Privacy policy

Last Updated: May 11, 2025

This Privacy Policy explains how Adya Samarth Venture Private Limited ("we", "us", "our") collects, uses, and discloses your personal information when you use DivyaMandir.com (the "Site") or interact with us through our services (the "Services"). By using our Site, you agree to the terms of this policy.

 

SECTION 1 – WHAT INFORMATION DO WE COLLECT?

When you purchase from our store, we collect information such as your name, address, phone number and email address along with any other relevant information that we may need to fulfil your order.

 

We may also collect your device's IP address for security and analytics.

 

With your permission, we may send marketing emails about new products and promotions.

 

We also collect, use, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data under law as it does not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Policy.

 

What happens if I refuse to provide my personal data? Where we need to collect personal data by law, or under the terms of a contract (such as the Terms), and you fail to provide that data when requested, we may not be able to perform the contract (for example, to provide you with the Services). In this case, we may have to cancel or limit your access to the Services.

 

SECTION 2 – HOW DO WE COLLECT DATA ABOUT YOU?

➤ How do you give consent? We collect your consent at the point of data collection - for example, when you register an account, place an order, or sign up for marketing communications. By affirmatively providing your personal information to complete a transaction, verify payment, or process an order, you consent to our collecting and using it for that specific purpose. Where required by law, we will obtain your express consent before using your data for any secondary purpose.

 

For secondary uses like marketing, we will ask for your express consent or give you the opportunity to opt out.

 

➤ How to withdraw consent? You may withdraw your consent at any time by emailing us at: privacy@divyamandir.com

 

SECTION 3 – HOW DO WE USE AND DISCLOSE DATA WE COLLECT?

We will only use your personal data when the law allows us to. Most commonly, we will share your personal data with:

•        vendors providing services (e.g., IT, shipping, customer support)

•        marketing partners (with your consent)

•        affiliates and internal entities

•        the government for legal compliance or during corporate changes (e.g., merger, acquisition)

 

More comprehensively we use your personal data for the following purposes:

•        to verify your identity to register you as a user and create your user account with us on the website.

•        to provide the Services to you.

•        to monitor trends and personalise your experience.

•        to improve the functionality of our Services based on the information and feedback we receive from you and to improve our business and delivery models.

•        to improve customer service to effectively respond to your Service requests and support needs.

•        to track Transactions.

•        to send periodic notifications to manage our relationship with you including to notify you of changes to the Services, send you information and updates pertaining to the Services you have availed, and to receive occasional company news and updates related to us or the Services.

•        to market and advertise the Services to you.

•        to comply with legal obligations.

•        to administer and protect our business and the Services, including for troubleshooting, data analysis, system testing, and performing internal operations.

•        to perform our obligations that arise out of the arrangement we are about to enter or have entered with you,

•        to enforce our Terms; and

•        to respond to court orders, establish or exercise our legal rights, or defend ourselves against legal claims.

 

You agree and acknowledge that by using our Services and creating an account with us on the Platform, you authorise us, to contact you via email, phone, or otherwise. This is to provide the Services to you and ensure that you are aware of all the features of the Services and for related purposes.

 

You agree and acknowledge that any and all information pertaining to you, whether or not you directly provide it to us (via the Services or otherwise), including but not limited to personal correspondence such as emails, instructions from you, etc., may be collected, compiled, and shared by us in order to render the Services to you. This may include but not be limited to partner payment aggregator, other service providers that we have partnered with for providing Services, storage providers, data analytics providers, consultants, lawyers, and auditors.

 

You agree and acknowledge that we may share data without your consent, when it is required by law or by any court or government agency or authority to disclose such information. Such disclosures are made in good faith and belief that it is reasonably necessary to do so for enforcing this Policy or the Terms, or in order to comply with any applicable laws and regulations.

 

SECTION 4 – TRANSFER OF PERSONAL DATA

We comply with Applicable Laws in relation to storage and transfer of data. Strictly subject to the RBI's guidelines and regulations, we may, where the law permits, transfer and store the information and personal data you provide to us in countries other than India. This may happen if any of our servers are from time to time located in a country other than India, or when any of our service providers is located in a country other than India.

 

If you use the Services while you are outside India, your information may be transferred, subject to Applicable Laws, to a country other than India in order to provide you with the Services.

 

By submitting your information and personal data to us, you agree to the transfer, storage, and processing of such information and personal data outside India in the manner described above.

