Privacy

SFJ Enterprises LLP, trading as Viva Scenta, is the entity responsible for the personal data this website collects. Registered office: 10-2-9/11, Flat 502, Imam, Khairatabad Railway Station Road, Khairatabad, Hyderabad 500004, Telangana, India. LLPIN: [to be confirmed]. GSTIN: 36AFNFS2021M1ZQ. Country of origin: India.

For anything in this policy (a question, a correction, a request to see or delete your data) write to care@vivascenta.com, message us on WhatsApp at +91 85208 55594, or use the Contact page.

We collect three different things, and you should know which is which.

What you give us

• Your email address, if you join the mailing list.
• Your name, delivery address, phone number and email, if you place an order.
• Your mobile number and, if you tick the box, your permission to message you on WhatsApp. The box is optional and reads: "Send me WhatsApp messages from Viva Scenta about my order and the range. Reply STOP at any time to leave."

What we collect automatically

• Device and browser type, the pages you view on this site, and an approximate location inferred from your IP address. This is standard web traffic data, not GPS tracking.

What we never see

• Your card or bank details, in full. Payment runs directly through our payment gateway (Razorpay) and we receive only a confirmation that payment succeeded plus a transaction reference. Your card number never touches our servers.

• Mailing list email: to send the updates you asked for, nothing else. You can unsubscribe from any mail we send.
• Mobile number and WhatsApp permission: to send order updates and, if you opted in, the same news we send by email, on WhatsApp instead.
• Order details: to deliver your perfume, invoice it correctly, and honour Our Promise if something arrives damaged, leaking or wrong.
• Automatic device data: to keep the site secure, fix what breaks, and understand which pages actually help a visitor.
• Analytics and advertising data: to see how the site performs and to show our ads to people who have already shown interest, rather than to strangers at random.

We do not sell your data. We share specific pieces of it with specific parties, each doing one job:

• Payment gateway (Razorpay): processes your payment. We never hold your card details ourselves.
• Courier (Shiprocket): receives your name, address and phone number, solely to deliver your order and send you tracking updates.
• Email platform: sends the mailing-list updates you opted into.
• WhatsApp: carries the order updates and messages you opted into; Meta operates WhatsApp.
• Store platform and hosting: run the website, the cart and the checkout, and keep them available.
• Analytics and advertising (Google Analytics 4, Google Ads remarketing and the Meta pixel (with advanced matching of hashed contact details)): described in full below, because this is the part most policies bury.

Three tools run on this site, and each sends something to a third party:

• Google Analytics 4 records the pages you view, how you arrived, and your device type, against an anonymous identifier stored in a cookie. We use it to count and to fix, not to identify you.
• Google Ads remarketing sets a cookie so Google can show our ads to you later on other sites, if you visited this one.
• The Meta pixel does the same for Facebook and Instagram, and it runs with advanced matching switched on. That means: when you place an order or submit a form, the pixel takes your email address, phone number, name and address, hashes each one in your browser (a one-way scramble, SHA-256), and sends the hashed values to Meta. Meta compares them with the hashed values of its own account holders so that it can attribute a purchase to an ad, and show our ads to people like you. Meta receives the hash, not the readable text; we never send Meta your card details, and we never send anything the pixel did not collect on this site.

• Order and invoice data is kept as long as Indian tax law requires us to keep invoices and order records.
• Mailing-list and WhatsApp-list data is kept until you unsubscribe or ask us to delete it.
• Analytics and advertising data is kept for whatever default window Google and Meta apply to their own tools. We do not extend it.

We do not keep personal data longer than its purpose needs. When you withdraw consent or ask us to delete your data, we erase it, except the order and invoice records the law obliges us to keep, which we hold only for that legal purpose and nothing else.

The Digital Personal Data Protection Act, 2023 gives you specific rights over your data, and here is exactly how to use each one:

1. Access: ask what we hold on you. Write to care@vivascenta.com.
2. Correction: ask us to fix anything wrong or out of date. Same address.
3. Erasure: ask us to delete your data, once it is no longer needed for an open order or a legal obligation. Same address.
4. Withdraw consent: unsubscribe from any list, any time, using the link in the mail itself or by writing in, or reply STOP to any WhatsApp message.
5. Grievance redress: if none of the above resolves your concern, escalate to our Grievance Officer, below.

We will confirm any of these requests in writing once actioned.

We encrypt data in transit and restrict who inside Viva Scenta can access it. No system is unbreakable, and we make no absolute promise of security, only that we take reasonable, specific steps and keep tightening them.

This site is not directed at anyone under 18. We do not knowingly collect data from minors.

Under the Consumer Protection (E-Commerce) Rules, 2020, every Indian e-commerce seller must name a Grievance Officer with a working contact route and a stated response time. This is a legal requirement, not a courtesy line:

• Grievance Officer: [to be confirmed]
• Email: care@vivascenta.com
• Phone: +91 85208 55594
• Response time: acknowledged within 36 to 48 hours, resolved within 30 days.

We may update this policy as the site, the law, or our own practice changes. Last updated: 29 September 2026.