Privacy policy

TARAYA (operated by A96 Ventures Private Limited)
Version 1.0 · Effective 14 September 2026

This Privacy Policy explains how A96 Ventures Private Limited (CIN U32111WB2023PTC265350, registered office at 44/19, Durgapur Lane, Kolkata 700 027, West Bengal, India), operating the TARAYA brand at taraya.in (the ‘Website’), collects, uses, shares and protects your personal data. It is published in accordance with applicable Indian law, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 and the rules under them.

1. What We Collect

1.1 Identity and contact data: your name, email address, phone number and delivery and billing addresses.

1.2 Order and transaction data: the pieces you order, invoices, payment status and delivery records. We do not receive or store your card, UPI or banking credentials; these are processed directly by our payment gateway.

1.3 Buyback and verification data: where you use our Buyback Programme, government-issued identification, bank account details and invoice records; and in succession cases, death certificates, heirship or succession documents, indemnities and the claiming heir’s identification and bank details.

1.4 Communications and claims: emails, WhatsApp messages and material you submit with a claim, including photographs and unboxing videos.

1.5 Content you submit: reviews and other content you post on the Website.

1.6 Technical data: device and browser information, IP address and cookies set by our e-commerce platform and payment gateway as described in Section 3.

2. Why We Use It

2.1 We process personal data, on the basis of your consent and for legitimate uses recognised by law, to:

2.1.1 confirm, fulfil, ship and insure your orders and issue invoices;

2.1.2 verify and process claims, remedies and refunds under our policies;

2.1.3 operate the Buyback Programme, including identity, entitlement and succession verification and payment;

2.1.4 process payments and prevent fraud;

2.1.5 respond to enquiries and grievances;

2.1.6 send marketing communications where you have consented, as described in Section 6;

2.1.7 display reviews you submit; and

2.1.8 comply with legal obligations, including tax, accounting and record-keeping requirements.

3. Cookies and Tracking

3.1 The Website uses cookies set by Shopify, our e-commerce platform, for essential functions such as your cart, session, security and Shopify’s built-in store analytics. Our payment gateway, Razorpay, collects device and transaction signals at checkout for payment processing and fraud prevention.

3.2 We do not use third-party advertising or analytics trackers. No Google Analytics, Meta pixel or similar tool is installed on the Website. If this changes, this Policy will be updated before such tools are used.

4. Who We Share It With

4.1 We share personal data only with service providers who need it to serve you, and with authorities where the law requires. We never sell or rent your personal data.

4.1.1 Shopify: hosts the Website and processes store data on our behalf;

4.1.2 Razorpay: processes payments and holds your payment credentials under its own terms;

4.1.3 BVC Logistics and our transit insurer: receive your name, address, phone number and shipment details to deliver and insure your order and to process transit claims;

4.1.4 Cloudflare and Google: route and host our email infrastructure, so correspondence with us passes through their systems;

4.1.5 Meta (WhatsApp): messages exchanged with us on WhatsApp are transmitted through WhatsApp and processed by Meta under its own terms; and

4.1.6 Authorities: where disclosure is required by law, legal process or to protect our legal rights.

5. International Transfers

5.1 Some of our service providers, including Shopify, Google, Cloudflare and Meta, store or process data outside India. Such transfers are made in accordance with applicable Indian law governing cross-border transfer of personal data.

6. Marketing Communications

6.1 With your consent, we send occasional updates and offers by email and WhatsApp. We will never spam you: our communications are infrequent and relevant, and your details are never shared for others’ marketing.

6.2 You may opt out at any time using the unsubscribe link in any email, by replying to a WhatsApp message asking to stop, or by writing to care@taraya.in. Withdrawing consent is as easy as giving it. Transactional messages about your orders and account are sent as necessary regardless of marketing preferences.

7. Retention

7.1 We retain personal data only as long as needed for the purposes above and as the law requires:

7.1.1 Order, invoice and claims records, including claim media: 8 years, aligned to tax and accounting record requirements;

7.1.2 Buyback verification and succession documents: 8 years from the buyback transaction;

7.1.3 Marketing data: until you opt out;

7.1.4 Account data: until you request deletion, subject to legal minimums; and

7.1.5 System and access logs: at least one year, in line with the Digital Personal Data Protection Rules 2025.

8. Your Rights

8.1 Subject to applicable law, you may: access a summary of the personal data we hold about you and how it is processed; have inaccurate or incomplete data corrected or updated; request erasure of data we are not legally required to retain; withdraw consent at any time; and nominate a person to exercise these rights on your behalf in the event of your death or incapacity.

8.2 To exercise any right, write to grievance@taraya.in. If your grievance remains unresolved, you may approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act 2023.

9. Children

9.1 The Website is intended for persons aged 18 and over. We do not knowingly collect personal data from children, and we will delete any such data brought to our attention.

10. Security

10.1 We apply reasonable security safeguards appropriate to a business of our nature, including encrypted connections, access controls and reliance on the certified security of our platform and payment providers. In the event of a personal data breach, we will notify affected individuals and authorities as required by applicable law.

11. Grievance Officer

11.1 Our Grievance Officer for privacy matters, who is also our Grievance Officer under the Consumer Protection (E-Commerce) Rules 2020, is:

Name: Aman Jhawar
Email: grievance@taraya.in
Address: 44/19, Durgapur Lane, Kolkata 700 027, West Bengal, India

11.2 Grievances are acknowledged within 48 hours and resolved within one month of receipt.

12. Changes and Governing Law

12.1 We may amend this Policy prospectively. The current version is always published on this page with its version number and effective date, and material changes will be notified on the Website.

12.2 This Policy is governed by the laws of India. Subject to applicable law, courts at Kolkata have jurisdiction.