 

SECTION 5 – PAYMENT SECURITY

We use the following payment processing services to handle transactions on DivyaMandir.com. All card data is encrypted and processed in accordance with PCI-DSS standards. We do not store your credit card or debit card details on our servers after a transaction is completed.

 

Shopify Checkout - used for standard checkout flows on our Shopify-powered storefront.

https://www.shopify.com/legal/privacy

 

GoKwik - a checkout optimisation platform that powers our checkout experience and integrates with our payment gateway. GoKwik may collect and process your order and contact details to facilitate checkout, reduce friction, and improve delivery success rates. GoKwik operates Easebuzz as its underlying payment gateway.

https://www.gokwik.co/privacy-policy

 

Easebuzz - an RBI-authorised Payment Aggregator (Certificate of Authorisation No. 252/2025) and PCI DSS Level-1 compliant payment gateway, used to process payments routed through GoKwik Checkout. Easebuzz is also ISO 27001 certified and SOC-2 compliant. Neither we nor Easebuzz store your card details after transaction completion.

https://easebuzz.in/privacy/

 

Cashfree - an RBI-authorised Payment Aggregator and Payment Aggregator-Cross Border (PA-CB) licence holder. Cashfree is compliant with PCI DSS, ISO 27001, ISO 27017, ISO 27018, and SOC 2 standards, and maintains GDPR and SAR Data Localization compliance. All payments processed through Cashfree are encrypted and card details are not stored after transaction completion.

https://www.cashfree.com/privacy-policy

 

CCAvenue - an RBI-authorised Payment Aggregator (Certificate of Authorisation No. 177/2024) and end-to-end PCI-DSS compliant payment processing provider. CCAvenue adheres to all applicable RBI guidelines on recurring payments and additional factor authentication. All payments processed through CCAvenue are encrypted and card details are not stored after transaction completion.

https://www.ccavenue.com/privacy_policy.jsp

 

Each of these service providers operates under its own privacy and security policies, which we encourage you to review. We are not responsible for the data practices of these third-party providers beyond what is disclosed in this policy.

SECTION 6 – THIRD-PARTY SERVICES

Our Services may, from time to time, contain services provided by or links to and from the websites of our partner networks, advertisers, and affiliates ("Third Party Services"). Please note that the Third-Party Services that may be accessible through our Services have their own privacy policies. We do not accept any responsibility or liability for the policies or for any personal data that may be collected through the Third-Party Services. Please check their policies before you submit any personal data to such websites or use their services.

 

SECTION 7 – SECURITY

We implement industry-standard security practices prescribed by applicable law and precautions to protect your personal data from loss, misuse, unauthorized access, alteration, or destruction.

 

Where you have chosen a password that enables you to access certain parts of the Services, you are responsible for keeping this password secret and confidential. We will not be responsible for any unauthorised use of your information, or for any lost, stolen, or compromised passwords, or for any activity on your user account due to such unauthorised disclosure of your password. In the event your password has been compromised in any manner whatsoever, you should promptly notify us to enable us to initiate a change of password. For OTP based logins, you are responsible for the security of your mobile device or laptop and the email account being used to receive the OTPs or one-time passwords.

 

SECTION 8 – DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements, or for such period as permitted under Applicable Laws. The following indicative retention periods apply:

•        Account and order information - retained for the duration of your account plus 7 years to comply with applicable tax and commercial law obligations.

•        Transaction records - retained for a minimum of 7 years in accordance with financial record-keeping requirements.

•        Marketing preferences and consent records - retained for the period during which you remain a subscriber, plus 3 years thereafter as evidence of consent.

•        Google Analytics and cookie data - retained as per Google's standard data retention settings (up to 26 months by default), configurable in our Google Analytics property settings.

•        Support and correspondence records - retained for 3 years from the date of last interaction.

 

After the applicable retention period, your data will be securely deleted or anonymised. In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

 

SECTION 9 – COOKIES

We use cookies to:

•        Maintain session info

•        Power website functionality

•        Improve user experience and run analytics

 

You can disable cookies via browser settings but note this may affect website functionality. For specific information about the Cookies that we use related to powering our store with Shopify, see

https://www.shopify.com/legal/cookies

 

In addition, we use Google Analytics which sets the following cookies on your device:

•        _ga - identifies unique users; expires after 2 years

•        _gid - identifies unique users; expires after 24 hours

•        _ga_<container-id> - persists session state for Google Analytics 4; expires after 2 years

 

These cookies may constitute personal data when combined with other information we hold about you (such as your name, email address, or order history). They are subject to Google's own privacy and cookie policies. You can opt out of Google Analytics cookies at any time using the Google Analytics Opt-out Browser Add-on (see Section 10 below) or by disabling cookies in your browser settings.

