Last updated: 4 November 2026
This policy explains how Shopavix (shopavix.com) handles your personal data. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. Shopavix is the Data Fiduciary for the data described here.
1. What we collect
- Account details: name, email address, mobile number and password (stored only in encrypted, one-way form).
- Order details: delivery addresses, the items you buy, payment status and order history. Card, UPI and bank details are entered on Razorpay’s secure page and never reach our servers.
- Eye power and prescriptions: when you buy spectacles with lenses, the power you enter and any prescription photo or PDF you upload.
- Homestay enquiries: your dates, number of guests, phone number and message to the host.
- Sellers and hosts: business details, PAN, GSTIN, bank account and identity or address documents used for verification and payouts.
- Technical data: IP address, browser and device type, and cookies needed to keep you signed in and remember your cart.
2. Why we use it
Only for clear purposes you can expect: to create and secure your account, process and deliver orders, make lenses to your power, pass your enquiry to the host you chose, send order and enquiry updates, handle returns and refunds, pay sellers and hosts, prevent fraud, meet legal and tax duties, and improve the website. We do not sell your personal data, and we do not send marketing messages unless you agree to them.
3. Your eye prescription
Your prescription is used only to make and check your lenses. It is stored in a private area of our server — never in a public folder — and can be opened only by you, the seller who fits your lenses, and our order team. It is never used for advertising.
4. Who we share it with
- The seller of each item you buy (your name, phone, delivery address and, for lenses, your power or prescription).
- The host you send an enquiry to.
- Courier partners (for example through Shiprocket) to deliver your parcels.
- Razorpay to process online payments, and our email and hosting providers who process data for us under contract.
- Government or law-enforcement authorities when the law requires it.
5. How long we keep it
We keep account data while your account is open. Order and invoice records are kept for eight years because tax law requires it. Prescriptions are kept with the order so that the seller can handle a return or a remake, and are deleted when your account is deleted, unless the law requires us to keep them longer.
6. Your rights
Under the DPDP Act you can: ask what personal data we hold about you; correct or update it (most of it directly from your account); ask us to erase it; withdraw consent you have given; and nominate another person to exercise your rights if you are unable to. Write to us at the address below — we reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
7. Security
The website runs over HTTPS. Passwords are hashed, payment and secret settings are encrypted, identity documents and prescriptions are kept in private storage, and staff only see the data their role needs. If a personal data breach ever affects you, we will tell you and the Data Protection Board as the law requires.
8. Cookies
We use essential cookies to keep you signed in, protect forms and remember your cart. We do not use advertising cookies.
9. Children
Shopavix is not meant for children under 18. We do not knowingly collect a child’s data without the consent of a parent or guardian.
10. Contact — Grievance Officer
Shopavix
Birla Complex, First Floor, Main Road, Murnad, Madikeri, Coorg District, Karnataka - 571252
Email: hello@shopavix.com · Phone / WhatsApp: 9113034587