What we collect
Account data: your name, email address, a securely hashed password and, optionally, a phone number and marketing preference.
Order data: the items you buy, the delivery and billing addresses you provide, your chosen shipping method and the payment reference returned by our payment provider.
Technical data: a session cookie that keeps you signed in, a cart cookie that remembers guest bags, and aggregate, non-identifying analytics about how the store is used.
How we use it
To create and secure your account, process and deliver your orders, send transactional messages about those orders, handle exchanges and price adjustments, and prevent fraud and abuse.
If you opt in, we also use your email address to send drops, restocks and launches. You can unsubscribe from any of those messages with one click.
Card and payment data
We never see or store your full card number, CVV or UPI credentials. Payments are handled entirely by our payment provider, and we only ever receive a reference ID and a payment status so we can reconcile your order.
Who we share it with
Only the partners required to fulfil your order: the payment gateway, our courier partners, and our transactional email provider. We do not sell, rent or trade your personal data with anyone.
Cookies
We use a small number of first-party cookies that are strictly necessary to run the store:
- A session cookie so you stay signed in
- A cart cookie so a guest bag survives a page refresh
- A preferences cookie that remembers dismissed notices
How long we keep it
Order records are retained for as long as tax and accounting rules require. Account data is kept until you ask us to delete it. Analytics data is aggregated and stripped of identifiers after 24 months.
Your rights
You can access, correct, export or delete your personal data at any time. Sign in to update your profile and addresses, or contact us if you would like us to remove your account entirely.
Security
Passwords are hashed with a modern adaptive algorithm and never stored in plain text. Sessions are signed and stored in httpOnly cookies. All traffic to the store is encrypted in transit.
Contact
Questions about this policy, or a request to access or delete your data? Email thevalosupport@gmail.com and we will respond within a reasonable period.
Last updated October 2026