4. How We Use Your Information
We use your information for the following specific purposes:
• Order Fulfilment: To process, pack, ship, and deliver your tiles, marble, and sanitaryware, and to handle returns and refunds.
• Responding to Enquiries: To contact you about a quotation, sample request, or lead form you submitted, including by phone, email, or WhatsApp.
• Customer Support: To resolve complaints, track shipments, and provide after-sales assistance.
• Marketing (with your consent): To send you updates on new collections, offers, and design trends. You may withdraw consent at any time.
• Advertising & Measurement: To measure how our advertisements perform and to show you relevant products, as described in Section 5.
• Improvement & Analytics: To understand how our website is used and improve our products, catalogue, and service.
• Legal & Compliance: To issue tax invoices, maintain statutory records, prevent fraud, and comply with applicable law.
Legal basis: We rely on your consent for marketing and non-essential cookies, on the performance of our contract with you for order fulfilment, and on our legitimate interests and legal obligations for fraud prevention, security, and statutory record-keeping.
5. Cookies, Meta Pixel & Tracking Technologies
Our website uses cookies and similar technologies (pixels, SDKs, and local storage) to operate the site, remember your preferences, and measure our advertising.
Categories of cookies we use:•
Strictly Necessary: Required for the site to function — session management, security, and your cart. These cannot be disabled.
•
Analytics: Help us understand which pages and collections are popular so we can improve them.
•
Advertising & Retargeting: Used to show you relevant Vesta products on Facebook, Instagram, and other platforms, and to measure whether an advertisement led to an enquiry or sale.
Meta Pixel and Conversions API: We use the Meta Pixel on our website and the Meta Conversions API on our server. These tools tell Meta when you take an action such as viewing a product, submitting an enquiry, or completing a purchase, so that we can measure our advertising and show relevant ads to you and to similar audiences.
Where these tools transmit identifiers such as your email address or phone number for matching purposes, the data is
cryptographically hashed before transmission so that Meta does not receive it in plain readable form. In respect of this joint processing, we and Meta act as independent or joint controllers depending on your jurisdiction, as set out in Meta's controller terms.
Your choices: You may refuse or delete cookies through your browser settings, though some parts of the site may then not function correctly. You can also limit ad personalisation directly in your
Meta Ad Preferences or opt out of interest-based advertising at
optout.aboutads.info.
6. WhatsApp & Messenger Communications
We use the WhatsApp Business Platform and Messenger to answer enquiries, share product catalogues and quotations, and provide order and delivery updates.
• Opt-in: We will only send you WhatsApp or Messenger messages where you have given us your number or started a conversation with us, or have otherwise consented to be contacted on that channel.
• What we send: Order confirmations, dispatch and delivery updates, responses to your enquiries, and — only where you have separately consented — promotional messages about new collections and offers.
• Opt-out: You may stop receiving messages at any time by replying STOP in the chat, by blocking our business number, or by emailing ${BusinessInfo.privacyEmail}. We will action opt-out requests promptly and will continue to send only essential transactional messages about an order already placed.
• Message content: Messages you exchange with us are end-to-end encrypted in transit by WhatsApp. We retain the conversation history in our customer records so we can service your enquiry and resolve disputes.
• No unrelated use: We do not use your WhatsApp number for any purpose other than those stated above, and we never sell or rent it.
7. Information Sharing & Disclosure
We do not sell, trade, or rent your personal information to anyone. We share it only in the following limited circumstances:
• Logistics & Delivery Partners: Your name, delivery address, and phone number are shared with the transporters and courier partners who deliver your order to your project site.
• Payment Gateways & Banks: To process and reconcile your payment securely.
• Technology Service Providers: Hosting, cloud storage, CRM, email, and analytics providers who process data on our behalf, under contract, and only on our instructions.
• Meta Platforms, Inc.: For advertising measurement and audience matching, as described in Section 5, using hashed identifiers.
• Professional Advisers: Our auditors, accountants, and lawyers where necessary.
• Legal & Regulatory Authorities: Where disclosure is required by law, court order, or a valid request from a law-enforcement or tax authority.
• Business Transfers: If our business is merged, acquired, or reorganised, your data may transfer to the successor entity under the same protections.
