Privacy Policy

Effective Date: February 28, 2026

1. About This Privacy Policy

This Privacy Policy describes how Vedya ("we," "us," or "our"), operating vedyaonline.com, collects, uses, discloses, retains, and protects your personal information. This policy applies to all visitors, users, and customers of our website and services.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described, please discontinue use of our website.

2. Who Is Responsible for Your Personal Information?

Vedya is the data controller responsible for the personal information collected through vedyaonline.com.

Privacy Contact: vedyaonline@gmail.com
Website: vedyaonline.com

3. Categories of Information Collected and How It Is Used

Below are the categories of personal information we collect, the purposes for collection, applicable retention periods, and whether the data is sold or shared for cross-context behavioral advertising.

A. Identifiers & Contact Information

Purpose: Order processing, shipping, account management, customer communication, fraud prevention.
Retention: 7 years (tax/legal compliance).
Sold or Shared: No.

B. Payment & Financial Data

Purpose: Payment processing, transaction verification, tax compliance, fraud detection. Full credit card numbers are never stored.
Retention: 7 years (accounting/legal).
Sold or Shared: No.

C. Commercial & Order Data

Purpose: Order fulfillment, delivery coordination, customer service, product improvement.
Retention: 7 years (tax/legal compliance).
Sold or Shared: No.

D. Internet & Network Activity

Purpose: Site analytics, user experience improvement, security monitoring, performance optimization.
Retention: See Cookie Policy.
Sold or Shared: No.

E. Marketing & Advertising Data

Purpose: Targeted advertising, campaign measurement, audience analysis via Google Analytics, Meta Pixel, and TikTok Pixel.
Retention: See Cookie Policy.
Sold or Shared: Yes - may constitute "sharing" under CCPA. Opt out.

F. Communication Data

Purpose: Customer service, inquiry response, complaint resolution, quality assurance.
Retention: 3 years from last interaction.
Sold or Shared: No.

G. Geolocation Data

Purpose: Fraud prevention, shipping optimization, compliance with regional laws. Only approximate location (city/state level) is collected via IP address.
Retention: See Cookie Policy.
Sold or Shared: No.

4. Personal Information Collection Sources

• Directly from you - when you place an order, create an account, subscribe to emails, or contact us.
• Automatically - through cookies, pixel tags, and similar technologies when you browse our website.
• Third-party service providers - including Shopify (e-commerce platform), payment processors, and marketing/analytics partners.

5. Categories of Information Disclosed & Shared With Third Parties

We may disclose personal information to the following categories of third parties for the purposes described:

Shopify - E-commerce platform operations, order management.

Payment Processors - Secure transaction processing.

Shipping Carriers - Order delivery and tracking.

Google Analytics - Website analytics and performance measurement.

Meta (Facebook/Instagram) - Advertising and conversion tracking.

TikTok - Advertising and conversion tracking.

We do not sell personal information for monetary consideration. We do not knowingly share information of minors under 16.

Disclosure of data to marketing partners for cross-context behavioral advertising may constitute a "sale" or "sharing" under applicable U.S. state privacy laws. To opt out, visit our Do Not Sell or Share My Personal Information page or enable Global Privacy Control (GPC) in your browser.

We may also disclose personal information when required by law, regulation, legal process, or government request, or in connection with a merger, acquisition, or sale of business assets.

6. Personal Information Retention Periods

We retain personal information only as long as necessary to fulfill the purposes described in this policy or as required by applicable law.

Order & transaction records - 7 years (IRS tax compliance).

Payment & financial records - 7 years (accounting and fraud prevention).

Customer account information - Until deletion requested (active account maintenance).

Customer service communications - 3 years from last contact (dispute resolution).

Marketing preferences - Until opt-out or unsubscribe (CAN-SPAM compliance).

Cookies & analytics data - Varies by cookie type. See Cookie Policy.

When data is no longer required, it is securely deleted or anonymized.

7. Security of Personal Information

We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted through our website
• PCI-DSS compliant payment processing
• Access controls limiting personnel who can view personal information
• Regular review and updating of data handling practices

No method of internet transmission or electronic storage is 100% secure. While we strive to protect your information, absolute security cannot be guaranteed.

8. International Personal Information Transfers

Our website is operated from the United States. If you access our site from outside the U.S., your information may be transferred to, stored in, and processed in the United States where data protection laws may differ from those in your jurisdiction.

By using our website or completing a purchase, you consent to the transfer of your information to the United States.

We comply with applicable international data protection requirements, including PIPEDA and Quebec's Law 25, to the extent they apply to our operations.

9. Automated Decision-Making and Artificial Intelligence

We do not engage in automated decision-making, including profiling, that produces legal, financial, or similarly significant effects concerning you. Any automated processes used on our website (such as fraud detection screening) are supplemented by human review.

We do not use your identifiable personal information to train, develop, or improve any artificial intelligence or machine learning models.

If you believe an automated process has affected you, you have the right to request human intervention, express your point of view, and contest the decision by contacting us at vedyaonline@gmail.com.

10. Cookies & Tracking Technologies

We use cookies, pixel tags, and similar tracking technologies to operate our site, remember preferences, analyze traffic, and deliver advertising. A detailed list of all cookies used, including names, providers, purposes, and durations, is available in our Cookie Policy.

Global Privacy Control (GPC): We honor GPC signals where required by applicable U.S. state privacy laws. A GPC signal is treated as a valid opt-out of the sale or sharing of personal information.

Do Not Track (DNT): No uniform standard exists for responding to DNT signals. We do not currently respond to DNT browser signals but do honor GPC signals as described above.

11. Your Rights Over Your Personal Information

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Know/Access - Request disclosure of the categories and specific pieces of personal information collected, sources, purposes, and third parties with whom it was shared.

Right to Delete - Request deletion of personal information, subject to legal exceptions including tax recordkeeping requirements.

Right to Correct - Request correction of inaccurate personal information.

Right to Opt-Out of Sale/Sharing - Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising via our opt-out page or by enabling GPC in your browser.

Right to Limit Sensitive Information - We do not process sensitive personal information beyond what is necessary to provide our services.

Right to Non-Discrimination - We will not discriminate against you for exercising any privacy right.

How to Exercise Your Rights

Requests may be submitted via email at vedyaonline@gmail.com (subject: "Privacy Request") or through our Contact Us page. Identity verification is required prior to processing. We will respond within 45 days as required by law, with an extension of up to 90 days upon notice. Authorized agents may submit requests with proof of authorization.

California Residents (CCPA/CPRA)

All rights above apply under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Categories of personal information collected in the past 12 months: Identifiers, commercial information, internet/network activity, geolocation data. No financial incentives tied to personal information are offered. Two designated request methods are provided as required.

Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, and other states with comprehensive privacy laws may exercise similar rights. Contact us to submit a request under your state's applicable law.

12. Children's Privacy

Our website and products are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If a parent or guardian believes their child has submitted personal information, they should contact us at vedyaonline@gmail.com and it will be promptly deleted.

13. Third-Party Links

Our website may contain links to third-party websites or services. We do not control and are not responsible for the privacy practices of external sites. We recommend reviewing their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be indicated by updating the "Effective Date" at the top of this page. Continued use of our website following any changes constitutes acceptance of the updated policy.

15. How to Contact Us

For privacy inquiries, data requests, or complaints:

Email: vedyaonline@gmail.com
Subject Line: "Privacy Request" or "Privacy Inquiry"
Response Time: 24-48 business hours, Monday through Friday.