Privacy Notice

1. Who we are

• NityaOnline is the controller for purchases on our UK website.
• Contact: info@vexfo.co.uk; postal address as above. Please feel free to contact us, in case you have a query for us.  

2. What data we collect

• Identity and contact (name, email, phone, billing/shipping address).
• Order and payment metadata (we do not store full card numbers).
• Account credentials and preferences.
• Device/technical data (IP, user‑agent, approximate location, logs).
• Marketing preferences.
• Cookies/online identifiers (see Cookies Notice).

3. Purposes & lawful bases

• Order fulfilment and support - performance of contract.
• Payments, fraud, security - legitimate interests and/or legal obligation.
• Direct marketing (email/SMS/WhatsApp) - consent (withdraw anytime).
• Analytics/personalisation - consent via cookie banner.
• Legal, accounting, tax - legal obligation.

4. Sharing

• We share data with payment processors, delivery/warehouse partners, IT/hosting, customer‑support tools, and advisers under processor agreements. We do not sell personal data.

5. International transfers

• Where transfers occur outside the UK/EEA, we use safeguards (UK IDTA or EU SCCs + UK Addendum) and conduct risk assessments.

6. Retention

• Orders/invoices: typically 6 years (tax/accounting).
• Support: up to 3 years after resolution.
• Marketing: until consent withdrawn or 24 months inactivity. Then deletion or anonymisation.

7. Your rights

• Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact info@vexfo.co.uk. You can complain to the UK ICO.

8. Security

• We apply encryption in transit, role‑based access, and audits. We assess suspected breaches and notify ICO/users where required