This Privacy Policy ("Policy") is published in accordance with the provisions of Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, read with the Information Technology Act, 2000. This Policy is an 'electronic record' as contemplated under Section 2(t) of the Information Technology Act, 2000, and is generated by a computer system — it does not require any physical or digital signature.

The online store arviik.in ("Online Store", "Site") is owned and operated by ARVIIK("ARVIIK", "we", "us", or "our"), under the laws of India, with its registered office in Ahmedabad, Gujarat, India.

Users are requested to read and understand this Policy carefully before using or accessing the Online Store. Through this Policy, ARVIIK intends to convey the manner in which your information is collected and used while you access our Site and services. This Policy is binding on every user of the Online Store — if you do not agree with the terms of this Policy, please do not use or access the Site.

ARVIIK reserves the right to change, edit, alter, amend, revise, or substitute this Policy at any time, with or without prior notice. By continuing to use the Online Store after such a change, you signify that you have read, understood, and agree to be bound by the updated Policy.

Information you give us directly when you create an account, checkout, or contact us:

• Name, email address, and phone number
• Shipping address, city, state, and pincode
• Order history and items in your cart or wishlist
• Messages you send through the Contact page or support email/WhatsApp

Information collected automatically as you browse:

• Device and browser type, IP address, and approximate location
• Pages viewed, products browsed, and time spent on the Site
• Cookies and local storage used to keep you signed in, remember your cart, and measure site performance

Payment information is collected and processed directly by Razorpay, our payment gateway — we never see or store your full card number, CVV, or UPI PIN. See our Payment Policy for details.

• To process, pack, ship, and deliver your orders, and to keep you updated on their status
• To verify deliverability of your address before an order is placed
• To respond to support requests and resolve issues with an order
• To send order confirmations, shipping updates, and (only if you've opted in) marketing communications about new drops and offers
• To detect and prevent fraud, abuse, or security incidents
• To comply with applicable law, including tax and accounting obligations
• To improve the Site — what people browse, where they drop off, what doesn't work

We do not sell, trade, or rent your personal data to third parties. We disclose it only to the following categories of recipients, each bound to use it only for the stated purpose:

• Razorpay — to process payments securely.
• NimbusPost and our courier partners — to check deliverability and ship your order.
• Supabase — our database and authentication provider, which stores your account and order data.
• Government authorities, law enforcement, or regulators, where required by applicable law, court order, or governmental request.

We use cookies and browser local storage to keep you signed in, remember what's in your cart and wishlist between visits, and understand how the Site is used so we can improve it. You may configure your browser to refuse or delete cookies, though certain features of the Site (such as a persistent cart) may not function properly as a result.

We implement reasonable security practices and procedures, including encryption of data at rest and in transit, in accordance with Section 43A of the Information Technology Act, 2000 and the applicable rules made thereunder. Access to your personal data is restricted to systems and personnel that need it to operate the Site. No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account remains active, and thereafter for such period as is necessary to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Where you request deletion of your account, we will delete or anonymise personal data that we are not legally required to retain.

Subject to applicable law, you have the right to:

• Access or correct your personal data from your Profile page at any time.
• Request a copy of the personal data we hold about you.
• Withdraw consent and request erasure of your personal data, subject to what we are legally required to retain.
• Unsubscribe from marketing communications at any time using the link provided in any such communication.

To exercise any of these rights, write to us at info@arviik.in from the email address associated with your account.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, the name and contact details of the Grievance Officer are provided below. If you have any grievance with respect to this Policy or the processing of your personal data, please contact:

• Name: Grievance Officer, ARVIIK
• Email: info@arviik.in
• Address: ARVIIK HQ, Ahmedabad, Gujarat, India
• Response Time: We will acknowledge your complaint within 48 hours and endeavour to redress it within one month of receipt.

ARVIIK is not directed at individuals under 18 years of age, and we do not knowingly collect personal information from anyone under that age. If you believe a minor has provided us with personal data, contact us and we will take steps to remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or as required by law. The "Last updated" date at the top of this page always reflects the current version.

For any queries regarding this Policy, write to us at info@arviik.in or through our Contact page.