Privacy Policy & Data Protection Charter

Brand: VIPANIQ® (Wear What You Feel) • Operating Entity: Vipaniq • Storefront: vipaniq.com • Effective Date: October 16, 2026 • Last Updated: October 22, 2026

Vipaniq (“VIPANIQ”, “we”, “our”, or “us”) operates the apparel storefront vipaniq.com. This Privacy Policy explains our practices regarding the collection, processing, storage, disclosure, and protection of your personal information in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), the Consumer Protection (E-Commerce) Rules, 2020, and the Guidelines for Prevention and Regulation of Dark Patterns, 2023.

1. Personal Information We Collect

We adhere to strict data minimization principles, collecting solely the personal data necessary to execute your orders, facilitate deliveries, and deliver a frictionless shopping experience:

2. How We Collect Your Information

1. Direct Submissions: When you browse collections, create a cart, complete checkout, request an exchange, subscribe to drop alerts, or reach out to our concierge desk.
2. Automated Session Technologies: Through secure session cookies and Shopify cloud telemetry as you navigate vipaniq.com.
3. Fulfillment & Logistics Integrations: Real-time payment verification signals from gateway aggregators and delivery status scans (AWB milestones) from our logistics partners.

3. Purpose & Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process personal data strictly on the grounds of consent and legitimate operational uses:

• Made-to-Order Apparel Fulfilment: We use order and apparel-selection information to arrange production, packaging and dispatch. Production takes 1–3 business days, followed by an estimated transit time of 3–5 business days after dispatch.
• Delivery, Exchanges and Defect Support: We use relevant order, contact and delivery information to coordinate deliveries, reverse pickups, size exchanges and defect replacements. Size exchange requests must be submitted within 7 calendar days of delivery. Defective, damaged or incorrect items must be reported within 24 hours of order delivery. Customers can contact support at wecare@vipaniq.com or on WhatsApp at +91 7827721108, quoting their Order Number.
• Operational Notifications (SMS & WhatsApp): Transmitting digital order receipts, live tracking links, and interactive pre-dispatch verification for Cash on Delivery (COD) orders to curb fraudulent dispatches.
• Fraud Prevention & Chargeback Security: Detecting suspicious bot activity, verifying COD authenticity, and mitigating checkout abuse.
• Promotional Communications (Affirmative Opt-in Only): In compliance with anti-dark pattern regulations, marketing broadcasts are sent solely to users who have provided clear, unbundled, affirmative consent (checkboxes are never pre-ticked). You may opt out anytime by clicking unsubscribe or replying STOP.
• Statutory Invoicing & Tax Compliance: Generating valid GST-compliant tax invoices and adhering to commercial accounting standards under Indian tax laws.

4. How We Disclose & Share Information

Data is shared solely with vetted third-party service providers bound by strict contractual data protection agreements:

• E-Commerce Infrastructure (Shopify Inc.): Our storefront is hosted on Shopify, which maintains globally certified, secure cloud databases and checkout architecture.
• Payment Gateway Aggregators: RBI-authorized, PCI-DSS Level 1 certified partners (e.g., Razorpay, Cashfree) to settle digital payments.
• Logistics Carriers: Reputed logistics networks (e.g., Blue Dart, Delhivery, Shiprocket) receiving only your name, shipping address, and phone number to execute delivery.
• Communications Infrastructure: Certified SMS gateways and WhatsApp Business API partners for operational order updates.
• Legal Mandates: Disclosed only when strictly required by a court of competent jurisdiction or authorized statutory agency under Indian law.

5. Cookies & Tracking Technologies

We deploy essential and analytical cookies to maintain core storefront functionality:

• Essential Cookies: Retain items in your cart drawer across navigation and preserve secure checkout sessions.
• Performance Cookies: Gather anonymous, aggregated telemetry regarding page response times to optimize mobile performance.

You can manage or disable cookies via your browser settings. Please note that disabling essential cookies will disrupt shopping bag retention and checkout functionality.

6. Data Security & Storage Architecture

• 256-Bit SSL/TLS Encryption: All data in transit between your browser and vipaniq.com is encrypted using industry-standard protocols.
• Tokenized Payments: In compliance with RBI mandates, card data is tokenized directly by authorized payment gateways. No sensitive payment records touch our internal servers.
• Role-Based Access Control: Customer delivery details are accessible solely to vetted fulfillment personnel on a strict need-to-know basis.

7. Data Retention & Erasure

We retain personal information only for as long as necessary to fulfill the commercial purposes outlined in this policy or to satisfy statutory obligations:

• Order & Invoicing Records: Retained for the statutory retention period mandated by Indian GST and corporate tax regulations (typically 7–8 years).
• Customer Accounts: Retained until you request account closure or data erasure.
• Upon expiration of the retention schedule or receipt of a verified deletion request, personal data is permanently deleted from active databases or irreversibly anonymized.

8. Your Statutory Rights Under the DPDP Act, 2023

As a data principal under Indian law, you are entitled to the following enforceable rights:

• Right of Access & Summary: Request a summary of the personal data processed by VIPANIQ® and the identities of third-party processors.
• Right to Correction & Updating: Request immediate rectification of inaccurate, incomplete, or outdated personal coordinates.
• Right to Erasure: Request the deletion of your personal data, subject to ongoing statutory tax and order fulfillment requirements.
• Right to Withdraw Consent: Withdraw your consent for marketing communications at any time without affecting transactional order fulfillment.
• Right of Grievance Redressal: Avail of an accessible grievance redressal mechanism regarding data processing.

To exercise any of these rights, email our team at wecare@vipaniq.com with the subject line "Data Principal Rights Request". We verify identity and respond within statutory timeframes.

9. Protection of Minors

VIPANIQ® does not knowingly market to or solicit personal data from children under the age of 18. If a parent or guardian discovers that a minor has provided information to our storefront without parental consent, please alert us at wecare@vipaniq.com so we can delete the record immediately.

10. Grievance Redressal & Nodal Officer Details

In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Act, 2000, the designated Grievance & Nodal Officer details are provided below:

11. Policy Modifications & Official Contact

We reserve the right to modify this Privacy Policy periodically to reflect technological advancements, operational enhancements, or legislative updates under Indian law. Any changes will be published here with an updated "Effective Date". Your continued use of vipaniq.com constitutes assent to the updated policy.