Privacy Policy | PovoAstro

This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it. It is written to the Information Technology Act, 2000 and the SPDI Rules, 2011, and to the Digital Personal Data Protection Act, 2023.

Who is responsible for your data

PovoAstro is the data fiduciary for the personal data described here. Our entity details and contact address are published on the contact page.

What we collect

Data you give us

Account. Your name, email address and, if you provide it, your phone number.
Orders. Delivery address, billing address, order contents and order history.
Messages. Anything you send through the contact form or the consultation waitlist.

Data collected automatically

Strictly necessary technical data. Session and security identifiers, and the contents of your bag, so the shop works at all.
Analytics. Only if you opt in through the cookie banner. See the Cookie Policy.

What we do not collect

We do not receive or store your card number, CVV or bank credentials. Payment is handled entirely by the secure hosted checkout and its payment gateway. We also do not ask for your date of birth, birth time or birth place on this website, and the elemental diagnosis on this site runs entirely in your browser: its answers are not sent to us or stored anywhere.

Why we use it, and on what basis

To fulfil your order. Necessary to perform the contract you entered into.
To provide your account and order history. On the same basis.
To answer your messages. Because you asked us to.
To meet tax and accounting obligations. Because the law requires it.
Analytics and marketing. Only with your consent, which you can withdraw at any time.

We use your data only for the purpose it was collected for. We do not sell your personal data, and we do not use your order history to build profiles for third parties.

Who we share it with

Our hosting and commerce provider. Hosts this site, the store, member accounts and the checkout.
The payment gateway used by the checkout, to process your payment.
Our courier partner, to deliver your order. They receive your name, delivery address and phone number, and nothing more.
Our accountants and tax authorities, where the law requires it.

Some of these providers process data outside India. Where that happens we rely on the provider's contractual protections and on transfers permitted under Indian law.

How long we keep it

Order and invoice records. For as long as tax and accounting law requires.
Account data. Until you ask us to delete your account, subject to the records above.
Contact and waitlist messages. Until the matter is resolved and for a reasonable period afterwards.
Consent records. For as long as needed to evidence the choice you made.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

tell you what personal data of yours we hold and how we use it;
correct anything that is inaccurate or incomplete;
erase your personal data, subject to records the law requires us to keep;
withdraw consent for anything you consented to, as easily as you gave it;
nominate someone to exercise these rights on your behalf if you are unable to.

You can update most of your details yourself under Account Settings. For anything else, write to us through the contact page. We will verify who you are before acting, and we will not charge you for it.

Security

The site is served over HTTPS. Access to personal data is limited to the people who need it. Payment data never reaches our systems. No system is perfectly secure, so if a breach affects your personal data we will notify you and the Data Protection Board as the Act requires.

Children

This site is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Cookies

Cookies and similar technologies are covered separately in the Cookie Policy, which also explains how to change or withdraw your consent at any time.

Complaints

If you are unhappy with how we have handled your data, contact us first through the contact page. Our grievance officer's details are published there. You also have the right to complain to the Data Protection Board of India.

You can reach us directly at Povoassam@gmail.com.