Who is responsible for your data
BUYVORA PRIVATE LIMITED, registered at Unit No. A-203, 204, Kotia Nirman Commercial Premises Co-op Society Ltd., Opp. Laxmi Industrial Estate, New Link Road, Andheri West, Mumbai, Maharashtra 400053, is the entity responsible for the personal information collected through buyvoragarden.store. Questions about this policy, or a request relating to your data, should go to grievance@buyvoragarden.store.
What we collect
| Category | What it includes | Why we need it |
|---|---|---|
| Account details | Name, email address, mobile number, password (stored only as a cryptographic hash) | To create your account, verify your email and let you sign in |
| Order details | Products ordered, quantities, prices, HSN and GST treatment, order and invoice numbers | To process your order and issue a compliant invoice |
| Delivery details | Recipient name, full address, PIN code, contact number | To ship your order and let the courier reach you |
| Payment details | Amount, payment method, gateway transaction reference, payment status | To reconcile your payment against your order and process refunds |
| Support details | Ticket contents, correspondence, any photographs you send us | To investigate and resolve your request |
| Technical details | IP address, browser type, pages visited, session identifier | Security, fraud prevention and keeping the site working |
We never see or store your full card number, CVV, UPI PIN or net-banking password. Those are entered on the payment gateway's own secure page and are never transmitted to this website.
How we use it
- To take, process, invoice, dispatch and deliver your order
- To verify your email address and secure your account
- To reconcile payments and process cancellations and refunds
- To answer your support requests and handle complaints
- To meet our tax, accounting and legal record-keeping obligations
- To detect and prevent fraud and abuse of the website
We do not sell your personal information. We do not send marketing email unless you have asked us to, and every marketing email we send carries an unsubscribe link.
Who we share it with
We share the minimum necessary with:
- Payment gateway — your name, email, phone, order reference and amount, so the payment can be processed and reconciled. The gateway is separately responsible for the card or UPI data you enter on its page.
- Courier and logistics partners — recipient name, delivery address, PIN code and contact number, so your parcel can be delivered.
- Email service — your email address and the message content, to deliver order and support email.
- Professional advisers and authorities — where we are required to disclose by law, by a court, or by a lawful request from a public authority.
We do not otherwise transfer your information to third parties for their own purposes.
How long we keep it
Order records, invoices and payment references are retained for at least eight financial years, as required for tax and company-law record keeping. Account details are kept while your account is open. Support correspondence is kept for three years. Technical logs are kept for up to twelve months.
How we protect it
- The site is served only over HTTPS, so traffic between your browser and us is encrypted
- Passwords are stored as salted one-way hashes and are never recoverable in plain text
- Sessions use secure, HTTP-only cookies and are rotated on sign-in
- Forms that change data are protected against cross-site request forgery
- Repeated failed sign-in attempts are throttled
- Administrative access is role-based and every administrative action is written to an audit log
- Payment gateway and email credentials are held outside the publicly served directories
No system is perfectly secure, but if a breach affects your personal information we will notify you and the appropriate authority without undue delay.
Cookies
We use a single essential session cookie to keep you signed in and to remember your cart between pages. It carries no advertising identifier and is not shared. Blocking it will prevent the cart and checkout from working. We do not use third-party advertising or cross-site tracking cookies.
Your rights
You may ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, delete it where we are not required to keep it, or restrict how we use it. Write to grievance@buyvoragarden.store from the email address on your account and we will respond within 30 days. We may need to verify your identity before acting on a request.
Note that we cannot delete order records, invoices or payment references that we are legally required to retain, even if you close your account.
Children
This website is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.
Changes and contact
We may update this policy. Material changes will be reflected in the date shown at the top of this page, which was last updated on 15 August 2026.
Grievance Officer — grievance@buyvoragarden.store
BUYVORA PRIVATE LIMITED, Unit No. A-203, 204, Kotia Nirman Commercial Premises Co-op Society Ltd., Opp. Laxmi Industrial Estate, New Link Road, Andheri West, Mumbai, Maharashtra 400053
Support hours Monday to Saturday, 10:00 AM to 7:00 PM IST