Privacy Policy

Effective date: 15 October 2026  |  Last reviewed: 15 October 2026

This Privacy Policy explains how VYLINO (“VYLINO”, “we”, “us”) handles personal data through https://vylino.com/, including enquiries, client projects, account registration, bookings, website-service purchases, support, email communications and related digital services. Please read it with our Cookie Policy and applicable service terms.

1. Who operates this website?

VYLINO is a website design, development and digital-services business founded by Archana Yadav. Business correspondence: 265, Bansa Govindgarh, Rewa, Madhya Pradesh 486550, India; Jaipur unit: Amer Road, near Jorawar Singh Gate, Jaipur, Rajasthan 302002, India. Privacy and service enquiries: contact@vylino.com; telephone/WhatsApp: +91 90981 93452. The responsible contracting entity and any applicable tax-registration particulars are confirmed in the relevant invoice or written contract.

2. Personal data we may collect

• Enquiries and correspondence: your name, business name, email, telephone, service requirements, messages and attachments you choose to share.
• Accounts and transactions: account identifier, email, billing information, order details, tax/invoice information, payment status, transaction references and service history. Payment-card authentication and full card information are handled by the chosen payment service provider, not requested by VYLINO over chat.
• Client project data: authorised website content, domain/hosting information, files, project approvals, support requests and access permissions needed to provide an agreed service. Please use delegated access wherever possible, and never send passwords, OTPs, CVVs or PINs in email or chat.
• Technical and usage information: IP address, device and browser information, security and server logs, page interactions, approximate IP-derived location, referral URLs and cookie or pixel identifiers where relevant technologies operate.
• Marketing and social interactions: email preferences, newsletter subscription choices, advertisement interactions and public profile details when you contact us through third-party platforms.

Please do not send Aadhaar numbers, banking credentials, medical records, children’s personal information or other highly sensitive data unless necessary and specifically requested through an appropriate secure channel.

3. Why we process information

We use data for identifiable purposes: replying to enquiries and preparing quotations; verifying and fulfilling orders; creating accounts; planning, developing and maintaining client websites; providing customer service, bookings and invoice support; protecting accounts and detecting fraud; keeping legally required transaction and tax records; measuring service reliability; and sending promotional messages only where permitted and with required choices or consent. We do not use client-submitted private project content for unrelated advertising without an appropriate authorisation.

Processing is based on consent, information voluntarily supplied for a requested purpose, performing or preparing an agreed service, compliance with law or another ground permitted by the applicable law. Different laws may require different lawful bases and notices. Providing optional marketing details is not a condition for buying services.

4. Consent, communications and withdrawal

Where consent is required, we seek a specific, informed and affirmative choice; silence, pre-ticked boxes or merely visiting a page do not constitute consent. You can withdraw consent for optional processing by emailing contact@vylino.com or using an available unsubscribe facility. Withdrawal does not retrospectively invalidate lawful processing already performed and does not prevent processing still required by law or a contract. We will not treat acceptance of this Privacy Policy as a blanket consent for every processing activity.

5. Cookies, analytics and advertising tags

The website uses WordPress/WooCommerce features and may use functional cookies (including sessions, cart and login), security cookies, analytics tools and third-party marketing technologies. Integrations may include Google Analytics / Site Kit / Google Tag Manager, Google advertising tools, Meta Pixel, Google for WooCommerce, Reddit for WooCommerce, social login, payment gateways, embedded media and live chat, depending on the features active when you visit.

Strictly necessary technologies support security, forms, authentication and checkout. Analytics, advertising and personalisation technologies can collect identifiers and usage information and may involve third-party processing. Details, categories and available choices are described in our Cookie Policy. You may also clear or restrict cookies through your browser or use device/platform privacy settings. Blocking essential cookies can impair sign-in or checkout. A written policy alone does not switch off tracking scripts; where prior consent is legally required, technical controls must be configured accordingly.

6. Sharing and service providers

We may share the minimum necessary information with providers supporting hosting, security, backups, website forms, email, analytics, social login, advertising, payments (which may include Razorpay and Cashfree), WooCommerce, booking services and customer support. Provider identity depends on which feature you use. Such providers may act under their own privacy terms for their independent services. We may also disclose information to advisers or public authorities when legally required, to prevent fraud, enforce rights, or in a lawful business transfer with appropriate notice.

We do not sell customer contact databases. Advertising integrations can nonetheless involve sharing identifiers for measurement or targeting; this is explained here rather than represented as “no sharing”. We aim to use suitable contractual, access-control and security arrangements for vendors appropriate to their role.