 

SECTION 10 – GOOGLE ANALYTICS AND DATA COLLECTION ACKNOWLEDGEMENT

We use Google Analytics to collect information about how visitors use our Site. Google Analytics collects data such as your IP address, browser type, pages visited, time spent on pages, and other usage statistics. This information is used to analyse and improve our Site and Services.

 

Google Analytics may associate your visitation data with personal information we hold about you, where you have provided consent or where applicable law permits. We confirm that we have obtained the necessary privacy disclosures and rights from our end users for the collection and processing of their data, including the association of such data with the visitation information Google Analytics collects from our Site and/or app property.

 

The data collected through Google Analytics is processed in accordance with Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at:

https://tools.google.com/dlpage/gaoptout

 

For more information on how Google uses data when you use our Site, please visit:

https://policies.google.com/technologies/partner-sites

 

SECTION 11 – AGE OF CONSENT

By using our site, you confirm that you are at least the age of majority in your jurisdiction, or that you have given us permission for any minor dependents to use this site.

 

SECTION 12 – USER GENERATED CONTENT

By using our site, you agree to understand that we may invite you to post content on our website, including your comments, feedback, pictures, or any other information that you would like to be made available on our website. Please note that such content will be available to all visitors to our website and may become public. We cannot prevent such information from being used in a manner that is contrary to this Policy, applicable laws, or your personal privacy, and we disclaim all liability (express or implied) in this regard. Further, you agree to comply with all applicable laws in relation to the content uploaded or otherwise shared by you on our website. You understand and acknowledge that you will be solely responsible for any information published by you on our website that violates applicable laws.

 

SECTION 13 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this policy at any time. Updates take effect immediately upon posting. In the event of a significant change, we will notify users through this page.

 

If our company is acquired or merged, your data may be transferred to new ownership to continue service.

SECTION 15 – LIMITATION OF LIABILITY

To the fullest extent permitted by Applicable Laws, Adya Samarth Venture Private Limited, its directors, employees, agents, affiliates, and service providers shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, loss of profits, or loss of business, arising out of or in connection with:

•        any unauthorised access to or use of our servers and/or any personal data stored therein;

•        any interruption or cessation of transmission to or from our Services;

•        any bugs, viruses, trojan horses, or similar harmful code transmitted through our Services by any third party; or

•        any errors or omissions in any content, or any loss or damage of any kind incurred as a result of your use of any content posted, transmitted, or otherwise made available via the Services.

 

Our aggregate liability to you for any claim arising out of or relating to this Policy or the processing of your personal data shall not exceed the greater of (a) the amount paid by you to us in the twelve (12) months preceding the event giving rise to the claim, or (b) INR 1,000 (Indian Rupees One Thousand). Nothing in this Policy shall limit or exclude our liability for fraud, death, or personal injury caused by our negligence, or any other liability that cannot be limited or excluded by Applicable Law.

 

The Services and the Site are provided on an "as is" and "as available" basis without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Services will be uninterrupted, error-free, or free of viruses or other harmful components.

 

SECTION 16 – DATA BREACH NOTIFICATION

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority as required by Applicable Laws, and where legally required, we will inform affected individuals without undue delay.

 

Notification to affected users will be made through one or more of the following channels, as appropriate: email to the address registered with us, a prominent notice on the Site, or such other means as required by law. The notification will include, to the extent practicable, a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take to address the breach.

 

We maintain internal procedures for detecting, reporting, and investigating personal data breaches. If you believe your personal data has been compromised, please contact us immediately at privacy@divyamandir.com.

 

SECTION 17 – GOVERNING LAW AND JURISDICTION

This Privacy Policy and any disputes arising out of or in connection with it, including disputes regarding its existence, validity, or termination, shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions.

 

Any dispute, claim, or controversy arising out of or relating to this Policy or the breach, termination, enforcement, interpretation, or validity thereof shall be subject to the exclusive jurisdiction of the courts located in Dehradun, Uttarakhand, India. You hereby irrevocably submit to the personal jurisdiction of such courts and waive any objection to the laying of venue in such courts.

 

SECTION 18 – QUESTIONS OR REQUESTS

To access, correct, delete, or inquire about your personal data, or to file a complaint, please contact our Privacy Compliance Team at: privacy@divyamandir.com