Privacy Policy
Cando Vixa keeps the least personal data that will get a parcel to your door and let us settle a breakage claim afterwards. This page sets out what we hold, why, who else sees it and what you can require of us. It follows the Digital Personal Data Protection Act, 2023 (DPDP Act 2023) and the Information Technology Act, 2000 (IT Act 2000), with the rules made under them.
What we collect
- Order data: name, delivery address with PIN code, phone number, email address and the items ordered.
- Correspondence: emails and form messages, kept so a reply continues where the last one stopped.
- Claim evidence: the unboxing video and photographs you send when something arrives cracked.
- Site analytics: aggregated pages-visited and device data, used to fix what is slow or unclear.
We do not ask for date of birth, gender, income, PAN or Aadhaar, and we do not buy personal data from anyone.
What never reaches us
We do not store card numbers, CVV codes, UPI PINs or banking passwords, and we do not accept card payments at all. UPI authorisation happens inside your own app; Cash on Delivery is settled with the courier.
Why we hold it
To confirm and pack the order, let the courier deliver it, handle a return, replacement or refund, answer your questions, detect fraud and meet record-keeping duties under Indian law. We do not profile customers and we do not sell or rent personal data.
Who we share it with
Only where the order cannot otherwise happen: the delivery partner receives your name, address and phone number, and the UPI provider receives what it needs to process payment. Where a consignment is damaged in transit, the unboxing video may be passed to the courier as evidence for the claim — that is its only other use. Our website and email are hosted by providers processing data on our instructions.
Cookies
Cookies keep the cart intact between pages, remember preferences and give anonymous usage statistics. You can block or delete them in your browser, though the cart and checkout need the essential ones.
Retention
Order and invoice records are held as long as tax and consumer-protection law requires. Claim videos and support correspondence are kept while the case is open and deleted once it closes. Analytics data is aggregated with no direct identifier.
Your rights under the DPDP Act, 2023
You may request a copy of the personal data we hold about you, ask us to correct or complete it, ask for erasure where it is no longer needed for an order or a legal obligation, withdraw a consent given earlier, and nominate someone to exercise these rights for you. Write to the Grievance Officer below; we act and confirm what was done, or explain why we cannot.
Children
This shop sells goods used with an open flame and is not intended for anyone under 18. We do not knowingly collect a child’s personal data; tell us if you believe we have and it will be deleted.
Security
The site is served over an encrypted connection, administrative access is restricted, and we keep only what we need. No internet system is perfectly secure and we do not claim otherwise.
Fault reports and replacement requests
A report of a cracked votive or a missing mirror tile is handled as a replacement request under the Refund and Returns Policy. The evidence you send is used only to settle that request and, where relevant, to support the courier claim.
Grievance Officer
Questions, requests or complaints about your personal data go to the Grievance Officer for Cando Vixa at service@candovixa.shop, or by post to 52, Hawa Sadak Rd, Patel Nagar, Geejgarh Vihar Colony, Bais Godam, Jaipur, Rajasthan 302006, India. Complaints are acknowledged within 24 hours and resolved within 30 days, as required under the DPDP Act, 2023 and the IT Act 2000. Working hours are Monday – Saturday, 10:00 AM – 6:00 PM IST. Closed on Sundays and public holidays.
Changes
A revised policy is published on this page. The version in force on the day you order applies to that order.