Last updated: 5 November 2026
This Privacy Policy explains what personal data Vedrishi collects when you browse vedrishi.com, create an account, place an order, donate or contact us, why we collect it, who we share it with and what you can ask us to do with it. It covers this website only. It does not cover other websites you reach through links on our pages.
In short: we collect the details needed to sell and deliver books, run the site and answer your questions. We do not sell personal data. Payments are processed by PayU, so we never see or store your full card or bank details. You can ask us to show, correct or delete the data we hold about you by writing to rishidev.santosh@gmail.com.
Who we are
Vedrishi is an online bookseller based in Delhi, India. We sell Vedic and Hindu religious books in Hindi and Sanskrit to readers in India and abroad. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), Vedrishi is the data fiduciary for the personal data described in this policy, which means we decide why and how that data is used.
- Business name: Vedrishi (vedrishi.com)
- Address: Mukherjee Nagar, New Delhi 110009, India
- Phone: 09818704609
- Email: rishidev.santosh@gmail.com
Order confirmations, invoices and delivery updates are sent from info@vedrishi.com. An email from that address about an order you placed with us is genuine.
What we collect
We collect only what a book order, an account or a support conversation needs.
- Order and delivery details: your name, billing and shipping address, email address, phone number, the items you ordered and any delivery note you add at checkout.
- Account details: if you register at My Account, we store your name, email address, phone number and order history. Passwords are stored in a hashed (one-way) form and are never visible to us.
- Payment details: the payment method you chose, the amount and a transaction reference. Card numbers, UPI IDs, net-banking logins and CVVs are entered on PayU’s payment page. We do not receive or store them.
- Messages you send us: the content of enquiries sent through our contact form, by email, or through the WhatsApp chat button on the site, including any attachments.
- Reviews and comments: the display name you choose, your rating, the text you publish, and the IP address and browser string we record to filter spam.
- Donation details: if you donate through the site or by bank transfer or UPI, we receive the amount, the date, the payment reference and the name on the paying account. Donations made online are processed by PayU in the same way as orders.
- Technical data: IP address, browser and device type, the pages you visit, the page that referred you to us, and cookies (explained below).
We do not ask for identity documents, caste, health or biometric data. Our payment page is operated by PayU, so no card data passes through or is stored on this website.
Why we use your data
- To take payment, pack and deliver your order, and to send order, invoice and delivery updates.
- To handle returns, replacements and refunds under our Refund and Returns Policy.
- To answer questions about a book, an order or delivery status, including through Order Tracking.
- To keep the records that tax and accounting law requires us to keep.
- To detect fraud, abuse and automated spam on reviews, comments and forms.
- To understand which pages and books visitors look at, and whether our advertising works, so we can improve the site and our listings.
- To comply with a legal obligation or a lawful request from a court or authority.
Our basis for using your data
We rely on your consent and on the legitimate uses permitted by the DPDP Act. You give consent when you place an order, submit a form, publish a review, register an account or donate. Where an order is involved, we also need the data to perform the contract with you. If you do not give the delivery details, we cannot deliver the books.
You can withdraw consent at any time by writing to us. Withdrawal stops future processing; it does not undo processing that already happened, and it does not remove records we are legally required to keep.
Cookies and similar technologies
Cookies are small text files that a website stores in your browser. We use them to keep your cart working, to remember that you are signed in, to protect the site from abuse and to measure visits and advertising. Similar technologies, such as the browser’s local storage, may be used by the site’s scripts.
| Cookie | Purpose | Typical lifetime |
|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart | Remember what is in your cart | Session |
| wp_woocommerce_session_* | Match your cart and checkout session to you | 2 days |
| woocommerce_recently_viewed | Show products you viewed recently | Session |
| wordpress_test_cookie | Check that your browser accepts cookies | Session |
| wp-settings-*, wp-settings-time-* | Store admin and interface preferences when signed in | 1 year |
| comment_author_*, comment_author_email_*, comment_author_url_* | Pre-fill the comment form so you do not retype your details | About 1 year |
| wfwaf-authcookie-* | Security check for signed-in users (Wordfence) | 12 hours |
| _ga, _ga_* | Google Analytics 4: count visits and separate visitors | Up to 2 years |
| _gid | Google Analytics: distinguish visitors for a short period | 24 hours |
| _gcl_au | Google Ads: measure whether an ad click led to an order | 90 days |
We use Google Tag Manager (container GTM-NBMDMW3Q), which loads Google Analytics 4 (measurement ID G-BTVVWZDJ2S) and a Google Ads conversion tag (AW-672552852). Google Fonts are loaded from Google’s servers to display the site’s typefaces. These tools receive your IP address, the pages you open and events such as adding a book to the cart or completing an order, and Google may set the cookies listed above.
