Privacy Policy
Last updated: 20 October 2026
Introduction
Vaibhav Celebrations ("we," "us," "our," or the "Company"), operated by Charu Saxena, is committed to protecting the privacy and personal data of our customers, website visitors, and users. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website vaibhavcelebrations.in, mobile applications, WhatsApp communications, and related services.
This policy is drafted with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them. The General Data Protection Regulation (GDPR) or any other foreign data-protection law applies only where, and to the extent that, it is actually applicable to the relevant processing activity.
We process personal data on the basis applicable to the relevant processing activity. This includes the performance of a contract or order with you, compliance with our legal obligations, your consent where consent is required, and other legally permissible business purposes described in this policy.
1. Data Controller Information
| Business Name | Vaibhav Celebrations |
| Proprietor | Charu Saxena |
| Registered Address | B-404, Trimurti Apartments, Model Town, Malviya Nagar, Jaipur – 302017, Rajasthan, India |
| GSTIN | 08BPIPS2048G2ZO |
| Support Email | support@vaibhavcelebrations.in |
| Support Phone | +91 85275 75174 |
| Website | vaibhavcelebrations.in |
2. Categories of Personal Data We Collect
We collect and process the following categories of personal data:
2.1 Identity and Contact Information
- Full name, email address, mobile/WhatsApp number
- Billing and shipping address
- Account login credentials (password stored in encrypted/hashed form only)
2.2 Celebration and Event Details
- Celebration type (birthday, baby shower, naming ceremony, etc.)
- Event date, city, venue, and guest count
- Theme preferences and budget range
- Special requirements and customization requests
2.3 Child and Guest Information
- Child's name, age, and preferences (for personalization purposes)
- Names printed on tags, invitations, or return gifts
- Guest names for registry or invitation purposes
Important: Information relating to a child should be provided only by a parent, legal guardian or other authorised person, for the specific purpose of fulfilling celebration services. See Section 4.
2.4 Order and Payment Information
- Order details: items, quantities, personalization selections
- Transaction references, payment status, invoice details
- GST-related information for tax compliance
Note: We do not store your complete credit/debit card numbers, CVV, or UPI PINs. All payment processing is handled securely by our PCI-DSS compliant payment gateway partner, Razorpay.
2.5 Customer-Provided Content
- Photographs uploaded for personalization or event planning
- Artwork requests, logos, or design references
- Messages, notes, or special instructions
2.6 Technical and Device Data
- IP address, browser type and version, device identifiers
- Pages visited, time spent, referral source
- Cookies and similar tracking technologies (see Section 10)
2.7 Communication Preferences
- WhatsApp and email opt-in/opt-out status
- Marketing communication preferences
- Consent records with timestamps
3. Purpose of Data Collection and Legal Basis
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, email, phone, password | Contract performance; Consent |
| Processing orders and payments | Contact, address, order, payment info | Contract performance |
| Personalization of products/services | Child name, event details, photos | Contract performance; Consent |
| Delivery of products | Shipping address, phone | Contract performance |
| Customer support and enquiries | Contact info, enquiry details | Legitimate interest; Contract |
| Transactional communications | Email, WhatsApp number | Contract performance |
| Marketing communications | Email, WhatsApp (with opt-in) | Consent (explicit opt-in) |
| Invoice and tax compliance | Name, address, GSTIN, order details | Legal obligation |
| Website analytics and improvement | Technical data, cookies | Legitimate interest; Consent |
| Fraud prevention and security | Technical data, transaction patterns | Legitimate interest |
3.1 Business Purposes
Personal data may be used for the following business purposes:
- Order processing, customisation, quotations and event planning
- Customer support, delivery, refunds and cancellations
- Accounting, GST and other tax compliance
- Fraud prevention, dispute resolution and debt recovery
- Enforcement of our contractual rights
- Responding to legal notices and complying with governmental authorities
- Improving our products and services
4. Children's Data
Vaibhav Celebrations specializes in children's birthday celebrations and related services. We take the protection of children's data very seriously.
