Privacy policy

Privacy Policy

This policy explains what personal data X'IVORA collects when you visit xivora.store or buy from us, why we collect it, who we share it with, and what you can ask us to do with it. We have written it to be read, not skipped.

Our store is powered by Shopify, which hosts the website and helps us provide these services to you. Where this policy and our Terms & Conditions differ on a data matter, this policy governs.

By using the site, you confirm that you have read and understood how we handle your data as set out below.

1. Who We Are

X'IVORA is a brand of P&A Ventures, with its registered office at LIG-12, ASK Grandiose, Near Wallfort City, Raipur, Chhattisgarh 492001, India.

X'IVORA – Essence of Elegance is the brand responsible for the marketing, sale, and customer experience of the fragrances offered through this website. The products are manufactured by authorised manufacturing partners in compliance with applicable quality standards.

For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary for the personal data described here. In plain terms, we decide why and how your data is used, and we are accountable for it.

2. The Data We Collect

Information you give us

  • Contact and identity details — your name, email address, phone number, and billing and shipping addresses.
  • Order information — the items you view, add to your cart or wishlist, and the orders, returns, replacements and cancellations you make.
  • Account information — if you create an account, your username, password and saved preferences.
  • Communications — anything you include when you write to us, and any reviews or submissions you post.

Information collected automatically

  • Device and connection data — browser type, operating system, device identifiers and your IP address.
  • Usage data — the pages you view, how long you stay, the links you click and the site you arrived from.

What we do not collect

  • We never see or store your card number, CVV, UPI PIN or banking credentials. Payment details are captured and processed directly by Razorpay on their own systems. We receive only a transaction reference and a success or failure status.
  • We do not knowingly collect data from anyone under 18.
  • We do not collect health data, biometric data or any other special category of sensitive data.

3. Where Your Data Comes From

  • Directly from you — when you shop, create an account, or contact us.
  • Automatically — from your device when you use the site.
  • From our service providers — such as our payment gateway, courier and analytics partners, acting on our behalf.

4. How We Use Your Data

We use your data only for a specified, lawful purpose:

  • To fulfil your order — processing, dispatch, delivery, tracking and invoicing.
  • To keep you informed — order confirmations, dispatch and delivery updates, and support replies.
  • To provide support — answering your queries and handling returns, replacements and refunds.
  • To send marketing — only where you have opted in.
  • To improve our site and products — using aggregated, de-identified analytics.
  • To keep the site secure — authenticating access and preventing fraud and misuse.
  • To meet our legal obligations — including tax, accounting and consumer-protection requirements.

We do not use your data for automated decision-making that produces a legal or similarly significant effect on you.

The basis on which we process your data

  • Your consent — for marketing and for non-essential cookies. It is asked for clearly and can be withdrawn at any time.
  • Performance of your order — for the data we need to sell and deliver a product to you.
  • Legal obligation — where a law requires us to retain or disclose data.
  • Other legitimate uses — as permitted under the DPDP Act.

5. Marketing Communications

  • We send marketing emails only where you have opted in.
  • Every marketing email carries a one-click unsubscribe link, which takes effect immediately.
  • You can also write to support@xivora.store to be removed.
  • Withdrawing consent does not affect anything we did lawfully before you withdrew it.
  • Transactional messages are not marketing. Order confirmations, dispatch notices and refund updates will continue, because you have bought something and need to know what is happening to it.

6. Who We Share Your Data With

We do not sell, rent or trade your personal data. We share it only with those who need it to do a job for us, and only to the extent necessary.

7. Our Relationship With Shopify

The site is hosted by Shopify, which processes personal data about your use of the store in order to provide and improve the service. Some of this information may be shared with Shopify and its own service providers, who may be located outside India. In providing certain enhanced features, Shopify acts as an independent controller of that data and is responsible for it. To understand how Shopify uses your data and the choices you have, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

8. Third-Party Websites and Links

Our site links to third-party sites, including payment pages, courier tracking pages and social media. This policy does not apply to them, and we are not responsible for their content or their handling of your data. Please read their privacy policies before providing them with your information.

9. Children's Data

Our products are for adult use and our website is not directed at children. In line with the DPDP Act, we do not knowingly collect personal data from anyone under the age of 18 without verifiable consent from a parent or lawful guardian. If you believe a child has provided us with data, please write to support@xivora.store and we will delete it.

10. Security and Retention

  • The site is served over an encrypted connection.
  • Payment data is handled by Razorpay, a PCI DSS-compliant gateway, and does not pass through us.
  • Access to customer data within our business is limited to those who need it.
  • We review our access and our practices periodically.

No system is completely secure, and information sent over the internet is never guaranteed to be perfectly safe in transit. Please avoid sending sensitive information through unsecured channels.

We keep your data only as long as needed for the purpose it was collected, or as required by law — for example, order and tax records are retained for the period required under Indian tax and accounting law. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user, as required by the DPDP Act.

11. Your Duties

The DPDP Act also places duties on you. Please give us accurate information — particularly your delivery address and phone number — do not impersonate another person, and do not raise a false or frivolous data request or grievance.

12. Changes to This Policy

We may update this policy from time to time. The revised version takes effect when published on this page, and the "Last updated" date will change. Where a change is significant, we will tell you by email or through a notice on the site.

13. Contact Us

X'IVORA, a brand of P&A Ventures
LIG-12, ASK Grandiose, Near Wallfort City, Raipur, Chhattisgarh 492001, India
Email: support@xivora.store
Working hours: Monday to Saturday, 10:00 AM to 5:00 PM IST