GROVIDEX PRIVACY POLICY
Last Updated: 6 October 2026
Welcome to Grovidex (https://grovidex.com ). This Privacy Policy explains how GROVIDEX PRIVATE LIMITED (“Company”, “We”, “Us”, or “Our”), a company incorporated under the Companies Act, 2013 bearing CIN: U26400BR2026PTC081334, collects, uses, stores, shares, and protects personal information when users access our website, use the Grovidex Android app (com.grovidex.app), or purchase products through our platform.
By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.
INFORMATION WE COLLECT
We may collect information directly from users when they create an account, place orders, contact customer support, subscribe to updates, or interact with the Website.
A. Personal Information
- Full name
- Delivery address
- Billing address
- Email address
- Mobile phone number
- Account credentials and preferences
B. Sensitive Personal Data or Information (SPDI)
Payment transactions are processed through authorized third-party payment service providers. Grovidex does not directly collect, store, or process customers’ debit card numbers, credit card numbers, CVV details, banking passwords, UPI PINs, or other payment authentication information on its own servers.
C. Automatically Collected Technical Information
We may automatically collect:
- IP address
- Browser type
- Device information
- Operating system
- Website usage activity
- Cookies and session-related data
- Pages viewed and interactions with the Website
- Identifiers stored in cookies and similar technologies, as described in “Cookies, Analytics, Advertising and Marketing Technologies” below
HOW WE USE YOUR INFORMATION
We may use collected information for the following purposes:
- To process and deliver book orders
- To provide customer support and order assistance
- To send order confirmations, invoices, shipment updates, and notifications
- To process refunds, cancellations, and replacements
- To invite you to review products you have purchased
- To improve website functionality, performance, and user experience
- To prevent fraudulent transactions or misuse of the Website
- To comply with applicable legal or regulatory obligations
- To send promotional communications where permitted under applicable law
- To send marketing emails to customers who have expressly opted in to receive them
- To measure and improve the Website, where you allow Analytics
- To measure advertising and marketing activity, and to provide marketing-automation and web-push features, where you allow Advertising
SHARING AND DISCLOSURE OF INFORMATION
Grovidex does not sell or rent personal information. Grovidex may share information with service providers and technology providers as described in this Privacy Policy.
Information may be shared with the following categories of recipients:
- Courier and logistics partners for order delivery
- Payment gateways and payment processors for secure transaction handling
- Technology and operational service providers assisting website operations
- Providers of the analytics, advertising, marketing-automation and web-push technologies described in “Cookies, Analytics, Advertising and Marketing Technologies”, to the extent described in that section
- Our email service providers (Brevo and Google), for sending emails
- Government authorities, regulators, courts, or law enforcement agencies where disclosure is required under applicable law
COOKIES, ANALYTICS, ADVERTISING AND MARKETING TECHNOLOGIES
The Website uses cookies and similar technologies, such as browser local storage and scripts provided by third-party services. Some are needed for the Website to work. Some are optional and are controlled by Privacy choices. Google tags may also load without optional consent and use Google’s consent mode, as described in section 6. Some first-party technologies are currently used without a Privacy choices setting; these are described separately below.
1. Essential technologies
Essential technologies keep the Website working and secure, for example the shopping cart, checkout, login, payment, security, and remembering your Privacy choices. They are always on and cannot be switched off through Privacy choices.
2. Other first-party technologies currently used without a Privacy choices setting
The technologies below are currently set by components of the Website whether or not you allow Analytics or Advertising. They are not controlled by Privacy choices. We list them so that you know about them.
- WooCommerce order attribution records how a visitor arrived at the Website, so that orders can be attributed to their source.
- Recently viewed products. Lists of products you recently viewed are remembered so they can be shown to you.
- Homepage personalisation. A short-lived first-party state used by our homepage personalisation feature.
- PixelYourSite, our marketing-measurement plugin, sets first-party cookies that record landing page, traffic source and visit information. The
PHPSESSIDsession cookie is also associated with PixelYourSite. - Sign-in cookie set by our Brevo integration. When a customer signs in, our Brevo WooCommerce integration sets a cookie named
email_id. It contains the account email address and expires after one day. It is not set for administrator accounts. The cart-tracking feature of that integration, which is designed to read this cookie, is currently switched off.
