you have. We handle personal data in line with the Information Technology Act, 2000, the rules made under it and the Digital Personal Data Protection Act, 2023, as they apply to us.

1. Information we collect

• Details you give us: name, phone number, email address, delivery address and PIN code, order notes, and the content of messages you send through the contact form, email or WhatsApp.
• Account details: your email or phone and a password stored only as a secure one-way hash.
• Order information: items bought, amounts, coupon used, payment method and status, delivery and return history.
• Payment information: handled by our payment provider. We receive the payment status and a transaction reference, not your full card number, CVV, UPI PIN or net-banking credentials. For Cash on Delivery we record only that the order is COD.
• Technical data: IP address, browser type, device and pages visited, and a session cookie, used to keep the Store working and secure (for example login throttling and fraud prevention).
• Reviews: the name, rating and comments you choose to publish.

2. Why we use it

• To create your account, accept and deliver your orders, take payment and handle returns and refunds.
• To send order confirmations and status updates by email or WhatsApp, and to answer your questions.
• To prevent fraud, secure the Store, resolve disputes and meet legal, tax and accounting obligations.
• To improve products, content and the Store experience, using aggregated or limited data.
• To send offers or festival updates only if you have agreed. You can opt out at any time by replying “STOP” on WhatsApp, using the unsubscribe link in an email or writing to us.

We process your data because you have given consent, because it is needed to carry out your order, or for other lawful purposes recognised by law such as legal compliance and fraud prevention.

3. Who we share it with

We do not sell your personal data. We share only what is needed with: courier and logistics partners (name, phone, address, PIN code and order contents for delivery); our payment provider (to process online payments); hosting, email and security providers who run the Store for us; professional advisers and authorities where the law requires; and a buyer or successor if our business is ever transferred (with this policy continuing to apply). These parties may only use data for the services they provide to us.

If you contact us on WhatsApp, the conversation is also governed by WhatsApp’s own terms and privacy policy. Opening a map link takes you to Google Maps, which has its own privacy policy.

4. Cookies and similar technologies

We use only what the Store needs to work: a session cookie to keep your cart and login and to protect forms against forgery, and your browser’s local storage to remember your light/dark theme choice. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but the cart, checkout and login will then not work.

5. How long we keep data

We keep personal data only as long as needed for the purposes above. Order and invoice records are retained for the period required by tax and accounting law (generally several years). Messages and enquiries are kept for as long as needed to resolve them and for a reasonable period afterwards. Login-attempt records are deleted automatically after a short period. When data is no longer needed, we delete or anonymise it.

6. Your rights and choices

Subject to law, you may ask us to: give you a summary of the personal data we hold and how it is used; correct or update inaccurate data; delete your data or account (we may keep records we are legally required to keep); withdraw consent for marketing or other consent-based processing; and nominate someone to exercise your rights on your behalf in case of death or incapacity. Write to support@ivirth.in from the email address on your account. We may ask for proof of identity first and will respond within a reasonable time.

7. Security

We use reasonable safeguards: encrypted (HTTPS) connections, hashed passwords, protected admin access, rate-limited logins and restricted access to data. No online system is completely secure, so please choose a strong password and keep it private. If a personal data breach affecting you occurs, we will notify you and the authorities as the law requires.

8. Children

The Store is meant for adults. We do not knowingly collect personal data from anyone under 18 without a parent’s or guardian’s consent. If you believe a child has given us data, please contact us and we will delete it.

9. Where data is stored

Data is stored on secure servers of our hosting provider. If a service provider processes data outside India, we require appropriate protection as the law demands.

10. Changes to this policy

We may update this policy from time to time. The effective date above shows the latest version; for material changes we will place a notice on the Store.

11. Contact and grievances

For privacy requests or complaints, contact our Grievance Officer, AUM Customer Care at support@ivirth.in (subject “Privacy”) or WhatsApp. Address: Aligarh, Uttar Pradesh, India (View AUM on Google Maps ↗). We acknowledge complaints within 48 hours and aim to resolve them within one month. If you remain unhappy, you may approach the Data Protection Board of India once it is operational, as provided in the DPDP Act.