No sale of personal data
Purpose-led collection
Clear request channels
01
Who we are
VandoStore runs an Indian recommerce marketplace. This policy explains how we handle personal data when you use it.
When we say "VandoStore," "we," or "us," we mean the team operating vandostore.com — a platform where people buy and sell pre-loved goods.
For privacy purposes, VandoStore decides why and how personal data is processed on the service. Depending on the law that applies, this role may be called a data fiduciary or data controller. Specialised vendors such as hosting, payments, and email providers process limited data to deliver services to us.
This policy covers the website, related apps we may launch, and the accounts, listings, chats, and support that power the marketplace.
02
What we collect
We only collect what we need to run a trustworthy marketplace — plus a bit of technical data that keeps accounts safe.
Some information you give us directly. Other information is created when you use the product (for example, a login from a new device).
- Account details: first and last name, a verified Indian phone number used for passwordless OTP sign-in, optional contact email, city, profile photo, and similar profile fields.
- Verification data: status of identity checks, and documents or selfies you submit when verification is required.
- Marketplace activity: listings, photos, prices, listing credits, offers, messages, saved items, reports, and similar actions.
- Payments metadata: references and status for listing-credit purchases, processed with payment partners (we do not store full card numbers).
- Technical and security data: IP address, device/browser type, cookies, approximate location derived from IP when needed for fraud or locality features, and diagnostic logs.
- Support content: messages and attachments you send to our support or privacy channels.
03
Why we use it
Every use of your data should map to a clear reason. Here is how we think about it in plain language.
We do not use your personal data for reasons that would surprise a reasonable marketplace user. If a new purpose appears later, we will update this policy and, where the law requires, ask for consent.
- To provide the service: create your account, show listings, run chat and offers, process listing-credit purchases, and deliver features you request.
- To keep people safe: verify users where needed, detect fraud and spam, moderate content, investigate abuse, and enforce our Terms.
- To improve the product: understand which features work, fix bugs, and make search and discovery better — often with aggregated or de-identified signals.
- To communicate with you: send transactional notices such as receipts, security alerts, and policy updates, plus optional product updates where you have a choice to opt out.
- To meet legal obligations: tax, accounting, lawful requests, and regulatory requirements that apply to us.
05
Where data may go
We primarily serve users in India, but modern cloud infrastructure can involve processing outside your home country.
Some of our technology partners may store or process data in other regions. When that happens, we look for appropriate safeguards — contractual protections, reputable providers, and access limited to what is needed.
If you have questions about where a specific category of data is processed, write to privacy@vandostore.com and we will explain as clearly as we can.
06
How long we keep data
We keep personal data only as long as it serves a clear purpose — then we delete or de-identify it.
Exact periods can vary by legal requirement and risk. As a practical guide:
- Active account profile data: kept while your account is open, then for a short wind-down period after closure.
- Listings, credits, offers, and messages: kept to support disputes, safety investigations, accounting, and your own history — then reduced or removed when no longer needed.
- Verification and fraud records: may be kept longer when needed to prevent abuse or meet legal duties.
- Billing and tax records: retained for the periods required by applicable financial rules.
- Security and access logs: kept for a limited window so we can investigate incidents.
07
How we protect data
We take an ISO 27001-style approach: risk-based controls, least privilege, monitoring, and incident readiness — without pretending any system is unbreakable.
Practically, that means technical and organisational measures such as encryption in transit, access controls for staff and systems, separation of environments where appropriate, logging for security events, vendor diligence for processors, and processes for responding if something goes wrong.
You help too: do not share six-digit OTPs, keep your phone account secure, and tell us quickly if you suspect account misuse.
08
Your rights and choices
You should be able to understand, correct, and control personal data we hold about you.
Depending on where you live and which law applies (including GDPR-style rights and DPDP-aligned rights in India), you may be able to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of personal data we no longer need to keep.
- Receive a portable copy of data you provided, where technically feasible.
- Object to or restrict certain processing, including some marketing or profiling.
- Withdraw consent where processing was based on consent (this does not undo earlier lawful processing).
- Lodge a complaint with a supervisory or data protection authority.
10
Children
VandoStore is not directed at children.
You must meet the age requirements in our Terms to create an account. If you believe a child has given us personal data, contact privacy@vandostore.com and we will take appropriate steps.
11
Changes and how to reach us
If this policy changes in a meaningful way, we will update the date and, when appropriate, notify you in the product or by email.
Questions, concerns, or rights requests: privacy@vandostore.com.
General support: support@vandostore.com. Legal notices: legal@vandostore.com.
You can also visit our Contact page for channel guidance, or Status if the site itself seems down.
Need assistance?
Privacy requests
Want a copy of your data, a correction, or an account deletion? Email us from your account address with a short description of the request.