Privacy Policy

Ravi Furnitures Privacy Policy

1. Who we are and what this policy covers

Ravi Furnitures is a sole proprietary concern operating an online furniture store and a dealer portal. In this policy, “we”, “us” and “our” mean Ravi Furnitures.

• GSTIN: 37AOBPY0245C1Z5.
• Principal business address: 10/42, Mallavelli Industrial Area, Krishna District, Vijayawada, Andhra Pradesh — 521111, India.
• Storefront: www.ravifurnitures.in, including access through ravifurnitures.in.
• Dealer portal: dealers.ravifurnitures.in, including its installed progressive web app (PWA).

This policy explains how we handle personal information through these services and associated ordering, delivery, payments, returns and support. It covers visitors, retail customers, dealer proprietors, authorised dealer staff, and people whose information a customer or dealer supplies to us—for example, a delivery recipient or a customer named in a dealer sale.

Information about a business may also be personal information where it identifies an individual, such as a proprietor or staff member. Our responsibilities depend on the processing we actually undertake. Where we determine its purposes and means, we act as the responsible business and, when applicable, the Data Fiduciary under Indian data-protection law.

This policy describes information handling. It does not replace purchase terms, dealer agreements, returns policies or statutory rights. Reading this policy or continuing to use a service does not by itself give consent to optional marketing or other processing that requires separate consent.

2. Information we collect and where it comes from

We collect information directly from you, through your use of the services, and from people or organisations involved in providing the requested service. Not every category applies to every person.

Please provide only information relevant to the transaction or request. Do not put passwords, OTPs, card security codes, UPI PINs, bank login credentials, Aadhaar documents or unrelated sensitive information into notes, chats or photographs. If information is submitted accidentally, contact us so we can assess and address it.

If you provide another person's information, tell them about the relevant use and this policy, and ensure you are permitted to provide it. This does not remove our own responsibilities for our use of that information. People whose details were supplied by someone else can contact us without opening an account.

Where you submit a review or other material for publication, its content and the display identity used for that feature may be visible to other visitors. Do not include private contact details or another person's personal information in public content. Contact us to request correction or removal; we cannot guarantee removal of copies independently made by other people or search services.

3. Why we use information

We use information relevant to each purpose to:

• Create and secure accounts, verify access, administer dealer membership and staff permissions, and maintain records of business actions.
• Process orders and dealer sales, issue invoices, manage stock and receipts, and arrange delivery or related services.
• Initiate and reconcile payments, allocate dealer payments, and handle refunds and payment disputes.
• Assess and handle returns, damage reports, warranty requests and support enquiries.
• Send service messages, including verification codes, transaction confirmations and requested support responses.
• Operate offline features and synchronise transactions when connectivity returns.
• Detect misuse, investigate errors, protect accounts and maintain service reliability.
• Measure use and improve the service through optional analytics where enabled and consented to.
• Send promotional communications where you have opted in.
• Maintain legally required records, meet applicable obligations and respond to valid legal requests.

We apply the Indian laws in force for the relevant processing, including applicable IT Act/SPDI, consumer-protection and data-protection requirements. Where consent is required, we obtain it for the relevant purpose. Any use without consent must have an applicable legal basis; a business interest alone does not create a general exemption.

As relevant provisions of the Digital Personal Data Protection Act, 2023 and its rules commence, we apply their requirements, including consent and the specific legitimate uses permitted by that Act. Legal retention is assessed separately from permission to use information for optional purposes. We do not treat this policy as blanket permission for unrelated new uses.

You may decline optional information or uses. If information is necessary for a particular transaction or secure account access, declining it may prevent us from providing that part of the service; contact support to discuss available alternatives.

4. Payments

Our services support payments through Cashfree and Razorpay, as made available in the relevant checkout. The provider presented for your payment processes the payment details entered in its payment interface.

To create and manage a payment, we may send that provider relevant information such as your name, phone/email, customer or dealer reference, order reference, amount and currency. We receive transaction and reconciliation information, including status, references, method and refund information. We do not use our forms to collect card security codes, UPI PINs or bank login credentials, or retain these as payment records.

For cash, bank transfer or another manually recorded payment, we retain the relevant business entry, amount, date, reference and information you provide for reconciliation. Such records remain personal information where they relate to an identifiable person.

Payment providers may have independent responsibilities for fraud prevention, legal compliance and their own services. Their notices apply to those activities; using them does not remove our responsibility for information we handle. Available payment methods, limits and refund entitlements are described in the applicable checkout or commercial terms.

5. Dealer portal, camera and offline storage

Authorised personnel of a dealer organisation may access records relevant to their permissions. Ravi Furnitures personnel may access relevant records to provide the service, reconcile accounts, assist with issues and meet legal obligations. Removing a staff member's access does not automatically remove historical business records identifying their actions.

