Privacy Policy

This Privacy Policy explains how Wearvistafun Erommerce Trading ("Wear Vista Fun", "we", "us", or "our"), operating https://wearvistafun.com, collects, uses, stores, shares, and protects the personal information of users and customers. We process personal data in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

1 Information We Collect

1.1 Information you provide directly

• Identification & Contact: name, mobile number, email, billing/shipping address, pincode.
• Order Information: products purchased, order history, preferred sizes, payment method.
• Communications: messages sent via the contact form, customer support emails, reviews.

1.2 Information collected automatically

• Device & Usage: IP address, device type, browser, operating system, pages visited, time spent.
• Cookies & Similar Technologies: session cookies, analytics cookies (see Section 7).

1.3 Information from third parties

• Payment Partner: transaction status, reference numbers, masked UPI ID — never full credentials.
• Courier Partners: shipping status, delivery confirmation.

2 How We Use Your Information

• Process and fulfill your orders, including shipping, payment, and customer support.
• Send transactional messages (order confirmation, dispatch, delivery, refund).
• Send marketing communications (only with your consent — you can opt out anytime).
• Improve our website, product offerings, and customer experience.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Comply with applicable laws, court orders, and regulatory requirements.

3 Legal Basis & Consent

Under the DPDP Act, 2023, we process your personal data on the following lawful grounds:

• Consent: for marketing emails, optional cookies, voluntary surveys.
• Performance of contract: to fulfill your order and provide post-sales support.
• Legitimate use: for fraud prevention, security, and analytics.
• Legal obligation: for tax records, regulatory compliance, lawful requests.

You may withdraw consent at any time by emailing grievance@wearvistafun.com.

4 Sharing & Disclosure

We never sell your personal data. We share it only with:

• Payment gateways (MMADPay) — to process UPI transactions securely.
• Logistics partners (Delhivery, Bluedart, India Post, etc.) — to deliver your order.
• Analytics & communication providers (Google Analytics, transactional email) — under strict data-processing agreements.
• Government authorities — only when required by law, court order, or regulatory mandate.

5 Data Retention

We retain your personal data only for as long as necessary:

• Order data: retained for 8 years (tax/audit compliance under Indian law).
• Marketing data: until you unsubscribe or withdraw consent.
• Account / contact data: until you request deletion (subject to legal retention rules).

6 Your Rights Under the DPDP Act

As a Data Principal, you have the following rights:

• Right to access — request a copy of the personal data we hold about you.
• Right to correction — request rectification of inaccurate or outdated data.
• Right to erasure — request deletion of your data, subject to legal retention requirements.
• Right to withdraw consent — for any processing based on consent.
• Right to grievance redressal — escalate concerns to our Grievance Officer.
• Right to nominate — designate a representative in case of incapacitation.

7 Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: shopping cart, session, authentication. These cannot be disabled.
• Analytics cookies: Google Analytics (GA4) to understand site usage and improve the experience.
• Marketing cookies: only with your consent, for relevant ads (currently not in active use).

You can disable non-essential cookies through your browser settings. This may affect site functionality.

8 Security Measures

We implement industry-standard safeguards to protect your data:

• HTTPS encryption for all data in transit.
• Access controls — only authorised personnel can access customer data.
• PCI-DSS compliant payment processing through our payment partner. We never store card or UPI credentials.
• Regular security audits and patching of systems.

9 Children's Privacy

Our services are intended for users aged 18 and above. We do not knowingly collect personal data from children. Processing of a child's personal data (if any), as defined under the DPDP Act, will only occur with verifiable parental consent and in compliance with the Act.

10 Changes & Contact

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the Site after changes constitutes your acceptance of the updated Policy.