PRIVACY NOTICE
Your data, in plain language.
About this notice
This is a draft notice for the Polvio account preview, updated 15 November 2026. The legal business identity, privacy contact and retention schedule must be confirmed before public account registration opens. Registration is currently paused.
What an account uses
When registration opens, the account system is designed to use your email address, password through Supabase Authentication, display name, age declaration, account-terms version and saved-cart selections. You can also save a contact phone number, an optional date of birth and multiple delivery addresses including recipient names, delivery phone numbers and PIN codes. We do not collect identity documents or payment cards here. Saved phone numbers are not SMS verified. Google sign-in is planned but not enabled. An age declaration is not verified proof of age.
Why this information is used
Email and authentication information support sign-in, verification and password recovery. Your name personalises your profile. Delivery details are saved for future fulfilment; online ordering remains closed. Date of birth is optional profile information and can be cleared. Saved selections let you return to your cart. The consent record records the account terms you acknowledged. No optional marketing subscription is included.
Services involved
Cloudflare delivers the website. Supabase provides authentication and database storage; this project is located in Mumbai, India. Service providers may process technical connection and security information according to their own terms. The current site also requests fonts from Google Fonts. Instagram and Google Maps links take you to separate services with their own privacy practices.
Your choices
You can edit your personal details, add, edit or remove delivery addresses, remove saved-cart entries and download the account data shown in your profile. For a request concerning account deletion, correction or privacy, use the contact page and specify that it is an account request. Do not send your password or identity documents through Instagram. A dedicated privacy contact and a verified request-handling process must be established before registration opens.
Retention and changes
The retention periods for account records, operational logs and backups have not yet been approved. These details and the legal business identity will be added before public registration. A change in this notice will show a new update date. Nothing here limits rights that apply under law.