4.1 Our Commitments:
- Information relating to a child, as defined under applicable law, should be provided by a parent, legal guardian or authorised person, and is processed in accordance with applicable law.
- Child data (names, ages, photos) is used solely for the requested celebration services and personalization.
- We do not engage in behavioral advertising or profiling directed at children.
- We do not send marketing communications to children.
4.2 Parental/Guardian Rights:
- Parents/guardians may request access to, correction of, or deletion of their child's personal data, subject to Section 15.
- Contact our Grievance Officer (see Section 16) for such requests.
5. Information and Content You Provide
5.1 Content Supplied by You:
By supplying any photograph, image, name, logo, artwork, design, document or other content, you represent that you have lawfully obtained all permissions, consents and authorisations necessary for Vaibhav Celebrations to use that content for fulfilling your order or providing services.
5.2 Personal Data of Guests and Other Third Parties:
Where you provide personal data relating to guests, family members, invitees, employees or other third parties, you are responsible for ensuring that such information may lawfully be provided to Vaibhav Celebrations for the requested purpose.
5.3 Terms of Service:
Your obligations concerning third-party privacy, intellectual property and publicity rights are also governed by our Terms of Service and any applicable order-specific agreement.
6. Photography and Media Consent
We may request separate, optional consent to use photographs or videos from your celebration for:
- Our website gallery and portfolio
- Social media (Instagram, Facebook, etc.)
- Promotional and advertising materials
6.1 Important Points:
- Photography consent is separate from service terms — purchasing a package does not automatically grant media usage rights.
- You may withdraw consent for future use at any time by contacting us.
- Once media is lawfully published (printed materials, third-party shares), complete removal may not be technically possible, but we will cease further use.
- We will never sell or license your photos to third parties for their commercial use.
6.2 Guests and Other Persons at an Event:
- Event photography may capture guests or other persons present at the event.
- You should inform attendees of the photography arrangements and obtain their permissions where required.
6.3 Photographers and Other Event Vendors:
Where a photographer or other event vendor processes photographs or videos independently, including a vendor engaged directly by you, that vendor is responsible for its own handling of such media, and its own terms and privacy practices apply.
7. WhatsApp and Communication Policy
7.1 Transactional Messages (No Opt-in Required):
We send essential messages related to your orders and bookings:
- Order confirmations and payment receipts
- Delivery updates and tracking information
- Booking confirmations and event reminders
- Invoice delivery
- Account verification (OTP/links)
- Customer support responses
7.2 Marketing Messages (Explicit Opt-in Required):
Promotional communications require your separate, explicit consent:
- Festive offers and discounts
- New theme or product launches
- Re-engagement and promotional campaigns
7.3 Your Communication Rights:
- You may opt-out of marketing messages anytime by replying "STOP", using the unsubscribe link, changing the preference in your account, or contacting us.
- Opting out of marketing does not affect transactional messages.
- We maintain records of consent: source, date/time, and withdrawal.
- We comply with WhatsApp Business Messaging Policy and do not use purchased contact lists.
7.4 WhatsApp and Other Third-Party Communication Services:
WhatsApp and other third-party communication services are subject to the provider's own terms, policies and technical infrastructure. Delivery and availability of messages may be affected by third-party systems or network conditions.
7.5 Do Not Send Sensitive Information:
Please do not send passwords, payment PINs, complete card details or other unnecessary sensitive information through ordinary email, WhatsApp or other unsecured channels.
8. Data Sharing and Third-Party Disclosure
We share your personal data only with the following categories of recipients, and only to the extent necessary:
8.1 Service Providers:
| Category | Purpose |
|---|---|
| Payment processors (Razorpay) | Secure payment processing |
| Cloud hosting, cloud storage and database providers | Website and data storage |
| IT providers, website developers and CRM providers | Operating and maintaining our website and systems |
| Email/SMS service providers | Transactional and marketing communications |
| WhatsApp Business API (Meta) | WhatsApp messaging |
| Courier/logistics providers | Product delivery |
| Analytics providers | Website performance analysis |
| Printers, manufacturers, designers and packaging vendors | Producing personalized and made-to-order items |
| Decorators, photographers and other event vendors | On-ground event execution |
| Accountants, auditors and lawyers | Accounting, tax, audit and legal advice |
| Other vendors | Where necessary for operating the business and fulfilling customer orders |
8.2 Customisation and Printing Data:
Customer names, photographs, messages, designs and other personalisation information may be shared with printers, designers, manufacturers, packaging vendors, decorators, event vendors and other service providers to the extent necessary to fulfil the order.
