Effective Date: September 26, 2026 · www.puffysingh.com
CLIENT NOTE: India’s Digital Personal Data Protection Act (DPDPA) 2023 is now in force. This template is aligned with DPDPA principles. Have this reviewed by a legal advisor familiar with DPDPA before publishing.
Puffy Singh (a brand of Vegxi Makerspace, “we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under applicable law — including India’s Digital Personal Data Protection Act (DPDPA) 2023 and the Information Technology (Reasonable Security Practices) Rules, 2011.
By using our website (www.puffysingh.com) or placing an order, you consent to the practices described in this Privacy Policy.
1. Data Controller / Data Fiduciary
The Data Fiduciary (as defined under the DPDPA 2023) for your personal data is:
Vegxi Makerspace (Brand: Puffy Singh) | Address: Khamgaon, Dist. Daund – 412214, Maharashtra, India | Email: hello@puffysingh.com | GSTIN: 27AAKCV7589E1ZN
2. Personal Data We Collect
We collect only the personal data necessary to provide our services and fulfil your orders.
| Identity Data | Your name, email address, phone number. |
| Order & Transaction Data | Products ordered, quantities, prices, order history, payment status. |
| Delivery Data | Delivery address, pin code, state. |
| Payment Data | Payment method type (we do not store your card numbers or UPI credentials — these are processed securely by our payment gateway provider [Razorpay]). |
| Communication Data | Messages, enquiries, or reviews you send us via email, WhatsApp, or our website contact form. |
| Technical Data | IP address, browser type, device type, pages visited, session duration — collected via cookies and analytics tools (see Cookie Policy). |
| Marketing Data | Your preferences for receiving marketing communications; whether you subscribed to our newsletter. |
3. How We Collect Data
• Directly from you — when you place an order, create an account, fill in a contact or enquiry form, subscribe to our newsletter, or contact us.
• Automatically — when you browse our website, via cookies, analytics tools, and server logs.
• From third parties — from our logistics partners (delivery status), payment gateway (transaction confirmation), and social media platforms (if you interact with our social accounts).
4. How We Use Your Personal Data
| Order Fulfilment | To process, pack, dispatch, and deliver your order. To send order confirmation, tracking, and delivery notifications. |
| Customer Support | To respond to your enquiries, complaints, and return/refund requests. |
| Payment Processing | To facilitate secure payment via our payment gateway. |
| Marketing Communications | To send you promotional offers, new product launches, and brand news — only if you have subscribed or consented. You may unsubscribe at any time. |
| Legal & Compliance | To maintain financial records, comply with GST/FSSAI requirements, and respond to lawful requests from government authorities. |
| Website Improvement | To analyse website usage and improve user experience using aggregated, anonymised analytics data. |
5. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:
• Logistics partners ([Shiprocket / Delhivery / confirm]) — to facilitate delivery of your order. These partners receive only the data necessary to complete delivery.
• Payment gateway ([Razorpay — confirm]) — to process payment transactions securely.
• Email / SMS service providers — to send order confirmations, shipping notifications, and marketing communications.
• Analytics providers — [Google Analytics — confirm tools used] for aggregated, anonymised website performance data.
• Government authorities — when required by law, court order, or regulatory requirement.
All third parties with whom we share data are required to maintain appropriate security measures and are prohibited from using your data for any purpose beyond the specific service they provide to us.
6. Your Rights Under DPDPA 2023
Under India’s Digital Personal Data Protection Act 2023, you have the following rights as a Data Principal:
• Right to Access — You may request a summary of the personal data we hold about you and how it has been processed.
• Right to Correction — You may request correction of inaccurate, incomplete, or outdated personal data.
• Right to Erasure — You may request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to Grievance Redressal — You have the right to raise a grievance about the processing of your personal data and receive a response within a reasonable time.
• Right to Nominate — You may nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Withdraw Consent — You may withdraw your consent to marketing communications at any time by unsubscribing from our emails or contacting us directly.
To exercise any of these rights, please contact us at hello@puffysingh.com. We will respond within [30 days] of receiving your request.
7. Data Retention
| Order & Transaction Records | Retained for [7 years] as required under GST and accounting regulations. |
| Customer Account Data | Retained for the duration of your account and [2 years] thereafter, unless you request earlier deletion. |
| Marketing Preferences | Retained until you unsubscribe or withdraw consent. |
| Technical / Analytics Data | Retained in aggregated, anonymised form for [26 months — standard for Google Analytics] or as configured. |
8. Data Security
• We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or loss.
• Our website uses [SSL/TLS encryption — confirm] to secure data transmitted between your browser and our servers.
• Payment data is handled exclusively by our payment gateway provider and is never stored on our servers.
• Access to personal data within our organisation is restricted to personnel who require it for their specific role.
⚠ While we take all reasonable measures, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
9. Cookies
We use cookies to improve website functionality and analyse usage. Please refer to our separate Cookie Policy for full details on the types of cookies we use, their purpose, and how to manage or disable them.
10. Children’s Privacy
Our website and products are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their personal data, please contact us immediately at hello@puffysingh.com and we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. We will post the revised policy on our website with an updated effective date. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.
12. Grievance Officer
In accordance with the DPDPA 2023 and the Information Technology Act, 2000, the details of our Grievance Officer are:
| Name | [Grievance Officer Name — to be designated by Vegxi Makerspace] |
| Designation | [Designation] |
| hello@puffysingh.com | |
| Address | Khamgaon, Dist. Daund – 412214, Maharashtra, India |
| Response Time | Within [30 days] of receiving a grievance. |
13. Contact Us
Puffy Singh · Vegxi Makerspace | Email: hello@puffysingh.com | Address: Khamgaon, Dist. Daund – 412214, Maharashtra, India
Puffy Singh · Vegxi Makerspace · Privacy Policy