Dealer administrators should keep staff access up to date and request removal when someone leaves or changes role. Access suspension, organisation membership changes and personal-data deletion are separate actions. An organisation's access to its transaction history does not entitle it to unrelated personal information about a former staff member.

The dealer app requests camera permission when needed for QR scanning. QR decoding takes place on the device; decoded identifiers are used in the relevant operation. Scanning is distinct from uploading a photograph: photographs deliberately submitted as return evidence are sent to our service. Avoid including unrelated faces, identity documents or private surroundings. You can manage camera permission in your browser or device settings; disabling it prevents camera-based scanning.

The PWA uses browser storage, including IndexedDB and local storage, to keep authentication state, preferences, device identifiers and operational data such as drafts and queued sales or goods receipts. Queued information can include customer details entered for that transaction. It is transmitted when synchronisation occurs.

Signing out does not automatically erase pending or failed offline transactions. These records remain available for resolution; they are not silently discarded merely because a connection failed. Server records and browser copies have separate lifecycles. Clearing site data or removing browser storage can permanently lose unsynchronised work.

Use a trusted device, protect its screen lock and browser profile, and resolve or safely synchronise pending work before handing over or clearing a device. Contact support for assistance if a device is lost, shared, or needs to be cleared. Account deletion requests should identify any devices with offline data so that we can explain the additional steps needed; a server-side action cannot guarantee removal of a disconnected browser copy.

6. Cookies, local preferences and analytics

Essential browser storage supports functions such as login, shopping carts, checkout, security and offline operation. Preference storage may remember language or other choices. You can restrict or clear storage through your browser, but doing so may interrupt these functions or remove unsynchronised work.

On the storefront, optional analytics choices are available through the cookie banner and the footer's Manage cookies control. Where Google Analytics is enabled and you opt in, it can receive usage events, page/device information and identifiers, including purchase transaction references and values. These event-level records should not be understood as exclusively anonymous aggregate statistics.

You can reject optional cookies or change your choice later. Browser settings provide an additional way to restrict or remove cookies. Preferences may need to be set separately for different browsers, devices or services. The dealer app's necessary offline storage is separate from the storefront analytics choice.

Any optional advertising or additional tracking introduced to the service must be described and have the consent controls required by applicable law. A cookie preference does not constitute agreement to unrelated email or SMS marketing.

7. Sharing, service providers and processing locations

We share information relevant to the service with these categories of recipients:

• Delivery, installation and reverse-pickup providers: recipient contact/address details and relevant delivery or service information.
• Payment providers: the information described in section 4.
• Cloud and communications providers, including Microsoft Azure and Azure Communication Services where used: hosting, storage, verification and service-message information.
• Google, where its sign-in or optional analytics services are used: the information relevant to those functions.
• Technical monitoring providers, including Sentry where enabled: diagnostic and error information needed to investigate service failures.
• AI service providers, including Anthropic if the AI-assisted returns feature is enabled: the limited service context described in section 8.
• Authorised dealer personnel: information within their organisation's permitted business activities.
• Professional advisers and competent authorities: information needed for professional services or valid legal obligations and requests.

Not every listed provider receives information about every user. Where a provider processes information on our behalf, we require appropriate purpose, confidentiality and security protections. Some providers and dealers act independently for particular activities; their own notices govern those activities. We remain responsible for our own processing and for responsibilities imposed on us for processing carried out on our behalf.

We do not sell personal information. Disclosure for a described service does not authorise the recipient to use it for unrelated purposes on our behalf.

Cloud hosting and other processing are separate activities. Providers may process information in India or other countries depending on the service and configuration. We do not represent all processing as exclusively India-resident. Transfers must comply with applicable Indian requirements, including applicable restrictions and safeguards. Contact us for information about the providers and processing relevant to your data.

8. AI-assisted returns and support

If an AI-assisted returns feature is made available, it may process the messages and evidence you submit and relevant order, product, policy and return-history information to help assess or handle your request. This may involve an external AI provider. Please avoid entering unrelated personal information.

AI output can be inaccurate. Depending on the feature and its enabled configuration, it may assist staff or support an automated action subject to service controls. You can request staff review of a return or support outcome through the contact details below. An automated recommendation does not remove statutory consumer rights.

Use of information for an AI service must remain within the described purpose and applicable legal requirements. This policy does not grant permission to use your information for unrelated model training. The specific feature notice should explain any material additional processing before you submit information to it.

9. Marketing choices

We send promotional communications where you have opted in. You can unsubscribe using a marketing email's link, use an opt-out method expressly provided in a message, or contact support or the grievance contact below. You do not need to close your account to stop marketing.

We stop the relevant promotional use after processing your withdrawal. We may keep a limited suppression record to respect your choice and prevent accidental re-enrolment, and records needed to demonstrate how the request was handled. Necessary service communications, such as verification, payment and delivery messages, are separate from promotions.

