PRIVACY POLICY

Last Updated: 19 October 2026

At PenVault, your trust matters to us.

This Privacy Policy explains how Senoaba Sons, operating the brand and website PenVault (“PenVault”, “we”, “us”, or “our”), collects, uses, stores, shares and protects personal information when you visit or use www.penvault.in, place an order, create an account, contact us, or otherwise interact with our services.

We are committed to handling personal data responsibly, transparently and in accordance with applicable Indian laws and regulations, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025, to the extent applicable and in force, and other applicable privacy and data protection requirements.

1. WHO WE ARE

PenVault is a premium e-commerce platform specialising in fountain pens, writing instruments, inks, notebooks, paper products and related accessories.

The website is operated by:

Senoaba Sons
108 Vepery High Road,
Periamet, Chennai – 600034,
Tamil Nadu, India

Email: contact@penvault.in

Office Hours:
Monday to Friday: 10:30 AM – 5:30 PM IST
Saturday: 10:30 AM – 3:30 PM IST

For privacy-related questions, requests or complaints, you may contact us at the above email address.

2. WHAT PERSONAL DATA WE COLLECT

We collect only such personal data as is reasonably necessary for operating our website, providing our products and services, fulfilling orders, communicating with customers, maintaining security and complying with applicable law.

Depending on how you interact with PenVault, we may collect the following categories of information.

2.1 Information You Provide Directly

This may include:

  • Full name

  • Email address

  • Telephone/mobile number

  • Billing address

  • Shipping/delivery address

  • Account login information, where applicable

  • Information provided when contacting customer support

  • Information submitted through forms, enquiries, reviews or other communications

  • Any other information you voluntarily provide to us

2.2 Order and Transaction Information

When you place an order, we may collect and maintain:

  • Order number

  • Products purchased

  • Product quantities and prices

  • Billing and shipping details

  • Order history

  • Delivery and tracking information

  • Payment status

  • Refund, replacement or return information

  • Communications relating to your order

2.3 Payment Information

Payments on PenVault are processed through third-party payment service providers, including Cashfree Payments, rather than being processed directly by PenVault.

Depending on the payment method used, information necessary to process and verify a transaction may include payment method, transaction reference, payment gateway identifiers, transaction amount, currency, payment status and other information required for payment processing, fraud prevention and regulatory compliance.

We do not require customers to provide complete card or banking credentials directly to PenVault for the purpose of processing a payment.

Cashfree independently processes payment-related information in accordance with its own privacy practices and applicable laws.

2.4 Information Collected Automatically

When you visit www.penvault.in, certain information may be collected automatically through Shopify, cookies and similar technologies.

This may include:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • General device or network information

  • Pages visited

  • Products viewed

  • Referring website or source

  • Date and time of visits

  • Website interactions

  • Cart and browsing activity

  • Cookies and similar identifiers

This information may be used to operate, secure, analyse and improve the website and shopping experience.

Shopify's platform may process information such as contact information, device information, payment-related information, browsing activity and transaction information in connection with Shopify-powered merchant stores.

3. WHY WE COLLECT AND USE YOUR PERSONAL DATA

We may process your personal data for one or more of the following purposes:

3.1 To Process and Fulfil Orders

We use information necessary to:

  • Accept and process orders

  • Confirm purchases

  • Process payments

  • Pack and dispatch products

  • Arrange delivery

  • Provide order tracking

  • Process returns, replacements and refunds

  • Provide order-related communications

3.2 To Provide Customer Support

We may use your information to:

  • Respond to enquiries

  • Assist with product selection

  • Resolve order issues

  • Handle returns and replacements

  • Provide warranty or service assistance

  • Communicate regarding repairs or technical issues

  • Maintain records of customer communications

3.3 To Provide After-Sales Service

Where applicable, information may be used to coordinate:

  • Manufacturer warranty claims

  • Repairs

  • Replacement parts

  • Service-centre interactions

  • Product-related technical assistance

3.4 To Maintain Website Security

We may process information to:

  • Detect and prevent fraud

  • Identify suspicious transactions

  • Protect customer accounts

  • Prevent abuse of our website

  • Investigate security incidents

  • Protect our business and customers

3.5 To Improve PenVault

We may use aggregated or appropriately handled information to understand:

  • Which products customers are interested in

  • How visitors use our website

  • Which pages and features are useful

  • How our website performs

  • How we can improve our products, services and customer experience

3.6 To Communicate With You

We may contact you regarding:

  • Orders

  • Payments

  • Shipping

  • Delivery

  • Returns

  • Warranty/service matters

  • Account-related matters

  • Important changes to our services or policies

Where permitted by applicable law, we may also send promotional or marketing communications.

3.7 To Comply With Legal Obligations

We may process or disclose information where reasonably necessary to:

  • Comply with applicable law

  • Meet tax, accounting or regulatory requirements

  • Respond to lawful requests from government or regulatory authorities

  • Establish, exercise or defend legal claims

  • Prevent, detect or investigate fraud or unlawful activity

4. LEGAL BASIS AND CONSENT

We process personal data where necessary to provide products or services you have requested, fulfil an order or take steps related to a transaction.

We may also process personal data where required or permitted by applicable law, including for legal compliance, fraud prevention, security and other legitimate operational purposes.

Where processing requires your consent, we will seek consent in an appropriate manner.

Where you provide consent for a particular purpose, you may withdraw that consent subject to applicable law and subject to situations where continued processing is necessary or permitted by law.

Withdrawal of consent will not affect processing that was already carried out lawfully before the withdrawal.

5. MARKETING COMMUNICATIONS

If you choose to receive marketing communications from PenVault, we may use your contact information to send you information about:

  • New products

  • New brands

  • Product launches

  • Limited editions

  • Offers and promotions

  • Events

  • PenVault content and updates

You may opt out of promotional communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us at:

contact@penvault.in

Please note that even if you opt out of marketing communications, we may still send essential service communications relating to your orders, payments, deliveries, returns, warranties, security or other transactions.

6. COOKIES AND SIMILAR TECHNOLOGIES

PenVault and the technology platforms supporting the website may use cookies and similar technologies.

Cookies may be used for purposes including:

  • Keeping the website functioning correctly

  • Maintaining shopping carts

  • Remembering preferences

  • Understanding website usage

  • Improving website performance

  • Measuring marketing effectiveness

  • Maintaining security

  • Providing relevant website functionality

Some cookies may be placed or controlled by third-party service providers integrated with our website.

You may be able to control or restrict cookies through your browser or through privacy controls made available on the website.

Please note that disabling certain cookies may affect website functionality.

Shopify provides merchants with privacy tools that may include privacy policies, cookie banners and other customer privacy controls. We are responsible for configuring those controls so that they accurately reflect our actual practices.

7. SHOPIFY

PenVault's online store is powered by Shopify.

Shopify provides the technology infrastructure that enables us to operate our online store, including functions related to website hosting, shopping carts, checkout, customer accounts, order management, security and related e-commerce functionality.

Shopify may process personal information in connection with the operation of its platform and services.

Shopify also notes that merchants may use third-party services such as payment gateways, shipping providers and apps alongside the Shopify platform.

8. CASHFREE PAYMENTS

PenVault uses Cashfree Payments as a payment gateway.

When you make a payment, information necessary to process the transaction may be transmitted to Cashfree.

This may include information such as:

  • Name

  • Transaction details

  • Payment method

  • Transaction amount

  • Currency

  • Payment gateway identifiers

  • Payment status

  • Information required for verification, fraud prevention or regulatory compliance

Cashfree states that it processes payment-related and other personal information for payment aggregation, verification, security and compliance purposes and may retain information for the period required for the purposes for which it was collected or as required by applicable law.

Cashfree's own privacy policy governs its independent processing of personal data.

9. SHIPWAY AND LOGISTICS PARTNERS

PenVault uses Shipway as a logistics and shipping technology partner.

