Privacy Policy

How Verafloor collects and uses personal data when you verify a product or register a warranty. Written to align with India's Digital Personal Data Protection Act, 2023.

Last updated: 12 August 2026

Draft for legal review. Placeholder text pending legal review. This wording is a working draft and is not final legal advice or a binding policy.

Who we are

Verafloor operates this product authentication and warranty platform and acts as the Data Fiduciary for the personal data described here. Questions about this notice can be sent to our support team.

What we collect and why (purpose)

When you register a warranty we collect your name, mobile number, and optionally your email address, postal address, city, state, dealer name, purchase date and invoice number. We use this data for a single stated purpose: to register, verify and service your product warranty, and to provide related customer support.

When you verify a code we also record the code entered, the result, the time, your IP address and browser user agent. This is used to protect customers from counterfeit products and to detect duplicated or copied labels.

When you send us a message we collect your name, email address and the content of your message so we can reply.

Consent

Warranty registration proceeds only after you give explicit, informed consent by ticking the consent box on the registration form. We store the date and time of your consent and the version of this notice you agreed to (current version: 2026-08-12.v1).

You can withdraw your consent at any time by contacting us. Withdrawal is not retrospective, and withdrawing consent may mean we can no longer maintain or honour your warranty record.

Data retention

Warranty records are retained for the length of the warranty cover plus three years, so claims can be honoured and disputes resolved. Verification logs are retained for 24 months for fraud and counterfeit detection. Contact messages are retained for 24 months. After these periods data is deleted or irreversibly anonymised, unless a longer period is required by law.

Sharing

We share personal data only with the brand whose product you registered, and with service providers who host our systems or deliver our emails, under contract and only as needed for the purposes above. We do not sell personal data and we do not use it for advertising.

Security

Data is transmitted over HTTPS and stored with access controls so that only authorised staff of the relevant brand can see customer details. Public verification results never reveal another customer's name, mobile number, email address or postal address.

Your rights and how to make a request

You may request access to the personal data we hold about you, ask for corrections, ask for erasure, or withdraw consent. You may also nominate another person to exercise these rights on your behalf.

Send a request through our data request form. Include your warranty registration number or product code so we can find your record. We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

This service is intended for adults. We do not knowingly process the personal data of children without verifiable parental consent.

Changes

If we change this notice we will publish the updated version here with a new version number and date. Consent already recorded remains linked to the version that was in force at the time.