8.3 Legal and Regulatory Disclosure:
We may disclose your data when required by:
- Court orders, legal processes, or government requests
- Tax authorities (GST compliance)
- Law enforcement for fraud prevention or investigation
- Protection of our legal rights or safety
8.4 Business Transfers:
In case of a merger, restructuring, sale, transfer or acquisition of all or part of our business or assets, relevant information may be transferred to the successor, purchaser or their professional advisers, subject to applicable law.
8.5 We Do NOT:
- Sell your personal data to third parties
- Share data with third parties for their independent marketing
- Authorise third parties to use your data beyond the specified purpose
8.6 Third-Party Services:
Third-party services may be subject to their own terms and privacy practices. To the extent permitted by law, Vaibhav Celebrations is not responsible for the independent acts, omissions, outages or privacy practices of third parties beyond its reasonable control.
9. International Data Transfers
Some of our third-party service providers may process or store data outside India. Such processing will be undertaken in accordance with applicable law and subject to appropriate contractual, technical and organisational safeguards.
10. Cookies and Tracking Technologies
10.1 Types of Cookies We Use:
| Type | Purpose | Consent Required |
|---|---|---|
| Essential/Strictly Necessary | Website functionality, security, cart/session | No (required for operation) |
| Analytics | Understanding usage patterns, improving site | Yes |
| Marketing/Advertising | Personalized ads, remarketing | Yes |
10.2 Your Cookie Choices:
- Essential cookies are enabled by default for site functionality.
- Analytics and marketing cookies are used only after you allow them.
- You can manage preferences through our cookie banner, the "Cookie Settings" link at the bottom of every page, or your browser settings.
- Disabling certain cookies may affect website functionality.
11. Data Retention
We retain personal data only as long as reasonably necessary for order fulfilment, customer support, accounting, tax and regulatory compliance, fraud prevention, dispute resolution and enforcement of legal rights, or for any longer period required by law. After that, data is securely deleted or anonymized.
11.1 Retention Despite a Deletion Request:
A deletion request may not result in immediate deletion where retention is necessary to comply with law or taxation/accounting requirements, to establish or defend legal claims, to resolve disputes, to prevent fraud or to protect legal interests.
11.2 Legal Claims and Dispute Records:
We may retain and process relevant communications, order information, invoices, payment records and other information reasonably necessary to establish, exercise or defend legal claims, respond to complaints, enforce contractual rights or comply with legal proceedings.
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
12.1 Technical Measures:
- SSL/TLS encryption for all data in transit (HTTPS)
- Encrypted storage for sensitive data
- Secure password hashing (bcrypt)
- Payment data handled by PCI-DSS compliant gateway
- Regular security updates and vulnerability scanning
- Access controls and authentication mechanisms
12.2 Organizational Measures:
- Access to personal data is restricted to employees, contractors, agents and service providers who reasonably require access for legitimate business purposes and are subject to appropriate confidentiality obligations.
- Role-based access control for staff
- Staff training on data protection
- Regular security audits
12.3 Incident Response:
In case of a personal data breach, we will take reasonable steps to contain, investigate and remediate the breach, and will notify affected individuals and/or the relevant authorities where and to the extent required by applicable law.
12.4 Account Security:
You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorised access to or misuse of your account.
Disclaimer: While we strive to protect your data, no method of transmission or storage is 100% secure. Subject to applicable law, we cannot guarantee the absolute security of our website, systems, communication channels or third-party services.
