Privacy policy

Last updated: [19th September 2026]

PureVytals operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). PureVytals is based in India and primarily serves customers in India. PureVytals is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us, in accordance with applicable Indian law — including the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023 ("DPDPA") as it comes into force. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services:

  • Contact details — name, address, billing/shipping address, phone number, and email address.
  • Financial information — payment card details, transaction details, and payment confirmation (processed securely via Shopify Payments and our payment partners; we do not store your full card details on our own servers).
  • Account information — username, password, preferences and settings.
  • Transaction information — items viewed, added to cart or wishlist, purchases, returns, exchanges, and order history.
  • Communications with us — information you share when contacting our support team.
  • Device and usage information — IP address, browser/device type, and how you interact with the Services.

Personal Information Sources

We collect personal information:

  • Directly from you — when you create an account, browse or use the Services, or communicate with us.
  • Automatically — through cookies and similar technologies when you use our website.
  • From our service providers — such as Shopify, payment processors, and courier/logistics partners who process data on our behalf.

How We Use Your Personal Information

  • To provide and fulfill the Services — process payments, fulfil and ship orders, manage returns/exchanges, and maintain your account.
  • Marketing and communication — send order updates, offers, and promotional messages (you can opt out anytime).
  • Security and fraud prevention — protect your account and our platform from unauthorized or fraudulent activity.
  • Customer support — respond to your queries and provide assistance.
  • Legal compliance — comply with applicable Indian law or valid legal requests from government/law-enforcement authorities.

How We Disclose Personal Information

We may share your personal information with:

  • Shopify and our service providers (payment processing, courier/shipping partners, IT and customer-support tools) strictly to operate the Services.
  • Government or regulatory authorities, where required by applicable Indian law.
  • A successor entity, in the event of a business transfer such as a merger or acquisition.

We do not sell your personal information to third parties.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information on our behalf to provide and improve the Services. To learn more about how Shopify handles your data, see the Shopify Consumer Privacy Policy.

Children's Data

Our Services are not directed at children, and we do not knowingly collect personal information from anyone below 18 years of age without verifiable parental/guardian consent, in line with the Digital Personal Data Protection Act, 2023. If you believe a child has provided us with personal information, please contact us using the details below so we can delete it.

Your Rights (Under Indian Law)

Subject to applicable law — including the Digital Personal Data Protection Act, 2023, as its provisions come into force — you may have the right to:

  • Access the personal information we hold about you.
  • Correct or update inaccurate or incomplete personal information.
  • Erasure — request deletion of your personal information, subject to our legal retention obligations (e.g., tax and accounting records).
  • Withdraw consent for processing that is based on your consent, at any time.
  • Grievance redressal — raise a complaint about how we handle your personal information (see Grievance Officer details below), and, where applicable, escalate to the Data Protection Board of India.
  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

We may need to verify your identity before acting on any request.

Security and Retention

We take reasonable technical and organizational measures to protect your personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We retain your personal information only as long as necessary to provide the Services, comply with legal obligations (such as tax and accounting laws), and resolve disputes.

International Transfers

If we transfer your personal information outside India (for example, via our service providers), we take steps to ensure it continues to receive appropriate protection, consistent with applicable Indian law.

Grievance Officer

In accordance with the Information Technology Act, 2000, the applicable rules made thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for PureVytals is:

Name: Mr. Parth Kapoor 
Email: parth@purevytals.com
Address: Tulsi Vihar, Dayalbagh, 13-C, 282005, Agra, UP, India

We will acknowledge and address grievances within a reasonable timeframe, and in any case within 30 days of receipt, as required under applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy here and update the "Last updated" date above.

Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact us at parth@purevytals.com or write to us at Tulsi Vihar, Dayalbagh, 13-C, 282005, Agra, UP, India.