Privacy Policy

Effective date: [to be confirmed before launch] · Last updated: [to be confirmed before launch]

This Privacy Policy explains how Astraea Ventures Private Limited ("Astraea Beyond", "we", "us") collects, uses, discloses, and protects personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

1. Data we collect

• Identity and contact data: name, email address, phone number.
• Delivery data: shipping address, PIN code, city, state.
• Order and transaction data: items purchased, order value, order status, payment reference (not full card/UPI credentials).
• Support data: messages you send us for customer service, returns, or complaints.
• Technical data: basic security and diagnostic logs (e.g. IP address, browser type) collected automatically to protect the Site.
• Cookie data: as described in our Cookie Policy.

2. Purpose of processing

We process personal data to: process and fulfil your order; generate tax invoices; arrange shipping and delivery; verify payments; respond to support, return, and refund requests; prevent fraud and secure the Site; and comply with legal obligations.

3. Consent

Where we rely on consent, we will ask for it clearly and separately at checkout, and you may withdraw consent at any time by contacting us, subject to data we are required to retain by law (for example, tax and financial records).

4. Sharing of data

We share data only as necessary with: our hosting/infrastructure provider (Cloudflare); our payment gateway partner(s), solely to process and verify payments; our logistics/courier partners, solely to deliver your order; and government or regulatory authorities where legally required. We do not sell personal data.

5. Data retention

We retain order and transaction data for as long as required for tax, accounting, and legal purposes, and delete or anonymise personal data when it is no longer needed for these purposes.

6. Your rights

Subject to the DPDP Act, you may request access to, correction of, or erasure of your personal data, and may withdraw consent, by emailing [email protected]. We will respond within a reasonable time and in any event as required by applicable law.

7. Data security

We use reasonable technical and organisational measures to protect personal data, including access controls and encrypted storage of sensitive configuration. No online system can be guaranteed 100% secure; if we become aware of a data breach affecting your personal data, we will notify you and the relevant authority as required by law.

8. Children's data

This Site is not directed at children. We do not knowingly collect personal data from children without verifiable parental/guardian consent as required under the DPDP Act.

9. Grievance / Data Protection contact

For privacy-related queries or complaints, contact our Grievance Officer, Sheril Shibu, at [email protected], or write to: ASTRAEA VENTURES PRIVATE LIMITED, C/O Shibboo Thomas, Perumpral, Eramathoor P.O, Mannar, Chengannur, Alappuzha – 689622, Kerala, India. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.