Privacy policy (DPDP)
How VFast collects, uses and protects your personal data under the Digital Personal Data Protection Act, 2023.
Data we collect
Phone number (for OTP login), delivery address, order history, device information, coarse location (with consent) and payment method preferences.
Purpose of processing
To fulfil orders, provide customer support, prevent fraud, and comply with tax and regulatory obligations. We do not sell your personal data.
Your rights
You can access, correct, or request erasure of your data any time from Profile → DPDP requests, or by writing to the grievance officer below.
Retention
Order and invoice data is retained for 8 years for GST and audit compliance. Communication logs are retained for 12 months. Everything else is deleted within 30 days of your erasure request.
Data protection officer
Contact via /policies/grievance.
Last updated July 2026. · ← Back to home