All processors we engage are bound by confidentiality obligations and are permitted to use your data only for the service they provide to us.
We keep your personal data only for as long as it is needed for the purpose it was collected:
• Order, invoice, and tax records: Retained for 8 years from the end of the relevant financial year, as required under Indian tax and companies legislation.
• Enquiries and leads that do not convert: Retained for 24 months, then deleted or anonymised.
• WhatsApp and Messenger conversations: Retained for 24 months from the last message.
• Marketing consent records: Retained for as long as you remain subscribed, plus 3 years as proof of consent.
• Website analytics and cookie data: Retained for up to 26 months.
When a retention period ends, we securely delete the data or irreversibly anonymise it so it can no longer identify you. Where you ask us to delete your data earlier, we will do so except where we are legally required to retain it — see Section 10.
We employ reasonable physical, electronic, and administrative safeguards designed to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit using HTTPS/TLS, access controls that limit staff access to a need-to-know basis, secured and access-logged servers, and periodic review of our security practices.
No method of transmission over the internet or method of electronic storage is completely secure, so while we strive to protect your personal data using commercially acceptable means, we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to you, we will notify you and the relevant authority without undue delay and in accordance with applicable law.
10. Your Rights & Choices
Subject to applicable law, you have the following rights over your personal data:
• Access: Request a copy of the personal data we hold about you and a summary of how it is processed.
• Correction: Ask us to correct inaccurate or incomplete data, including delivery details.
• Erasure: Ask us to delete your personal data — see Section 11.
• Withdraw Consent: Withdraw your consent to marketing or to non-essential cookies at any time, without affecting processing carried out before withdrawal.
• Object & Restrict: Object to processing based on our legitimate interests, or ask us to restrict processing while a dispute is resolved.
• Data Portability: Where applicable, receive your data in a structured, commonly used, machine-readable format.
• Nominate: Under the DPDP Act, 2023, nominate an individual to exercise your rights in the event of your death or incapacity.
• Grievance Redressal: Complain to our Grievance Officer (Section 15) and, if unsatisfied, escalate to the Data Protection Board of India or your local supervisory authority.
To exercise any right, email ${BusinessInfo.privacyEmail}. We will verify your identity and respond within 30 days. Exercising these rights is free of charge.
11. How to Delete Your Data
You may ask us at any time to delete the personal data we hold about you, including data we received through a Facebook or Instagram lead form, or through WhatsApp or Messenger.
To request deletion:• Email
admin@vestatiles.in with the subject line
"Delete My Data", from the email address you used with us; or
• Send us a WhatsApp message containing the words
DELETE MY DATA; or
• Call us on
+91 90439 99485.
Include the name, phone number, or email address you used so we can locate your records. We will verify your identity, confirm receipt within
7 working days, and complete the deletion within
30 days.
What we cannot delete: We are legally required to keep invoices, tax records, and transaction data for 8 years. Those records are retained in restricted-access archives and are not used for marketing or any other purpose.
Full step-by-step instructions are available on our dedicated
Data Deletion Request page.
Our website, products, and services are intended for business customers, architects, contractors, and adult consumers. We do not knowingly collect personal data from children under the age of 18, and we do not direct any advertising to children or track or profile them.
If you believe a child has provided us with personal data, please contact us immediately at admin@vestatiles.in and we will delete that information promptly.
13. International Data Transfers
We are based in India and primarily store data on servers located in India. Some of the service providers we rely on — including Meta Platforms, our cloud hosting, and our email providers — may process or store data on servers outside India, including in the United States and the European Union.
Where personal data is transferred outside its country of origin, we ensure an appropriate level of protection through recognised safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent contractual commitments with our processors. If you export to us from the EU or UK, our transfers rely on these safeguards, and you may request a copy of the relevant terms by contacting us.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we do, we will revise the "Effective date" shown in Section 1 and publish the updated policy on this page.
Where a change materially affects how we use your data, we will give you prominent notice — by email or by a notice on our website — before it takes effect, and where the law requires it, we will seek your fresh consent. We encourage you to review this page periodically. Your continued use of our website and services after an update takes effect constitutes acceptance of the revised policy.
Last updated: 11 August 2026.