3. Analytics (optional)
If you allow Analytics, Google measurement technologies (Google Analytics) may be used to understand how visitors use the Website, so that we can measure and improve it.
4. Advertising (optional)
If you allow Advertising, the following technologies may be used:
- Google Ads: advertising measurement, including conversion and remarketing measurement.
- Meta (Facebook): advertising measurement through the Meta Pixel, which the Website provides through the PixelYourSite plugin.
- Brevo: marketing automation and page tracking.
- WonderPush: web-push notifications.
If you are signed in and allow Advertising, your account email address may be provided to Brevo and WonderPush for the relevant marketing, tracking or notification functionality.
Web-push notifications are shown only if you also give permission in your browser’s own notification prompt. Allowing Advertising does not give that permission by itself and does not subscribe you to web-push notifications. You can withdraw notification permission in your browser settings at any time.
5. Marketing emails
Grovidex sends marketing emails, such as offers, new arrivals, book recommendations and cart reminders, only to customers who have expressly opted in to Grovidex marketing emails. Some of these emails are sent through Brevo and others through our Google (Gmail) email service. You can stop them at any time using the link in each email or through your email preferences.
Your Privacy choices on the Website do not change your email marketing preferences, and your email marketing preferences do not change your Privacy choices. Allowing Advertising does not subscribe you to marketing emails.
6. When optional choices are off
Unless you allow Advertising, your browser does not connect to Meta, Brevo or WonderPush from the Website. Some scripts belonging to the related WordPress plugins (PixelYourSite, Facebook for WooCommerce and Brevo) are still served from our own website; while Advertising is off, they do not contact those providers.
Google tags load on the Website whatever you choose, and they use Google’s consent mode. While Analytics is switched off, Google tags do not set Google Analytics cookies, and while Advertising is switched off, they do not set Google advertising cookies. In either case, they may still send limited signals without those cookies.
7. Your Privacy choices
- On your first visit, a Privacy choices panel lets you allow or reject Analytics and Advertising. You can change your choices at any time using the Privacy choices link on the Website.
- Essential functions of the Website remain available whatever you choose.
- Your choices are stored in a cookie in your browser for the current browser session only. They are not stored on our servers. When your browser session ends, you will be asked again.
- If you withdraw a choice, the related optional technologies stop on the pages you visit afterwards.
- Withdrawing a choice does not delete cookies or local-storage entries already placed in your browser. You can delete them through your browser settings.
- Changing your Privacy choices does not erase information that was already sent to a provider before the change. That information is handled under the provider’s own terms and privacy policy (see “Third-party privacy policies” below).
- Your email marketing preferences are separate from your Privacy choices (see “Marketing emails” above).
- You can also block or delete cookies through your browser settings. Some Website features may not work without essential cookies.
8. Cookies and similar technologies observed on the Website
The table lists the main cookies and similar technologies observed in our tests. Durations are as observed on 6 October 2026 (or as set in code where stated) and may change when the Website’s plugins or providers update their implementation. Additional cookies not listed here may be set when you add items to your cart or sign in to your account.
