Last updated: April 15, 2026

Novera Global (referred to as "we," "us," or "our" in this Policy) is committed to protecting your privacy and ensuring that your personal data is handled responsibly, transparently, and in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the DPDP Rules, 2025, the Information Technology Act, 2000 and the rules made thereunder, and other applicable Indian laws.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we retain it, the security measures we apply, and the rights available to you as a Data Principal. By accessing or using our website www.noveraglobal.in, placing an order, or otherwise interacting with us, you confirm that you have read, understood, and agreed to this Policy.

1. Definitions

For the purpose of this Policy, the following terms have the meanings assigned to them:

  • "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
  • "Data Principal" means the individual to whom the Personal Data relates — i.e., you, the customer or website visitor.
  • "Data Fiduciary" means the entity that determines the purpose and means of processing Personal Data — i.e., Novera Global.
  • "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, sharing, or erasure.

2. Scope of This Policy

This Policy applies to Personal Data collected when you:

  • Visit our website or interact with our digital platforms
  • Create an account, place an order, or make a payment on our website
  • Subscribe to newsletters, promotional updates, or marketing communications
  • Contact our customer support via email, phone, WhatsApp, web form, or social media
  • Submit a warranty claim, complaint, replacement, or exchange request
  • Participate in surveys, contests, reviews, or feedback programs

This Policy does not apply to Personal Data collected by third-party platforms such as Amazon, Flipkart, or other marketplaces where you may purchase our products. Those platforms operate under their own privacy policies — please refer to Section 13 for more details.

3. Personal Data We Collect

We collect only the Personal Data necessary to fulfil your orders, provide our services, and meet our legal obligations. The categories of data we collect include:

Identity and Contact Data

  • Full name
  • Email address
  • Mobile and/or alternate phone number
  • Billing and shipping addresses
  • Pin code, city, state, and country

Transactional Data

  • Order details, products purchased, quantities, and amounts
  • Payment method used (we do not store full card numbers, CVV, or banking credentials — these are processed directly by our payment gateway partners)
  • Invoice and tax-related information, including GSTIN (if provided)

Account Data (if you create a customer account)

  • Account login credentials (passwords are stored in encrypted form)
  • Saved addresses, wishlist, order history, and preferences

Communication Data

  • Records of emails, calls, WhatsApp messages, chat transcripts, and complaints exchanged with our support team
  • Reviews, ratings, and feedback submitted by you

Technical and Usage Data

  • IP address, browser type and version, operating system, device identifiers
  • Pages visited, time spent, referral source, click patterns
  • Cookies and similar tracking technologies (see Section 9)

Marketing Preferences

  • Whether you have consented to receive promotional emails, SMS, WhatsApp, or push notifications
  • Your responses to past campaigns (open rates, clicks, conversions)

We do not intentionally collect sensitive personal information such as Aadhaar, PAN, biometric data, health records, or religious beliefs. If you voluntarily share such data with us (for example, in a complaint or open feedback field), we will treat it with additional care and use it only for the purpose you provided it for.

4. How We Collect Personal Data

We collect Personal Data through the following means:

  • Directly from you, when you fill in forms, create an account, place an order, or contact us
  • Automatically, through cookies, web analytics tools, and server logs when you use our website
  • From third parties, such as payment gateways, courier partners, and marketplaces, where they share order-related information with us to enable fulfilment

5. Purpose of Processing

We process your Personal Data only for specific, lawful, and disclosed purposes, including:

  • To process and fulfil your orders, including payment, packaging, dispatch, and delivery
  • To provide customer service, including responding to your queries, complaints, and replacement or warranty requests
  • To send transactional communications such as order confirmations, dispatch updates, delivery notifications, and invoices
  • To comply with legal, tax, accounting, and regulatory obligations under Indian law (including GST, IT Act, and Consumer Protection Act)
  • To prevent fraud, unauthorised transactions, abuse, or violations of our terms
  • To improve our website, products, services, and customer experience through analytics
  • To send promotional and marketing communications, only with your prior consent, which you may withdraw at any time
  • To maintain records required under applicable Indian law

We will not process your Personal Data for any purpose that is incompatible with those disclosed above without seeking your fresh consent.

6. Legal Basis for Processing

We process your Personal Data on one or more of the following legal grounds under the DPDP Act:

  • Your consent, freely given through clear affirmative action (such as ticking a checkbox or completing a transaction)
  • Performance of a contract, where processing is necessary to fulfil your order or provide a service you have requested
  • Compliance with legal obligations, such as taxation, regulatory reporting, or responding to lawful requests from government authorities
  • Legitimate uses as permitted under Section 7 of the DPDP Act, such as voluntary submission of data by you for a specified purpose

7. Sharing of Personal Data

We do not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your Personal Data only with the following categories of recipients, and only to the extent necessary:

  • Courier and Logistics Partners — Delhivery, Blue Dart, Shadowfax, DTDC, Ekart, India Post, and similar service providers — to deliver your order. They receive your name, address, and contact number only.
  • Payment Gateways — Razorpay, PayU, Cashfree, or similar PCI-DSS compliant providers — to process your payments. They handle your payment credentials directly under their own privacy and security policies; we do not store this information.
  • Technology and Analytics Providers — Shopify, Google Analytics, Meta (Facebook/Instagram), and similar tools — to operate the website, measure performance, and improve our services. These providers process data only on our instructions and under contractual data protection commitments.
  • Email, SMS, and WhatsApp Service Providers — to send order updates and marketing communications you have opted into.
  • Accounting, Taxation, and Legal Advisors — strictly for compliance and statutory requirements.
  • Government Authorities and Law Enforcement — where required by law, court order, or to protect our legal rights, safety, or property.

