Privacy policy
Last updated: 12 October 2026
Vinyasa Living LLP ("Vinyasa Living", "we", "us") runs vinyasaliving.com and decides how your personal data is used, so we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). This notice tells you what we collect, why, how long we keep it, how to withdraw consent, how to use your rights and how to complain. It also meets the Information Technology Act, 2000, its 2011 rules on sensitive personal data, and the Consumer Protection (E-Commerce) Rules, 2020.
You may ask for this notice in English or any language listed in the Eighth Schedule of the Constitution by writing to info@vinyasaliving.com.
1. What we collect, why, and for how long
a) Name, mobile number, email, delivery and billing address
Why: To process, deliver and invoice your order, verify cash-on-delivery orders, and send order and delivery updates by email, SMS or WhatsApp.
Legal basis: You gave it to us to buy from us (legitimate use).
Kept for: 8 years from the order, as required for tax and LLP accounting records.
b) Mobile number and one-time passwords (login via KwikPass by GoKwik)
Why: To log you in and pre-fill your details at checkout.
Legal basis: Your consent.
Kept for: Until you delete your account, or 3 years after your last login.
c) Payment details
Why: To take payment. Card, UPI and bank details are entered on our payment gateway's secure page and are not stored by us. Cash on delivery is collected by our courier partner.
Legal basis: Legitimate use.
Kept for: Transaction reference only, 8 years.
d) Order history, returns, refunds and store credit
Why: To handle returns, exchanges, refunds, warranty questions and disputes.
Legal basis: Legitimate use.
Kept for: 8 years from the order.
e) Messages you send us (email, phone, WhatsApp, contact form)
Why: To answer questions and resolve complaints.
Legal basis: Legitimate use.
Kept for: 3 years after the matter is closed.
f) Marketing preferences
Why: To send newsletters, launches and offers by email, SMS or WhatsApp.
Legal basis: Your separate consent.
Kept for: Until you withdraw consent.
g) Device, browser, IP address and essential cookies
Why: To keep your cart, keep the site secure and prevent fraud.
Legal basis: Necessary to provide the site (legitimate use).
Kept for: 1 year.
h) Browsing data and session recordings (Google Analytics, Microsoft Clarity)
Why: To understand how the site is used and improve it.
Legal basis: Your consent through the cookie banner.
Kept for: Up to 14 months.
i) Advertising cookies and pixels (Meta, Google Ads)
Why: To measure our ads and show you relevant ads on other websites and apps.
Legal basis: Your consent through the cookie banner.
Kept for: Until you withdraw consent.
We do not collect sensitive data such as health, biometric or government ID information, and we never sell personal data.
2. Consent and how to withdraw it
- We ask for consent separately for marketing messages and for analytics and advertising cookies. These boxes are never pre-ticked, and saying no does not stop you from buying from us.
- You can withdraw consent at any time, as easily as you gave it:
- Email: use the unsubscribe link in any marketing email.
- SMS and WhatsApp: use the opt-out option in the message, or reply STOP.
- Cookies: use the "Cookie preferences" link in the website footer.
- Or write to info@vinyasaliving.com.
- Once you withdraw, we and our partners stop using your data for that purpose promptly. Withdrawal does not affect use that happened before it. We will still send messages you need about your orders.
-
Where available, you may also give, manage or withdraw consent through a Consent Manager registered with the Data Protection Board of India.
3. Who we share your data with, We share only what each partner needs for the purposes above:
- Shopify: hosts our store and checkout.
- Payment gateway partners: to process online payments.
- Courier and logistics partners: to deliver orders and collect cash on delivery.
- Messaging providers (Shopify Messaging, WhatsApp by Meta): to send order updates and, with consent, marketing.
- Google and Microsoft: website analytics, only with your consent.
- Meta and Google: advertising measurement and ads, only with your consent.
- Professional advisers, courts, regulators and government authorities: when the law requires it.
- A buyer or successor: if our business is merged or sold, under the same protections.
Our service providers act as Data Processors under contract and may use your data only on our instructions. Where Shopify, Meta or Google use data for their own purposes, their own privacy policies also apply.
4. Data processed outside India
Shopify and some of our partners store or process data on servers outside India. We transfer data only to countries the Government of India has not restricted under the DPDP Act, and our partners must protect it to the same standard.
5. Children
Our store is meant for adults aged 18 and above. We do not knowingly collect data from anyone under 18, and we do not track or target advertising at children. If we learn that a child has given us personal data without verifiable consent from a parent or guardian, we will delete it. A parent or guardian can contact us to request this.
6. Your rights
- You have the right to:
- Get a summary of the personal data we hold about you, how we use it, and who we have shared it with;
- Have your data corrected, completed or updated;
- Have your data erased once it is no longer needed, except what the law requires us to keep (for example, invoices);
- Withdraw any consent you have given;
- Have your complaints resolved through our Grievance Officer; and
- Nominate another person to exercise these rights for you if you die or become unable to act.
To use any of these rights, email info@vinyasaliving.com with the subject "Data request" from the email or mobile number linked to your orders. We may verify your identity first, and we will respond within one month.
Please give us accurate information and do not file false or frivolous complaints, as the DPDP Act requires of everyone.
7. How we protect your data
- The site and checkout use encrypted HTTPS connections, and payments run on PCI DSS-certified systems.
- Only staff who need your data can see it, and our admin accounts use two-step verification.
- We keep access and activity logs for at least 1 year to detect and investigate misuse.
-
Our partners are bound by contract to keep your data secure.
If a personal data breach affects you, we will tell you without delay by email, SMS or WhatsApp: what happened, the likely impact, and what we and you can do. We will also report it to the Data Protection Board of India as the law requires.
8. Cookies
- Essential cookies keep your cart and the site working. They are always on.
- Analytics cookies (Google Analytics, Microsoft Clarity) and advertising cookies (Meta, Google Ads) load only after you accept them in the cookie banner.
- You can change your choice at any time through "Cookie preferences" in the website footer.
9. Grievance Officer
For any complaint about your personal data, an order or our services, contact our Grievance Officer:
Name: Deepak Sharma
Designation: Customer Support Executive, Vinyasa Living LLP
Email: info@vinyasaliving.com
Phone: +91 9315524967 (Monday to Saturday, 9 am to 6 pm IST)
Address: A-25, Sector 58, Noida, Uttar Pradesh 201301, India
We acknowledge every complaint within 48 hours with a reference number and resolve it within one month of receiving it.
If you are not satisfied with our response, you may complain to the Data Protection Board of India about personal data matters. For consumer complaints, you may also contact the National Consumer Helpline (1915) or file on the e-Daakhil portal.
10. Changes to this policy
We will post any update here and change the date at the top. If we change why we use your data, we will tell you by email and ask for fresh consent where needed.
11. Contact us
Vinyasa Living LLP
A-25, Sector 58, Noida, Uttar Pradesh 201301, India
Email: info@vinyasaliving.com
GSTIN: 09ABBFV4235A1ZH