Legal

Privacy Policy

Last updated: July 2026

Pallvex ("we", "us", "our") respects your privacy. This policy explains what we collect, why we collect it, how we use it, and the choices you have.

1. Information we collect

  • Account details: name, username, email, phone number, and password (stored hashed).
  • Order & shipping data: shipping and billing addresses, order history, tracking, and returns.
  • Payment metadata: transaction IDs and status. Full card / UPI / netbanking details are handled by our PCI-DSS compliant partners (Razorpay). We never see or store them.
  • Device & usage data: browser, device, IP, pages visited, referring source — used to prevent fraud and improve the site.

2. How we use your data

  • To process, ship, and support your orders (including forwarding shipping details to our fulfilment partner Shopify).
  • To send transactional messages: order confirmations, dispatch, delivery, returns, refunds.
  • To personalise the store — recommendations, recently viewed, wishlist.
  • To meet legal, tax (GST), and accounting obligations.
  • With your consent only, to send marketing updates — you can unsubscribe any time.

3. Sharing

We never sell your data. We share the minimum necessary with:

  • Shopify & fulfilment partners — to ship the products you order.
  • Razorpay — to process payments securely.
  • Logistics carriers — for last-mile delivery and tracking.
  • Regulators & law enforcement — only when legally compelled.

4. Cookies

We use essential cookies to keep you signed in and remember your cart. Analytics cookies are aggregated and non-identifying. You can clear cookies from your browser at any time.

5. Data retention

Order records are retained for 7 years to comply with Indian tax law. Account data is retained while your account is active. You can request deletion at any time (see below).

6. Your rights

You may request access, correction, export, or deletion of your data at any time from Account → Settings, or by writing to hello@pallvex.store. We respond within 30 days.

7. Security

All traffic is encrypted with HTTPS. Passwords are hashed. Row-level security protects your records at the database level. Despite our safeguards, no system is 100% secure — please use a strong, unique password.

8. Children

Pallvex is not intended for children under 13. We do not knowingly collect data from minors.

9. Changes

We may update this policy from time to time. Material changes will be notified by email or a banner on the site.

10. Contact

Questions or concerns? Email hello@pallvex.store.