Privacy Policy

This website www.aelvori.in is operated by AELVORI ATELIER (OPC) Private Limited. At AELVORI, we are committed to protecting your privacy. This policy outlines how we gather, store, use, and protect your personal data during your interactions with our platform.

1. Information We Collect

We collect the following categories of personal information:

• Identity & Contact: Name, email address, and phone number provided during registration or checkout.
• Address Data: Shipping and billing addresses stored for order fulfillment and delivery.
• Order & Transaction Data: Order history, payment status, exchange/cancellation requests, and credit note records.
• Measurement Profile: Body measurements you voluntarily provide for a better fit experience.
• Device & Usage Data: Browser type, IP address, and page interaction data collected for platform security and performance.

2. Cookies & Session Data

We use an httpOnly session cookie (aelvori_session) to maintain your login state securely. This cookie is not accessible by JavaScript and expires automatically after 7 days of inactivity.

Your shopping cart and wishlist state are stored server-side and linked to your account. We do not use third-party advertising or tracking cookies.

3. How We Use Your Data

• Processing, fulfilling, and managing your orders and exchanges.
• Sending order status updates, dispatch notifications, and support communications.
• Administering your account, loyalty points, and store credits.
• Detecting and preventing fraudulent transactions and unauthorized access.
• Improving our product catalog, pricing, and customer experience.

4. How We Secure Your Data

All passwords are encrypted using secure one-way cryptographic hashing (bcrypt). Session tokens are signed with a server-held secret and transmitted only over SSL/TLS encrypted channels. We do not store full card numbers, CVV, UPI PINs, or OTPs at any point.

We do not sell, rent, or trade your personal information to third-party marketing organizations.

5. Third-Party Data Sharing

We share your data only with parties necessary to fulfill your order:

• Logistics Partners: Courier companies receive your name and delivery address to dispatch your order.
• Payment Gateways: Payment processors handle transaction data under their own PCI-DSS compliant privacy policies.

We do not share your data with advertisers, data brokers, or any other third parties.

6. Data Retention

Order records, invoices, and transaction data are retained for a minimum of 7 years as required under the Indian Income Tax Act and GST regulations. Account profiles for inactive customers (no login or purchase for 3+ years) may be anonymised or deleted upon written request.

7. Your Rights

As a customer, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or outdated information in your account.
• Deletion: Request deletion of your account and associated personal data (subject to our legal retention obligations).
• Withdraw Consent: Opt out of any non-essential communications.

To exercise any of these rights, please write to us at support@aelvori.in.

8. Fraud Prevention & Whistleblower Portal

If you notice any suspicious transactional behavior, fraudulent order attempts, or identity abuse mimicking AELVORI, please alert our security desk immediately at whistleblower@aelvori.in.

9. Grievance Officer

For any privacy-related concerns, complaints, or requests under the applicable Indian data protection framework, please contact our designated Grievance Officer at:

AELVORI ATELIER (OPC) Private Limited
Email: support@aelvori.in
Address: Ghaziabad, Uttar Pradesh, India

We aim to acknowledge and resolve all privacy-related grievances within 30 days of receipt.

10. Policy Updates

AELVORI reserves the right to update or modify this Privacy Policy at any time. The revised policy will be published on this page with an updated date. Continued use of our website after any changes constitutes your acceptance of the revised policy.