To fulfil and track your order, we may share information necessary for delivery, which may include:

  • Customer name

  • Delivery address

  • Telephone/mobile number

  • Email address

  • Order number

  • Shipment details

  • Product/order information necessary for fulfilment

  • Tracking information

Shipway may process customer information as part of its e-commerce and logistics services, including information relating to customers of its merchant clients.

Shipway may also facilitate the use of relevant courier and delivery partners.

We share only information reasonably necessary for the fulfilment and delivery of your order.

10. OTHER SERVICE PROVIDERS

We may use third-party service providers to help operate PenVault.

Depending on the services actually enabled on our website, these may include providers involved in:

  • Website infrastructure

  • E-commerce technology

  • Payment processing

  • Shipping and logistics

  • Customer support

  • Website analytics

  • Fraud prevention

  • Security

  • Email or communication services

  • Marketing

  • Reviews and customer feedback

  • IT and technical services

We expect service providers handling personal data on our behalf to process that information only for appropriate purposes and to maintain reasonable security and confidentiality measures.

We do not sell customer personal data as a standalone commercial asset.

11. WHEN WE SHARE PERSONAL DATA

We may share personal data where reasonably necessary with:

Service Providers

Technology and operational providers that help us operate PenVault.

Payment Providers

Including Cashfree Payments and relevant banking/payment network participants involved in processing transactions.

Logistics and Delivery Partners

Including Shipway and relevant courier partners responsible for delivering orders.

Manufacturers and Authorised Service Centres

Where necessary to process warranty claims, repairs, technical support or product service.

Professional Advisers

Such as accountants, auditors, lawyers, consultants or other professional advisers where reasonably necessary.

Government and Regulatory Authorities

Where disclosure is required or permitted by applicable law.

Business Transactions

If PenVault or substantially all of its assets are involved in a merger, acquisition, restructuring, sale or similar transaction, personal data may be transferred as part of that transaction subject to applicable law.

12. INTERNATIONAL DATA TRANSFERS

Some technology, service or brand partners used in connection with PenVault may operate from or process information in countries outside India.

Where personal data is transferred outside India, we will take reasonable steps to ensure that such processing is undertaken in accordance with applicable law and appropriate contractual, organisational or technical safeguards.

Certain service providers may independently determine where they host or process information under their own privacy policies and contractual arrangements.

13. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Processing and fulfilling orders

  • Providing customer service

  • Managing warranties and service records

  • Maintaining business and transaction records

  • Meeting accounting, tax and legal requirements

  • Resolving disputes

  • Preventing fraud

  • Maintaining security

  • Exercising or defending legal rights

When personal data is no longer required, we may delete, anonymise or securely dispose of it, subject to applicable legal, regulatory, accounting and business-record retention requirements.

A request for deletion does not necessarily require us to delete information that we are legally required or otherwise permitted to retain.

14. DATA SECURITY

We take reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration or disclosure.

Security measures may include:

  • Secure website connections

  • Access controls

  • Restricted access to customer information

  • Secure payment processing through third-party payment providers

  • Monitoring and security controls

  • Appropriate safeguards for information handled by service providers

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect your information, we cannot guarantee absolute security.

15. YOUR PRIVACY RIGHTS

Subject to applicable law and any conditions or limitations prescribed by law, you may have rights relating to your personal data, including rights to:

  • Request information about personal data processed by us

  • Request correction or updating of inaccurate personal data

  • Request erasure of personal data where legally permissible

  • Withdraw consent where processing is based on consent

  • Raise a grievance concerning the processing of your personal data

  • Exercise other rights available to you under applicable law

The availability and scope of these rights may depend on applicable law and the circumstances of the processing.

16. HOW TO EXERCISE YOUR RIGHTS

To make a privacy-related request, please contact:

Email: contact@penvault.in

Please include:

  • Your full name

  • Email address or telephone number associated with your interaction with PenVault

  • Order number, if relevant

  • The nature of your request

  • Any information reasonably necessary for us to verify your identity

We may request reasonable information to verify that the request is being made by the relevant individual or an authorised person.

We will process valid requests within the timeframe required by applicable law.

17. GRIEVANCE REDRESSAL

If you have any concern regarding the collection, use or processing of your personal data, we encourage you to contact us first so that we can investigate and address the matter.

