Privacy Policy

To fulfil an order: your name, delivery address, email address and phone number. The courier needs the address and the phone number; you need the email for the confirmation and the invoice. There is no version of shipping a parcel that works without these.

If you give us one: your GSTIN, which goes on the invoice so input credit works. Optional, and only used for that.

If you create an account: the same details, kept so you do not have to type them again, plus your order history so you can find an invoice or a test sheet later. An account is never required to buy anything.

Payment: handled by the payment provider. Card numbers reach them, not us. We are told whether a payment succeeded and, for a card, the last four digits so you can recognise it on the order.

Four, all of them functional. One remembers which cart is yours. One keeps you signed in if you have an account. One holds your language preference. One carries your details briefly between signing up and verifying your email, and is deleted the moment that finishes.

None of them track you, and there are no third-party cookies on this site — which is why there is no consent banner. There is nothing to consent to.

Three parties, each for one job:

• The courier gets your name, address and phone number, because that is how a parcel arrives.
• The payment provider gets what it needs to take the payment.
• Our accountant and the tax authorities get the invoice, because GST records are a legal requirement.

That is the complete list. Nobody else, for any reason, including money.

Invoices and order records for eight years, because GST law requires it. That one is not our choice.

Account details for as long as you have an account. Delete the account and they go, except the invoices above, which have to stay but are no longer linked to a login.

A cart you never checked out with expires after a week and is gone.

Worth stating plainly, because it is the whole point: a Valy machine does not report to us. It has no account with us, sends us no telemetry, and does not check in. We cannot see what is on it, how much space is used, or whether it is switched on.

If you buy a setup service, we access the machine for as long as the work takes, with credentials you create and revoke. If you ask us to migrate a photo library, we handle those files for the duration of that job and delete our copies when it is signed off.

A copy of everything we hold about you, a correction to any of it, or its deletion. Email privacy@valy.in and we will answer within thirty days — usually the same week, because there is not much to look through.

If you are unhappy with how we handled a request, you can escalate it under the Digital Personal Data Protection Act, 2023.

If this policy changes in a way that affects what we collect or who sees it, the date at the top changes and anyone with an account is emailed. Small clarifications get a new date and nothing more.

Warranty, returns and delivery are covered separately in the terms of sale.