| Name | Set by | Category | Observed duration |
|---|---|---|---|
gvx_consent_v1 | Grovidex | Essential: remembers your Privacy choices | Browser session |
gvx_consent_dismissed_v1 | Grovidex | Essential: remembers that you closed the Privacy choices panel for the current browser session | Browser session (set in code) |
PHPSESSID | PixelYourSite (PHP session) | First-party, no Privacy choices setting | Browser session |
sbjs_* | WooCommerce order attribution | First-party, no Privacy choices setting | Session; one observed entry expired the same day |
woocommerce_recently_viewed | WooCommerce | First-party, no Privacy choices setting | Browser session |
wc_cart_hash_* (browser local storage and session storage) | WooCommerce | First-party WooCommerce cart-related storage, no Privacy choices setting | Observed during testing; duration not established |
wc_fragments_* (browser session storage) | WooCommerce | First-party WooCommerce cart-related storage, no Privacy choices setting | Observed during testing; duration not established |
mrvp_recently_viewed | Recently-viewed products plugin | First-party, no Privacy choices setting | About 1 day |
gvx_intent_state | Grovidex | First-party, no Privacy choices setting | 15 minutes (set in code); observed expiring the same day |
pys_first_visit, pysTrafficSource, pys_landing_page, last_pysTrafficSource, last_pys_landing_page | PixelYourSite | First-party, no Privacy choices setting | About 7 days |
pys_session_limit | PixelYourSite | First-party, no Privacy choices setting | Expired the same day |
pys_start_session | PixelYourSite | First-party, no Privacy choices setting | Browser session |
pbid | PixelYourSite | First-party, no Privacy choices setting | About 6 months |
pys_cd | PixelYourSite | First-party, no Privacy choices setting | About 1 year |
email_id | Brevo WooCommerce integration | First-party, set on customer sign-in, no Privacy choices setting | 1 day (set in code) |
_ga, _ga_* | Google Analytics | Analytics: only if you allow Analytics | About 13 months |
_gcl_au | Google Ads | Advertising: only if you allow Advertising | About 90 days |
_gcl_ls (browser local storage) | Google Ads | Advertising: only if you allow Advertising | Observed during testing; duration not established |
gvx_click_session_v1 (browser session storage, not a cookie) | Grovidex | Advertising: holds Google Ads click identifiers only if you allow Advertising | Session storage |
IDE (doubleclick.net) | Google advertising | Advertising: only if you allow Advertising | About 13 months |
test_cookie (doubleclick.net) | Google advertising | Advertising: only if you allow Advertising | Expired the same day |
_fbp | Meta, via PixelYourSite | Advertising: only if you allow Advertising | About 90 days |
fr (facebook.com) | Meta | Advertising: only if you allow Advertising | About 90 days |
sib_cuid | Brevo | Advertising: only if you allow Advertising | About 6 months |
| WonderPush local-storage entries | WonderPush | Advertising: only if you allow Advertising | Until cleared (browser local storage) |
9. Third-party privacy policies
Information received by the providers named in this section is handled under their own terms and privacy policies:
- Google: https://policies.google.com/privacy
- Meta: https://www.facebook.com/privacy/policy/
- Brevo: https://www.brevo.com/legal/privacypolicy/
- WonderPush: https://www.wonderpush.com/policies/privacy/
DATA SECURITY
Grovidex implements reasonable administrative, technical, and operational safeguards intended to protect personal information from unauthorized access, misuse, disclosure, loss, or alteration.
The Website may use SSL (Secure Socket Layer) encryption for secure data transmission.
Access to customer information may be restricted to authorized personnel and service providers only.
However, no online system can guarantee absolute security, and users acknowledge inherent internet-related risks.
DATA RETENTION
Personal information may be retained only for as long as reasonably necessary for:
- Order fulfillment
- Customer support
- Legal compliance
- Taxation and accounting obligations
- Fraud prevention and dispute resolution
Thereafter, data may be securely deleted, anonymized, or archived in accordance with applicable laws and operational requirements.
Cookies and similar technologies remain in your browser for the periods described in “Cookies, Analytics, Advertising and Marketing Technologies” unless you delete them. Information received by the third-party providers named in this Privacy Policy is retained under their own terms and privacy policies.
INTERNATIONAL PROCESSING
Some service providers used by Grovidex may process information in jurisdictions outside India. Such processing is subject to the providers’ applicable terms and privacy policies.
USER RIGHTS
Subject to applicable Indian laws, users may have the right to:
- Access or review their personal information
- Request correction of inaccurate information
- Request deletion of personal information where legally permissible
- Withdraw consent for future communications where applicable
- Change or withdraw your choices for optional analytics and advertising technologies at any time using Privacy choices
- Unsubscribe from marketing emails using the link in each marketing email or through your email preferences
- Request account-related assistance
Withdrawal of consent may affect the ability to access certain services or complete transactions on the Website.