Our analytics and advertising tags are configured so that analytics storage and advertising storage are set to “denied” by default for visitors in the EEA, the United Kingdom and Switzerland. We do not use the Meta pixel, and we do not place advertising cookies from any other network.
You can block or delete cookies in your browser settings. If you block the WooCommerce cookies, the cart and checkout will not work. Clearing cookies signs you out and empties your cart.
Who we share data with
We do not sell personal data and we do not share it for others to advertise to you. We share it only with the providers that make the store work, and with authorities where the law requires it.
- Payments: PayU India processes card, UPI, net-banking and wallet payments for orders and online donations. PayU receives your name, contact details, amount and the payment details you enter on its page.
- Delivery: our postal and courier partners receive the name, delivery address and phone number needed to deliver the parcel and to contact you about it.
- Email delivery: our mail service sends order, invoice and account emails from cloud@vedrishi.com.
- Hosting and security: our hosting provider stores the website and its database. Wordfence provides a firewall and malware scanning, and LiteSpeed Cache stores page copies to serve the site quickly.
- Google: Google Tag Manager, Google Analytics, Google Ads and Google Fonts, as described above. Our book listings may also be submitted to Google Merchant Center so that titles appear in Google Shopping results.
- WhatsApp (Meta): when you tap the chat button, WhatsApp opens with a pre-filled message that includes the name of the page you were reading. From that point the conversation is handled in WhatsApp under WhatsApp’s own terms and privacy policy.
- Professional advisers and authorities: auditors, accountants or lawyers where needed, and courts, regulators or law-enforcement agencies where we are legally required to respond.
- Business transfer: if the business or its assets are sold or merged, customer data may be transferred as part of that transaction, on the same terms as this policy.
Payments and card security
All online payments are completed on PayU’s payment page, which is protected by the payment provider’s own encryption. We receive a confirmation that the payment succeeded or failed, the amount and a transaction reference. We never receive your full card number, CVV, UPI PIN or net-banking password, and none of these is stored on our website or in our database.
Where your data is kept
Our website and database run on servers managed by our hosting provider. Data you send through the site travels over HTTPS. Some service providers, including Google, may process data on servers outside India. When data is processed outside India we share only what the relevant service needs, and we do so in line with the DPDP Act and any restrictions the Indian government notifies.
How long we keep data
- Orders and invoices: kept for at least six years to meet GST and accounting record requirements, and for as long as needed to handle returns or warranty claims.
- Account data: kept while your account is open, and deleted or anonymised when you ask us to close it, unless we must keep a record by law.
- Reviews and comments: kept while they are published. If you ask us to delete one, we remove it from the site.
- Enquiries: kept for as long as needed to resolve your question and to keep a record of what was agreed.
- Analytics data: kept in Google Analytics for the retention period set in our Google Analytics property.
- Security logs: kept for a limited period to investigate attacks and fraud.
Your rights
Under the DPDP Act you can ask us to:
- confirm whether we hold your personal data and give you a summary of it;
- correct data that is wrong, incomplete or out of date;
- erase data that is no longer needed for the purpose it was collected for, unless we must keep it by law;
- withdraw a consent you gave earlier;
- nominate a person to exercise these rights for you if you die or become incapacitated.
To use any of these rights, email rishidev.santosh@gmail.com or call 09818704609 from the number or address you used with us, so that we can identify you. We reply as soon as possible and normally within 30 days. There is no charge for a reasonable request. If we cannot do what you ask, we will explain why.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India. You can also contact us first through the grievance details below.
Children
Our store is meant for adults. The DPDP Act treats anyone under 18 as a child, and we do not knowingly collect personal data from a child without verifiable consent from a parent or guardian. If you believe a child has given us personal data, write to us and we will delete it.
How we protect data
- The whole site runs over HTTPS, including checkout.
- Passwords are stored hashed; no one at Vedrishi can read them.
- Administrator access is limited to staff who need it, and the site is protected by a web application firewall and malware scanning.
- Backups are taken so that the store can be restored if something goes wrong.
- Card and bank credentials never reach our servers because payment is completed on PayU’s page.
No website can promise perfect security. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires.
Other websites we link to
Our pages link to publishers, social media pages, map services and payment pages that we do not control. Once you leave vedrishi.com, the privacy policy of the site you open applies. Please read it before sharing personal data.
Changes to this policy
We update this policy when the way we handle data changes, for example when a new payment method, delivery partner or analytics tool is added. The date at the top of this page shows the last update. If a change materially affects your rights, we will highlight it on this page and, where we hold your email address for an account, tell you by email.
Contact and grievance officer
Questions about this policy, or about the personal data we hold, go to our grievance officer:
- Grievance officer: Vedrishi
- Address: Mukherjee Nagar, New Delhi 110009, India
- Email: rishidev.santosh@gmail.com
- Phone: 09818704609
You can also read our Terms of Services, our Refund and Returns Policy, or use Order Tracking to follow a delivery.