Privacy / Grievance Contact

Senoaba Sons
108 Vepery High Road,
Periamet, Chennai – 600034,
Tamil Nadu, India

Email: contact@penvault.in

Office Hours:
Monday to Friday: 10:30 AM – 5:30 PM IST
Saturday: 10:30 AM – 3:30 PM IST

We aim to acknowledge and address privacy-related complaints within the timeframe prescribed by applicable law.

18. CHILDREN'S PRIVACY

PenVault's products and services are intended for general consumers and are not specifically directed towards children.

We do not knowingly seek to collect personal data from children in circumstances where such collection is prohibited by applicable law.

Where applicable law requires parental or lawful guardian consent for processing a child's personal data, we will follow the requirements prescribed by law.

If you believe that a child has provided personal data to us in circumstances where such processing should not have occurred, please contact us at contact@penvault.in.

19. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, services or platforms.

These may include manufacturer websites, brand websites, payment services, social media platforms, logistics services or other external websites.

Once you leave www.penvault.in, the privacy practices of the relevant third party will apply.

PenVault is not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

20. CUSTOMER REVIEWS AND USER-GENERATED CONTENT

If you voluntarily submit a product review, testimonial, photograph, comment or other content to PenVault, that information may be displayed publicly on our website or other PenVault communication channels, depending on the feature through which it was submitted.

Please do not submit personal information that you do not want to be publicly displayed.

Where required by law, we will obtain appropriate consent before using personal information for purposes beyond those reasonably expected from the feature through which it was submitted.

21. FRAUD PREVENTION AND SECURITY

We may process information to identify and prevent:

  • Fraudulent transactions

  • Payment abuse

  • Chargebacks

  • Account misuse

  • Unauthorised activity

  • Cybersecurity incidents

  • Attempts to compromise the website

  • Other unlawful or harmful activity

Information may be shared with relevant payment, technology, logistics, professional or governmental parties where reasonably necessary for these purposes or where required by law.

22. LEGAL DISCLOSURES

We may disclose personal data where we reasonably believe that disclosure is necessary to:

  • Comply with applicable law

  • Comply with a lawful order or request

  • Protect our rights or property

  • Protect customers or other persons

  • Investigate suspected fraud or unlawful activity

  • Prevent or address security incidents

  • Establish, exercise or defend legal claims

Where legally permissible, we will seek to limit such disclosure to information reasonably necessary for the relevant purpose.

23. BUSINESS TRANSFERS

If PenVault or Senoaba Sons undergoes a merger, acquisition, restructuring, sale of assets, change of ownership or similar transaction, personal data may be transferred as part of the relevant business assets or operations.

Any such transfer will be handled in accordance with applicable law and appropriate privacy protections.

24. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business

  • New products or services

  • Changes to technology

  • Changes to third-party service providers

  • Changes to applicable law

  • Changes to privacy or security practices

The updated version will be published on this page with a revised “Last Updated” date.

We encourage you to periodically review this page to remain informed about how PenVault handles personal data.

25. GOVERNING LAW

This Privacy Policy is governed by the laws of India.

Subject to applicable law, disputes relating to this Privacy Policy shall be subject to the jurisdiction of the courts located in Chennai, Tamil Nadu, India.

26. CONTACT US

If you have any questions about this Privacy Policy or how PenVault handles your personal data, please contact us:

PenVault
Operated by Senoaba Sons

Registered Address:
108 Vepery High Road,
Periamet, Chennai – 600034,
Tamil Nadu, India

Email: contact@penvault.in

Office Hours:
Monday to Friday: 10:30 AM – 5:30 PM IST
Saturday: 10:30 AM – 3:30 PM IST

OUR COMMITMENT

At PenVault, we believe that trust is earned through transparency.

We collect information because we need it to serve you — to process your order, deliver your purchase, provide support, protect your transaction and improve your experience.

We aim to collect only what is reasonably necessary, use it responsibly, protect it appropriately and give you meaningful control over your personal information.

Your privacy matters. Your trust matters even more.