Privacy policy.

This policy applies to customers, website visitors, administrators, delivery partners and other people who interact with the ARVÉ website, portals, communications or services.

It should be read with the ARVÉ Terms & Conditions, Return, Exchange & Refund Policy and any specific notice shown when information is collected.

Depending on how you use ARVÉ, we may collect the following categories of personal data:

• Identity and account data: name, email address, phone number, profile image, account identifier, role, verification status and encrypted authentication information.
• Login data from Google: name, email address, profile image and provider account identifier when you choose Google sign-in.
• Delivery data: recipient name, phone number, house or flat number, building, street, landmark, city, state, PIN code, country, formatted address, latitude, longitude and Google Place ID where available.
• Order and transaction data: ordered products, variants, quantities, discounts, coupons, delivery charges, payment method, payment status, transaction references, invoices, returns and order history.
• Payment information: limited payment and verification information received from payment providers. ARVÉ does not store complete card numbers, CVV values, UPI PINs or net-banking passwords.
• Preferences and activity: wishlist, cart, recently viewed products, searches, browsing activity, notification preferences and product recommendations.
• Communications and content: support requests, emails, contact-form messages, reviews, ratings and images you choose to upload.
• Technical data: IP address, browser and device type, operating system, session information, cookies, timestamps, request logs, error reports and security events.
• Operational data for authorised personnel: assigned orders, delivery status, vehicle details, service area, proof of delivery and collection confirmation where relevant.

ARVÉ collects precise location coordinates only when you choose a location on the map, search for an address, or permit the browser to use your current location. We use this information to validate addresses, calculate shipping, estimate delivery and help a delivery partner navigate to the selected destination.

Location permission is optional. You may enter an address manually if maps or location services are unavailable. ARVÉ does not use the website to track your location continuously in the background.

• Create and secure accounts, authenticate users and apply role-based access controls.
• Process orders, verify payments, calculate delivery, fulfil shipments and provide order tracking.
• Save addresses, carts, wishlists, preferences and recently viewed products at your request.
• Generate invoices and maintain transaction, tax, inventory and audit records.
• Provide customer support and handle returns, refunds, complaints and product reviews.
• Send account, security, order, payment and delivery communications.
• Send marketing messages only where you have subscribed or otherwise permitted them.
• Personalise product discovery and recommendations using your interactions with ARVÉ.
• Detect, investigate and prevent fraud, abuse, unauthorised access and security incidents.
• Monitor reliability, diagnose errors, measure website performance and improve ARVÉ services.
• Comply with legal obligations and respond to lawful requests from authorities.

We process personal data with your consent, to take steps requested by you and perform our contract with you, for uses permitted by applicable law, and to comply with legal obligations.

Where processing depends on consent, you may withdraw that consent using the relevant account setting, unsubscribe control or by contacting us. Withdrawal does not affect processing already completed lawfully and may prevent us from providing a feature that requires the data.

ARVÉ uses cookies and similar browser technologies to maintain secure sessions, remember preferences, preserve cart and checkout state, understand website performance and prevent abuse.

Strictly necessary cookies are required for core account, security and checkout functionality. Optional analytics or marketing technologies will be used subject to the choices and notices made available to you. You can control cookies through your browser, but blocking necessary cookies may prevent parts of the website from working.

We share only the information reasonably required for a service provider to perform its function. Recipients may include:

• Payment providers, including Razorpay, for order creation, payment processing, verification, refunds and fraud prevention.
• Delivery partners and logistics providers for shipment, navigation, customer contact, proof of delivery and tracking.
• Google services for authentication, maps, place search, geocoding, distance calculation and navigation when those features are used.
• Email, SMS and notification providers for transactional and permitted marketing communications.
• Hosting, database, infrastructure, security, monitoring and analytics providers supporting the platform.
• Professional advisers, auditors, insurers and authorities where disclosure is reasonably necessary or legally required.
• A successor organisation in connection with a merger, acquisition, restructuring or transfer, subject to appropriate confidentiality and legal safeguards.

ARVÉ does not sell or rent personal data. We do not permit a service provider to use information received from ARVÉ for its own unrelated advertising purposes.

Some technology providers may process or store information outside India. Where this occurs, ARVÉ uses providers and contractual arrangements intended to protect the information and follows applicable restrictions on cross-border processing.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide an active account or service, resolve disputes, prevent fraud and meet tax, accounting, consumer-protection and other legal obligations.

Order, invoice and payment records may be kept for the legally required record-retention period. When data is no longer required, it is deleted, anonymised or securely isolated unless continued retention is required by law or for a valid legal claim.

ARVÉ uses reasonable technical and organisational safeguards designed to protect personal data, including access controls, role separation, encrypted connections, secure session settings, password hashing, input validation, audit logging and restricted access to production systems.

No internet service can guarantee absolute security. You should use a unique password, protect access to your device and notify us promptly if you believe your account has been compromised. We will provide notices of a personal-data breach where required by applicable law.

Subject to applicable law and its phased commencement, you may request access to a summary of your personal data and its processing, correction, completion or updating of inaccurate data, erasure of eligible data, withdrawal of consent, and grievance redressal.

You may also unsubscribe from marketing communications, change notification preferences, edit eligible account information and request account deletion. Certain information may be retained where required for completed transactions, fraud prevention, legal compliance or the establishment and defence of legal claims.

Where applicable, you may nominate another individual to exercise your rights in the event of death or incapacity. We may verify your identity before acting on a request and will respond within the period required by law.

ARVÉ is not directed to children. A person below 18 years of age may use ARVÉ only with the involvement and consent of a parent or lawful guardian.

If you believe a child has provided personal data without appropriate authorisation, contact us so that we can investigate and take appropriate action.

If you subscribe to the ARVÉ newsletter or other promotional communication, we may use your contact details to send it. You can unsubscribe using the link in the communication or by contacting us.

Transactional messages concerning an account, order, payment, delivery, return or security event are service communications and may continue while necessary to provide the requested service.

The website may link to a third-party website or service. Its privacy practices are governed by its own policy. ARVÉ is not responsible for an independent third party's handling of information you provide directly to it.

We may update this policy to reflect changes in law, technology or ARVÉ services. The revised policy will be published on this page with a new effective date. Where a change materially affects your rights or how data is used, we will provide an additional notice where required.

Contact us to exercise a privacy right, withdraw consent, ask a question or raise a complaint. Please describe your request and provide enough information for us to verify and locate the relevant account or transaction.

Complaints will be acknowledged within 48 hours and addressed within one month where the e-commerce grievance timelines apply. You may pursue any further remedy available under applicable law if the response does not resolve your concern.