7. Payment and account security

Payments may be processed by third-party gateways. VYLINO may receive transaction identifiers, amounts, status and masked payment information needed for reconciliation, but you should enter payment credentials only into the provider’s authorised checkout. Account sign-in may use WordPress or a third-party social-login provider. Protect your account and notify us promptly of suspected unauthorised use.

8. Client websites and data-processing roles

When VYLINO builds or maintains a client’s website, the client normally determines the purposes and means of collecting its own end-users’ information. VYLINO may process that information only as needed for authorised hosting, development or support, according to the project agreement and applicable law. A client’s website requires its own accurate privacy notice, permissions and data-handling arrangements; this VYLINO policy does not automatically cover the client’s separate operations. We can discuss an appropriate data-processing agreement where necessary.

9. International hosting and data transfers

Because technology providers and clients can be outside India, data may be accessed, hosted or otherwise processed in other countries. We assess transfer restrictions and safeguards required by the law that applies to the specific information and destination. We do not promise that all data always stays in India. Please ask us about a project’s location or vendor requirements before sharing restricted data.

10. Retention and deletion

We retain information only as reasonably required for its original purpose, applicable contractual obligations, security investigations, legal claims and mandatory accounting/tax retention. Enquiries that do not become projects need not be kept indefinitely; marketing information is removed from active marketing when you unsubscribe, subject to a minimal suppression record. Billing records may need to be retained beyond account deletion where law requires. Client project files, backups and access logs can have separate schedules under the project agreement. We will delete, de-identify or restrict data when it is no longer needed and no lawful exception applies. Backup deletion may follow normal rotation cycles.

11. Safeguards and incidents

We seek to use HTTPS, role-based access, appropriate authentication, WordPress/hosting security measures, maintenance controls and reasonable vendor oversight as applicable. No online system is risk-free; we cannot promise absolute security. If a personal-data breach occurs, we will assess it and notify affected persons and authorities where and when required by applicable law. Security concerns can be sent to contact@vylino.com, with “Privacy/Security” in the subject. Please do not send exploit details or sensitive evidence publicly.

12. Your choices and rights

Subject to the law applicable to you and the exceptions it permits, you may request access or information about processing, correction/completion/updating, deletion, withdrawal of consent, or grievance redressal. Eligible individuals in India will receive applicable rights under the Digital Personal Data Protection Act, 2023 and its staged commencement framework; other jurisdictions may provide additional rights, including objection, restriction or portability where applicable. A nomination facility will be provided where the relevant legal provisions require it. We may reasonably verify identity before disclosing or deleting information and may refuse or limit a request only where law permits.

To make a request, email contact@vylino.com with the subject “Privacy Rights Request”, explain the request and provide the email or order reference used with VYLINO; do not include identity-document copies unless specifically and securely requested. We will acknowledge and handle complaints within the periods required by applicable law and communicate any lawful reason for refusal. Where a competent regulator or appeal mechanism is available, you may use it as permitted by law.

13. Children and age requirements

VYLINO’s direct business services and self-service purchases are intended for adults. We do not knowingly seek direct accounts or marketing profiles for persons under 18 years of age in India. Where children’s data must be processed, we will assess verifiable parent/guardian consent and any restrictions required by applicable law. If you believe a child’s data has been submitted improperly, contact us for review and appropriate removal.

14. Third-party websites, embedded content and social sign-in

External websites, embedded videos, social platforms, analytics services and payment gateways may have different policies and can process data independently. Their practices are governed by their own notices and settings. Review these before proceeding. A link or integration does not mean VYLINO controls that provider or guarantees its practices.

15. Legal framework and policy changes

Our operations may be subject, depending on the activity, to the Information Technology Act, 2000 and applicable rules, the Consumer Protection Act, 2019 and relevant e-commerce rules, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their respective provisions take effect, and laws of other jurisdictions where applicable. These references describe the framework and are not a representation that every technical or legal requirement has already been independently certified. This notice is updated when practices or legal requirements materially change; material changes may be communicated through the site, account or email as appropriate.

16. Contact and grievance channel

VYLINO — Privacy & Customer Grievances
Designated Grievance Officer: Archana Yadav, Founder
Registered address listed on site: 265, Bansa Govindgarh, Rewa, Madhya Pradesh 486550, India
Email: contact@vylino.com
Phone: +91 90981 93452
For order issues include an order number, if available; for privacy requests use “Privacy Rights Request”. For detailed complaint instructions see our Customer Grievance Redressal page.

Note: Any designated statutory officer, additional entity identification and complaint procedures should be confirmed and displayed if legally required for VYLINO’s exact business classification. This policy supplements, and does not replace, statutory rights or a project-specific written agreement.