All third parties with access to your Personal Data are contractually bound to maintain confidentiality, use the data only for the disclosed purpose, and implement reasonable security safeguards.

8. Data Retention

We retain your Personal Data only as long as necessary to fulfil the purposes for which it was collected, or for the period required under applicable law, whichever is longer.

  • Order, transaction, and tax records — retained for at least 8 years as required under the GST Act and Income Tax Act
  • Account information — retained for as long as your account remains active. You may request deletion at any time, except where retention is legally required.
  • Customer support records — retained for up to 3 years for service quality, training, and dispute resolution purposes
  • Marketing communication preferences and history — retained until you withdraw consent or unsubscribe
  • Website analytics and cookies — retained for the periods specified in our Cookie Policy (Section 9)

Once Personal Data is no longer required, it is securely deleted, anonymised, or archived in compliance with the law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, analyse traffic, and personalise content. The categories of cookies we use include:

  • Strictly necessary cookies — required for the website to function (cart, login, checkout). These cannot be disabled.
  • Performance and analytics cookies — Google Analytics, Meta Pixel, and similar — to understand how visitors use our site
  • Marketing cookies — to deliver personalised advertisements on third-party platforms based on your browsing behaviour
  • Functional cookies — to remember your preferences, language, and saved items

On your first visit, we present a cookie consent banner allowing you to accept all, reject all, or customise your preferences. You can change your cookie preferences at any time by clearing your browser cookies or accessing the "Cookie Settings" link in our website footer.

10. Data Security

We implement reasonable technical and organisational security measures to protect your Personal Data from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using industry-standard TLS/SSL protocols
  • Encryption and hashing of sensitive data such as passwords
  • Role-based access controls and authentication for employees and service providers
  • Regular security reviews, vulnerability assessments, and access logging
  • Secure backup, disaster recovery, and breach detection systems
  • Contractual data protection commitments with all third-party processors

In the event of a personal data breach that is likely to result in harm, we will notify the Data Protection Board of India and the affected Data Principals without undue delay, in accordance with Section 8(6) of the DPDP Act and Rule 7 of the DPDP Rules, 2025.

However, please note that no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

11. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights in relation to your Personal Data:

  • Right to Access (Section 11) — You have the right to obtain a summary of the Personal Data we hold about you and the processing activities undertaken.
  • Right to Correction and Erasure (Section 12) — You may request correction of inaccurate or incomplete data, or erasure of data that is no longer needed for the purpose it was collected, subject to legal retention requirements.
  • Right to Grievance Redressal (Section 13) — You have the right to raise a grievance with us regarding any aspect of our handling of your Personal Data. We will respond within the timelines specified under the DPDP Rules. If unresolved within 90 days, you may escalate the matter to the Data Protection Board of India.
  • Right to Nominate (Section 14) — You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
  • Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal. Note that withdrawal may result in our inability to provide certain services (for example, you cannot place an order if you withdraw consent to collect your shipping address).

To exercise any of these rights, please write to our Grievance Officer at the contact details provided in Section 12. We may request information to verify your identity before processing your request.

12. Grievance Officer

In compliance with Rule 9 of the DPDP Rules, 2025 and Section 13 of the DPDP Act, 2023, we have designated a Grievance Officer to address any concerns or complaints regarding the processing of your Personal Data:

  • Designation: Grievance Officer, Novera Global
  • Email: contact@noveraglobal.in
  • Phone: +91 97252 05531
  • Address: Novera Global, Mevish Group Office No. 111, 1st Floor, Himalaya Plaza-1, Jambudiya (Bhayati), Wankaner (Morbi), Gujarat 363621
  • Working hours: Monday to Saturday, 10 AM to 7 PM IST

We will acknowledge your grievance within 3 working days and resolve it within 90 days of receipt, as required under applicable rules. If you are not satisfied with the resolution, you may approach the Data Protection Board of India as per the prescribed procedure.

13. Marketplace Purchases (Amazon, Flipkart, and Others)

When you purchase our products on Amazon, Flipkart, or any other third-party marketplace, your order, payment, and contact data are collected and processed by that platform under their own privacy policies. We receive only the limited information necessary to fulfil the order (typically your name, address, contact number, and order details).

For any privacy-related concerns regarding marketplace orders, please refer to the privacy policies of those platforms:

14. Children's Data

Our website and services are not directed at children below the age of 18. We do not knowingly collect Personal Data from individuals under 18 without verifiable parental or guardian consent. If you are a parent or guardian and believe your child has provided us with their Personal Data without your consent, please contact our Grievance Officer (Section 12), and we will delete such data promptly.

15. Cross-Border Data Transfer

Some of our service providers (such as Shopify, Google, or Meta) may process Personal Data outside India. We ensure that any cross-border transfer complies with the conditions specified by the Central Government under Section 16 of the DPDP Act and Rule 14 of the DPDP Rules, 2025, and is undertaken only with adequate contractual and security safeguards.

16. Third-Party Links

Our website may contain links to third-party websites, products, or services not operated by us. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review their privacy policies before sharing any Personal Data with them.

17. Updates to This Policy

We may revise this Privacy Policy from time to time to reflect changes in law, our practices, or our services. The updated version will be posted on this page along with the revised "Last updated" date. For material changes, we will notify registered users through email or a prominent notice on the website. The version in effect at the time of your interaction with us applies to that interaction.

18. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your Personal Data, please contact us:

  • Novera Global
  • Address: Mevish Group Office No. 111, 1st Floor, Himalaya Plaza-1, Jambudiya (Bhayati), Wankaner (Morbi), Gujarat 363621
  • Email: contact@noveraglobal.in
  • Phone: +91 97252 05531
  • Working hours: Monday to Saturday, 10 AM to 7 PM IST