This policy explains what Aurinest Pavilion collects when you use aurinestpavilion.shop, why, who sees it, and what you can ask us to do with it. It is written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, together with the rules made under them.
1. Who is responsible for your data
The data fiduciary is Aurinest Pavilion, a sole proprietorship trading as Aurinest Pavilion from 111/222, Vijay Path, Jhalana Chhod, Mansarovar, Jaipur, Rajasthan 302020, India. Any question about your personal data goes to the Grievance Officer named in section 11.
2. What we collect
| To fulfil an order | Name, delivery address, PIN code, phone number, email address, order contents |
|---|---|
| To confirm payment | The fact of a successful UPI transfer and its reference; or the COD amount collected |
| If you create an account | Login email, an encrypted password, saved addresses, order history |
| If you write to us | Your message and anything you attach to it |
| Automatically | IP address, browser and device type, pages viewed, referring page |
We do not collect or store card numbers, CVV codes, UPI PINs, bank passwords or any other payment credential. There is no card form on this site. Payment is authorised inside your own UPI app, and all we receive back is confirmation that it succeeded.
We do not knowingly collect data from anyone under 18. If a child’s data has reached us, tell us and we will erase it.
3. Why we use it
- To pack, dispatch and deliver your order, and to keep you updated while it travels.
- To handle cancellations, returns, replacement requests and refunds.
- To answer your emails.
- To detect and prevent fraud and abuse of our returns process.
- To keep the invoice and order records that Indian tax and consumer law require.
- To understand, in aggregate, which pages and products people look at, so we stock better.
We do not use your data to build advertising profiles, and we do not sell it. If we ever want to email you about new stock, we will ask first, and every such email carries an unsubscribe link.
4. Who we share it with
Only the parties who need it to complete what you asked for:
- Courier partners (Delhivery and DTDC) receive your name, address, PIN code and phone number so they can deliver.
- The UPI payment gateway processes the transfer. It handles the payment credentials; we never see them.
- Our hosting and email providers store the site and its correspondence on our behalf, under contract.
- Authorities, where a valid legal demand under Indian law requires disclosure.
Nobody on that list is permitted to use your data for their own purposes.
5. Cookies and analytics
The site sets cookies that are necessary for it to work — keeping your cart, keeping you logged in, remembering your consent choice. We also use aggregate analytics to count visits and see which pages are read. You can block or delete cookies in your browser; if you block the necessary ones, the cart and checkout will not function.
6. How long we keep it
Order and invoice records are kept for as long as tax and consumer law require, and then deleted. Account data is kept while your account is open. Support emails are kept for two years so we can see the history of a case. Analytics data is aggregated and holds nothing that identifies you.
7. Your rights under the DPDP Act, 2023
- Access — ask what personal data of yours we hold and what we have done with it.
- Correction — have inaccurate or incomplete data corrected or completed.
- Erasure — have your data deleted where we no longer need it and no law requires us to keep it.
- Withdraw consent — where we relied on your consent, withdraw it at any time.
- Grievance — complain to our Grievance Officer, and afterwards to the Data Protection Board of India.
- Nominate — nominate another person to exercise these rights on your behalf in the event of death or incapacity.
Write to the address in section 11 with enough detail to identify your order or account. We respond within 30 days.
8. Security
The site is served over an encrypted connection. Administrative access is limited to the proprietor, protected by a strong password. Because we hold no payment credentials, the most sensitive data a breach could reach is a delivery address and a phone number — a deliberate design choice. No system is perfectly secure, and if a breach ever affects your data we will notify you and the Data Protection Board of India as the DPDP Act requires.
9. Replacement requests and quality issues
When you send us photographs or an unboxing video to support a replacement request, we use them only to assess that request and, where necessary, to make a claim against the courier. We do not publish them or use them in marketing without your written permission.
10. Cross-border transfers
We operate and serve customers only in India, and your data is processed in India. If a service provider we use ever stores data outside India, we will only use one permitted under the DPDP Act.
11. Grievance Officer
Under the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer is the proprietor of Aurinest Pavilion:
- Grievance Officer — Aurinest Pavilion
- Address: 111/222, Vijay Path, Jhalana Chhod, Mansarovar, Jaipur, Rajasthan 302020, India
- Phone: +91 72318 48499
- Email: checkout@aurinestpavilion.shop
- Hours: Monday – Saturday, 10:00 AM – 7:00 PM IST. Closed on Sundays and public holidays.
Complaints are acknowledged within 24 hours and resolved within 15 days.
12. Changes
If this policy changes we publish the new version on this page. The version that applied when you placed an order is the one that governs that order. Any dispute about this policy falls to the courts at Jaipur, Rajasthan.