Applicable telecom and messaging requirements also apply to promotional SMS and similar communications. Consent to shop or use the dealer portal is not automatic consent to promotional messages.

10. Retention and deletion

Retention depends on the category, purpose and applicable law. We do not apply a single statutory eight-year rule to all information.

When retention is no longer necessary or legally required, information is to be deleted or rendered non-identifying. Deletion requests require checking associated records and legal obligations, not just the visible account profile. If certain information must be retained, we explain the relevant reason and restrict its use accordingly.

Backup copies may remain until the applicable backup cycle expires; they must remain protected and subject to applicable deletion and restoration procedures. Contact us for the retention approach relevant to your request. The presence of a record in a backup does not create permission for unrelated use.

11. Security and incidents

Safeguards include secure transport, authentication controls, password hashing where passwords are used, and access restrictions appropriate to the service. No internet service or device is completely secure. Keep login credentials, OTPs and devices protected; contact us promptly if you suspect unauthorised access.

We assess reported incidents and take appropriate containment and remedial action. We provide notifications to affected individuals and authorities when required by the laws in force, including applicable CERT-In and data-protection obligations. This statement does not imply that every incident has the same reporting threshold or deadline.

12. Children and information submitted by mistake

Account registration and purchasing/dealer services are intended for adults aged 18 or over. They are not intended as accounts for children. Adults purchasing furniture for children should use their own contact details rather than submit unnecessary information about a child.

If you believe a child has supplied personal information or someone has submitted information without authority, contact us. We will assess the information, stop inappropriate processing and arrange deletion or other action required by law. Any information that must lawfully be preserved is restricted to that purpose.

Where children's information is processed, applicable safeguards and consent requirements must be met. We do not treat an adults-only statement as proof of a user's age, or as a substitute for legally required protection. This policy does not claim that every visitor is age-verified before browsing.

13. Requests, withdrawal and complaints

You may contact us to ask about your information, request correction or deletion, withdraw consent for a relevant use, or raise a complaint. This includes people whose details a dealer or another customer supplied. Available statutory rights depend on the law in force and applicable conditions; nothing here limits them.

As the relevant DPDP provisions become applicable, rights include access to the prescribed information about processing and sharing, correction/completion/updating, erasure, consent withdrawal, grievance redressal and nomination in the circumstances specified by law. These rights are subject to their statutory conditions and exceptions.

Send requests to grievance@ravifurnitures.in or support@ravifurnitures.in. Include the service involved, the contact details used and enough information to identify your request. Do not send passwords, OTPs or unnecessary identity documents. We may ask for proportionate verification or evidence that you are authorised to act for someone else. You do not need to create a new account to contact us.

A parent, lawful guardian, authorised representative or nominee can contact us in that capacity. We assess the authority and applicable legal conditions, including requests concerning a deceased or incapacitated individual. A shared phone number or a dealer's access to a business account does not by itself authorise disclosure of another individual's private information.

Withdrawal does not retrospectively invalidate lawful prior processing. It may prevent a service that needs the relevant information, but does not itself end another legal retention obligation. We assess requests across relevant systems and explain any lawful limit on what can be done. We protect other people's information when responding. Ordinary requests are free of charge.

Privacy and consumer grievance contact: Mr. Jagadish Yalavarthi, Ravi Furnitures.

• Email: grievance@ravifurnitures.in.
• Customer care: support@ravifurnitures.in.
• Phone: +91 78932 47773.
• Postal address: the confirmed principal business address in section 1.
• Contact hours: Monday–Saturday, 10:00 AM–7:00 PM IST.

We acknowledge grievances within 48 hours and address them within one month. Applicable statutory deadlines prevail; contact hours do not extend them. We explain the outcome and any applicable reason a requested action cannot be completed. Rights requests are handled within the applicable statutory period.

You retain access to competent consumer forums and other authorities under applicable law. Where the relevant DPDP complaint provisions are in force and applicable, you may use the Data Protection Board process after following the statutory grievance procedure. Contacting us does not require you to waive any remedy or accept an exclusive court that overrides statutory rights.

14. Changes and related information

We update this policy when relevant practices or requirements change and show the effective date. Material changes will be brought to your attention through appropriate means. Where a new or expanded purpose requires consent, it must be obtained before that processing begins; a revised policy or continued use alone is not a substitute.

For commercial information, see Terms and Conditions, Returns Policy and Contact Us. Dealer commercial arrangements are governed by the applicable dealer terms; a shared privacy policy does not make retail refund terms apply automatically to dealer ledger payments.

For help understanding this policy or communicating a privacy request, contact us using section 13. Statutory language and notice requirements apply when in force; the languages available in an app do not by themselves establish availability of this entire policy in those languages.