Privacy Policy & Data Notice

VPSA YOGA ("we", "our", or "the Company") acts as the Data Fiduciary regarding the personal data collected through this website (vpsayoga.com), quotation forms, WhatsApp channels, and direct wholesale inquiries. We are committed to processing your personal data lawfully, transparently, and solely for specified business purposes.

2. Personal Data We Collect

When you submit a Request for Quotation (RFQ) or contact our logistics desk, we collect only necessary and relevant information:

• Full Name: To identify and address our business customer.
• Business Email Address & Mobile Number: For quotation dispatch, logistics updates, and order confirmations.
• Company / Trade Name & Delivery Destination: To calculate reefer transport route logistics and wholesale pricing.
• Order Requirements & Quantities: To match inventory from our direct farmer clusters all over South India.

3. Purpose Specification & Lawful Grounds for Processing

We process personal data solely on the lawful basis of your explicit consent and legitimate business fulfillment:

• Generating custom commercial wholesale quotations and volume discount rates.
• Scheduling temperature-controlled (13-14°C) cold-chain transit and dispatch notifications.
• Maintaining commercial accounting records and mandatory compliance.
• No Data Sale: We strictly do not sell, rent, or trade your personal data with third-party advertisers or data brokers.

4. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, you have explicit statutory rights concerning your personal data:

• Right to Access: You may request a summary of the personal data we hold about your business.
• Right to Correction & Updating: You may request correction of any inaccurate or incomplete details.
• Right to Erasure: You may request permanent deletion of your inquiry record once commercial transactions conclude.
• Right to Withdraw Consent: You may withdraw your consent for future trade communications at any time.

5. Security Safeguards & Data Retention

We enforce technical and operational safeguards including TLS encryption, server-side parameter sanitization, rate-limiting, and restricted access controls. Inactive inquiry records are safely purged after 12 months unless required for legal accounting records.

6. Third-Party Processors & Infrastructure Services

To ensure reliable infrastructure, security compliance, and international accessibility for global importers and regional wholesale buyers, our systems integrate select third-party services:

• Google Translate (Client-Side Multilingual Localization): Real-time multilingual localization is dynamically lazy-loaded solely upon explicit user opt-in (when a visitor opens the language selector or chooses a non-English dialect) via Google Translate (translate.google.com). The script is injected with a strict referrerpolicy="no-referrer" attribute and is governed by Content Security Policy allowlists. To prevent supply-chain exposure of confidential wholesale data, Google Translate is strictly excluded from all administrative portals (/admin-dashboard, /admin-login) and internal enquiry databases. Translation operates strictly client-side on public UI text; no submitted RFQ forms, customer identifiers, or trade communications are transmitted to or stored by the translation provider.
• Google Fonts & CDN Assets: Typography assets are delivered via encrypted HTTPS CDN connections strictly for localized font rendering.
• Supabase Cloud Database: Enterprise PostgreSQL cloud database hosted in SOC2 / ISO-27001 compliant cloud data centers with end-to-end TLS encryption in transit and AES-256 at rest, protected by Row Level Security (RLS) and server-only service role credentials for inquiries and audit logs.
• WhatsApp / Meta Communications: Optional direct trade communications initiated via explicit user click to our verified Trade Desk (+91 9003755701). We do not automatically pre-fill personal data or form responses into URLs; direct chats are encrypted end-to-end under WhatsApp's data terms.

7. Grievance Redressal & Data Protection Officer Contact

If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact our designated Grievance Officer: