Privacy notice

1. Who we are

  • NityaOnline is the controller for purchases on our UK website.
  • Contact: info@nityaonline.com; postal address as above. Please feel free to contact us, in case you have a query for us.  

2. What data we collect

  • Identity and contact (name, email, phone, billing/shipping address).
  • Order and payment metadata (we do not store full card numbers).
  • Account credentials and preferences.
  • Device/technical data (IP, useragent, approximate location, logs).
  • Marketing preferences.
  • Cookies/online identifiers (see Cookies Notice).
  • "We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement."

3. Purposes & lawful bases

  • Order fulfilment and support - performance of contract.
  • Payments, fraud, security - legitimate interests and/or legal obligation.
  • Direct marketing (email/SMS/WhatsApp) - consent (withdraw anytime).
  • Analytics/personalisation - consent via cookie banner.
  • Legal, accounting, tax - legal obligation.

4. Sharing

  • We share data with payment processors, delivery/warehouse partners, IT/hosting, customersupport tools, and advisers under processor agreements. We do not sell personal data.

5. International transfers

  • Where transfers occur outside the UK/EEA, we use safeguards (UK IDTA or EU SCCs + UK Addendum) and conduct risk assessments.

6. Retention

  • Orders/invoices: typically 6 years (tax/accounting).
  • Support: up to 3 years after resolution.
  • Marketing: until consent withdrawn or 24 months inactivity. Then deletion or anonymisation.

7. Your rights

  • Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact info@vexfo.co.uk. You can complain to the UK ICO.

8. Security

  • We apply encryption in transit, rolebased access, and audits. We assess suspected breaches and notify ICO/users where required