13. Fraudulent or Unauthorised Orders
Subject to applicable law, we may refuse, cancel, suspend or investigate orders or accounts where fraud, unauthorised use of a payment method, false information, misuse of promotions, unlawful activity or a violation of our Terms of Service is reasonably suspected.
14. Aggregated and Anonymised Data
We may create and use aggregated, statistical or anonymised information derived from personal data for lawful business analysis, service improvement and operational planning, provided that individuals are not identified.
15. Your Data Rights
Your rights depend on the law that actually applies to you and to the relevant processing. Subject to that law, you may have the following rights:
15.1 Right to Access
Request a summary or copy of the personal data we hold about you.
15.2 Right to Correction
Request correction of inaccurate or incomplete personal data.
15.3 Right to Erasure
Request deletion of your personal data, subject to Section 11.
15.4 Right to Withdraw Consent
Withdraw consent for data processing at any time. Withdrawal does not affect the lawfulness of prior processing.
15.5 Right to Nominate
Nominate an individual to exercise your rights in case of your death or incapacity.
15.6 Right to Grievance Redressal
Raise a grievance with our Grievance Officer (see Section 16).
15.7 Additional Rights Under Foreign Law
Additional rights, such as data portability or a right to object, may apply where the GDPR or another foreign data-protection law applies to the relevant processing.
15.8 Identity Verification
We may take reasonable steps to verify the identity and authority of a person making a data-related request, including asking for evidence of authorisation where a request is made on behalf of another person.
15.9 Requests We May Decline or Restrict
Where permitted by law, we may decline or restrict a request, including where compliance would adversely affect another person's rights, conflict with our legal obligations, interfere with legal proceedings, compromise security, facilitate fraud or require disproportionate technical effort.
How to Exercise Your Rights:
- Email: support@vaibhavcelebrations.in
- To delete your data, follow our Data Deletion Instructions.
- Write to: Grievance Officer, Vaibhav Celebrations, B-404, Trimurti Apartments, Model Town, Malviya Nagar, Jaipur – 302017
- We will respond within 30 days of receiving a verifiable request.
16. Grievance Officer
In accordance with the DPDP Act, 2023 and IT Act, 2000, we have appointed a Grievance Officer:
| Name | Charu Saxena |
| Designation | Grievance Officer & Proprietor |
| support@vaibhavcelebrations.in | |
| Phone | +91 85275 75174 |
| Address | B-404, Trimurti Apartments, Model Town, Malviya Nagar, Jaipur – 302017 |
| Response Time | Within 30 days of complaint receipt |
If you are not satisfied with our response, you may escalate to the Data Protection Board of India (once established under DPDP Act) or the appropriate consumer forum.
17. Third-Party Links
Our website may contain links to third-party websites (e.g., payment gateways, social media). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal data.
18. Relationship With Our Other Terms
This Privacy Policy concerns our personal-data practices. Subject to applicable law, it does not modify or override our Terms of Service, order-specific terms, Refund & Cancellation Policy or other applicable commercial agreements.
19. Severability and No Waiver
- Severability: If any provision of this policy is held invalid, unlawful or unenforceable, it will be modified to the minimum extent necessary and the remaining provisions will continue in effect.
- No waiver: Our failure to enforce any provision on one occasion does not constitute a waiver of our right to enforce it subsequently.
20. Governing Law
This Privacy Policy is governed by the laws of India, except to the extent that mandatory provisions of an applicable foreign data-protection law apply.
21. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in:
- Our data practices
- Legal requirements
- Business operations
Updates will be posted on this page with the "Last Updated" date. For significant changes, we will notify you via email or website notice. Continued use of our services after updates constitutes acceptance of the revised policy.
22. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy:
| Support Email | support@vaibhavcelebrations.in |
| Phone | +91 85275 75174 |
| Address | Vaibhav Celebrations, B-404, Trimurti Apartments, Model Town, Malviya Nagar, Jaipur – 302017, Rajasthan, India |
Effective Date: September 30, 2026
Last Updated: September 30, 2026
Version: 2.0