Privacy Policy

Last Updated: June 15, 2026
Website: Vaultera (“we”, “our”, “us”)
Governing Law: Information Technology Act, 2000; Digital Personal Data Protection Act, 2023 (DPDPA).

At Vaultera, we value your trust. We design and deliver customized corporate gifting solutions. This policy states how we collect, process, secure, and erase your personal data under Indian laws. By using our website or submitting your information, you grant clear, explicit, and unconditional consent to the practices outlined below.

1. Itemized List of Data We Collect

We collect only the minimum necessary information to execute your custom gifting orders:

  • Corporate Account Data: Company name, Business Registration Details/GSTIN, corporate email address, billing address, and phone number.
  • Order Execution Data: Recipient names, delivery addresses, phone numbers, and custom text or images requested for engraving or printing.
  • Transaction Information: Payment terms, transaction IDs, and basic payment tokens (all credit/debit card processing is offloaded securely to RBI-compliant payment aggregators).
  • Technical Log Data: IP addresses, browser types, and cookie data collected through our WordPress website infrastructure.

2. Legal Purpose of Processing Data

We use the personal data collected under strict data minimization guidelines for the following specific purposes: Manufacturing & Customization: Processing names and design graphics onto physical gift items.

  • Logistics & Fulfillment: Sharing destination details with domestic logistics partners to ship bulk or individual corporate orders.
  • Taxation & Accounting: Generating GST-compliant corporate invoices and keeping regulatory records.
  • Customer Support: Responding to pricing requests, sending electronic product catalogs, and handling service disputes.

3. Data Storage, Security, and Localization

We protect your data through rigid technical safeguards:

  • Security Measures: Your personal data is protected via Secure Socket Layer (SSL) encryption, rigorous access controls for staff, and weekly security assessments on our WordPress core.
  • Localization: In compliance with Section 128 of the Companies Act and Indian financial standards, all bookkeeping, corporate accounting records, and primary data assets are stored on servers inside India.

4. Data Retention and Erasure Protocols

We do not hoard information:

  • Transactional Data: Retained for the statutory timeline of 8 years required under Indian tax laws.
  • Fulfillment Data: Recipient lists or employee names shared by companies for festive gifting are purged completely within 90 days from order completion.
  • Consent Withdrawal: If you choose to withdraw consent, your processing files are deleted securely from our active databases within 30 days of your request.

5. Third-Party Data Disclosures

We do not sell, rent, or trade your data for unauthorized marketing. We disclose data only to the following entities:

  • Logistics Partners: Third-party courier and courier-aggregator networks managing parcel distributions.
  • Payment Gateways: RBI-regulated transaction engines executing security validations.
  • Legal Authorities: Government or statutory bodies if mandated under a lawful warrant, court order, or GST audit.

6. Rights of the Data Principal (You)

Under the DPDP Act, 2023, corporate clients and recipients in India possess enforceable statutory rights:

  • Right to Access: You can request a summary of the personal data we hold about you and the processing operations performed.
  • Right to Correction & Update: You can correct inaccurate entries or update old contact details.
  • Right to Erasure: You can ask us to delete your personal data when the business relationship ends.
  • Right to Nominate: You can choose a legal representative to act on your behalf in case of death or incapacity.

7. Grievance Redressal Mechanism & DPO Contact

If you have any questions, wish to exercise your rights, or want to file a privacy complaint, you can reach our Grievance Officer / Data Protection Representative:

  • Name of Officer: [Insert Name, e.g., Amit Sharma]
  • Designation: Grievance Redressal Officer / Privacy Representative
  • Physical Address: [Insert Vaultera Physical Corporate Address, India]
  • Contact Email: [Insert Privacy Email, e.g., privacy@vaultera.shop]
  • Turnaround Time: We will address your concerns within 30 days.

If your grievance is not resolved satisfactorily within 90 days, you have the right to escalate the matter directly to the Data Protection Board of India (DPBI).

Scroll to Top