CHILDREN’S PRIVACY
The Website is intended for general audiences. Persons below 18 years of age should access or use the Website only under the supervision and consent of a parent or legal guardian.
Grovidex does not knowingly collect personal information from children in violation of applicable laws. If a parent or guardian believes that a child has provided personal information through the Website without appropriate consent, they may contact us using the details provided in this Privacy Policy. Upon verification, Grovidex shall take reasonable steps to delete such information, subject to applicable legal, regulatory, and record-keeping obligations.
THIRD-PARTY LINKS
The Website may contain links to third-party websites or services. Grovidex is not responsible for the privacy practices, security standards, or content of external websites.
Users are advised to review the privacy policies of third-party platforms independently.
POLICY UPDATES
Grovidex reserves the right to modify, amend, or update this Privacy Policy at any time to reflect:
- Operational changes
- Legal or regulatory updates
- Technological developments
- Changes in Indian data protection requirements
Updated versions shall become effective immediately upon publication on the Website.
PRIVACY QUESTIONS, REQUESTS AND COMPLAINTS
For privacy questions or requests, contact us at contact@grovidex.com or WhatsApp +91 9155666493.
Privacy contact: Grovidex Private Limited
Email Address: contact@grovidex.com
WhatsApp: +91 9155666493 (Mon–Sat, 9:00 AM – 5:00 PM IST)
Corporate Address:
GROVIDEX PRIVATE LIMITED
Harpur Parsa
Chapra, Saran – 841219
Bihar, India
Contact us for the status of a privacy request. Applicable statutory rights and deadlines are not limited by this policy.
GOVERNING LAW AND JURISDICTION
This Privacy Policy shall be governed by and interpreted in accordance with the laws of India. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of competent courts located in Saran, Bihar, India.
GROVIDEX ANDROID APP AND SERVICE PROVIDERS
Google sign-in supplies identity information, including your email, to link your sign-in to a Grovidex customer account. Grovidex keeps account links and sign-in session records. Saved addresses and order details support delivery, account access and customer support. Security and operational records help protect the service.
Payments use Razorpay. Grovidex keeps order amounts, payment references and payment status; payment authentication is handled through the payment provider. Separately, a cash-on-delivery refund may require you to supply a UPI ID or bank destination, including account holder name, account number and IFSC. The app API stores these refund destination details encrypted with the relevant order and keeps masked references. These are different from a UPI PIN, CVV or banking password. Do not send payment authentication secrets to support.
Shiprocket and courier services support shipping and tracking. Order and delivery information needed to fulfil an order may be provided to them. Refund handling may also involve the applicable payout or logistics provider. Provider-held records are subject to that provider’s responsibilities and retention requirements.
The app supports Firebase Cloud Messaging device registration tokens for notifications. Notification preferences distinguish order-related updates from promotional messages. Promotional push delivery requires the recorded promotional preference; device notification permissions also apply. App notifications (Firebase Cloud Messaging) are separate from the website web-push notifications (WonderPush) described in “Cookies, Analytics, Advertising and Marketing Technologies”. Support communications are processed to handle requests and disputes. Website, hosting, payment, identity and delivery providers may process technical or transaction data to operate and protect their services.
Request account deletion through Delete Account. Request acceptance and sign-in revocation do not mean that all records have already been erased. Account, address, device and support data require the applicable deletion or anonymisation workflow. Orders, invoices and transaction records may need to be retained for tax, disputes, fraud prevention or other applicable obligations. Refund destination details require a separate review of their continuing purpose; completing a refund does not itself establish that those details have been removed. Contact us about a request’s status or retained records.
Provider information: Razorpay privacy policy, Shiprocket privacy policy, and Google privacy policy.
Privacy requests are monitored by Sanjeev Kumar, Grovidex Privacy Operations Owner, through contact@grovidex.com. This is an internal operational role. App-controlled actions, legally retained records, provider-held data and backup copies are reviewed separately. We report provider deletion or backup expiry as completed only when supporting evidence is available. Until then, we explain the outstanding copies and restrictions in your request status; restricting account access does not itself erase those copies.