Plain-English summary: We collect only what we need to run the marketplace — your account info, orders, messages, and basic device/usage data. We use it to deliver our service, improve it, and meet legal obligations. We do not sell your personal data to third parties. You can ask us to show, correct, or delete your data at any time.
1. Who we are
This Privacy Policy is issued by Poonthottathil Gardenz Fresh LLP ("PGF LLP", "we", "us", "our") — a Limited Liability Partnership incorporated in India on 18 November 2021 under the LLP Act 2008 (LLPIN AAZ-5387), registered with the Registrar of Companies, Ernakulam. Recognised by DPIIT, Government of India, under Startup India certificate DIPP124938 (valid until 17 November 2031). Registered office: Room No. 6/477Q, Rahmath Nagar, Edayur Post, Malappuram, Kerala 676552, India. Designated partners: Shabeer Mohammed Poonthottathil (DIN 09405135), Ponthottathil Muhammed Shafeekh, and Poonthottathil Zameel Mohammed.
PGF LLP is the data fiduciary (under India's Digital Personal Data Protection Act 2023, "DPDP Act") and the data controller (under Saudi Arabia's Personal Data Protection Law, "PDPL") for personal data processed via:
- west-velocity.com — the West Velocity marketplace and Social Hub
- strovolt.com — the Strovolt brand site
- The MarknStamp brand pages
- Mobile applications and any subdomain operated by PGF LLP
2. What data we collect
From everyone who visits our sites
- IP address, device type, browser, operating system, referring page
- Pages viewed, time on page, links clicked, search queries used on our search
- Cookie identifiers (see §6)
From registered customers
- Name, email, phone, password (stored as a one-way hash)
- Delivery and billing address, country, preferred language and currency
- Order history, quotes requested, items wishlisted, reviews posted
- Messages exchanged with sellers or our support team
From sellers / suppliers
- Business identity: legal name, trade name, entity type, year established, employee count, annual revenue range
- Tax IDs (VAT, GST, EIN, CR, etc.) and supporting documents
- Bank account or wallet details for payouts
- Warehouse address, return address, shipping capabilities
- Verification documents (commercial registration, owner ID, certifications)
From Social Hub users
- Profile photo, bio, social posts, comments, messages, group memberships, events created or joined
- Reels, stories, and any media you upload
Payment information
We do not store full card numbers or CVVs. Payments are processed via our payment partners (Razorpay, Stripe, Saudi-licensed PSPs); we receive only a tokenised reference and the transaction outcome.
3. How we use your data
- Provide the service — create your account, fulfil orders, route messages, deliver notifications
- Verify sellers — confirm business legitimacy, prevent fraud, comply with KYC where required
- Process payments and payouts — including tax invoicing, refunds, chargeback handling
- Customer support — respond to your questions, resolve disputes
- Improve the platform — measure performance, analyse search trends, run A/B tests, debug issues
- Personalise — show relevant products, recommended sellers, regional pricing
- Marketing — send service emails (always); send promotional emails only if you opt in or are an existing customer (you can opt out any time)
- Legal compliance — tax reporting, accounting, sanctions screening, responding to lawful requests
- Security — detect abuse, prevent fraud, protect the platform and users
4. Legal basis for processing
Under the Indian DPDP Act 2023, Saudi PDPL, and (where applicable) the EU/UK GDPR, we rely on the following legal grounds:
- Consent — for marketing communications, optional cookies, profile sharing
- Contract — to deliver the marketplace services you signed up for
- Legitimate interests — running and securing the platform, preventing fraud, basic analytics
- Legal obligation — tax records, anti-money-laundering checks, complying with court orders
5. Who we share data with
We share personal data only with:
- Sellers and buyers — to fulfil the order or quote you initiated (sellers see buyer name, address, phone for shipping; buyers see seller contact info)
- Payment processors — Razorpay, Stripe, Saudi-licensed PSPs
- Shipping carriers — DHL, Aramex, India Post, SMSA, etc., to deliver orders
- Cloud and infrastructure providers — AWS (EU/India regions), Cloudflare, Google Cloud (for SEO/analytics service accounts)
- Analytics providers — Google Analytics 4, Google Search Console (aggregated data only)
- AI service providers — Groq, OpenAI, Anthropic, AWS Bedrock, Google Gemini (for product description generation, SEO analysis; we do not send personal data to AI APIs unless required for the specific feature)
- Professional advisers — auditors, lawyers, tax consultants, under confidentiality
- Government and regulators — when legally required (tax filings, court orders, sanctions compliance)
We do not sell personal data to advertising networks, data brokers, or any third party.
6. Cookies & analytics
We use the following categories of cookies and similar technologies:
- Strictly necessary — login session, CSRF protection, language and currency preferences. Cannot be disabled.
- Analytics — Google Analytics 4 (Measurement IDs G-WQZXNP70YN for West Velocity, G-9LKPE2PYWC for Strovolt). IP anonymisation is enabled. Used to understand site usage and improve content.
- Functional — viewer-country detection, recently-viewed products, dark/light mode.
You can disable non-essential cookies via your browser settings. Doing so may degrade some features.
7. International transfers
Personal data may be transferred between India, the GCC (primarily Saudi Arabia), the EU, and the United States to operate the platform — for example, when you (a Buyer in Saudi Arabia) place an order with a Seller in India, or when our service providers host data in different regions. We rely on:
- Adequate-country status where it exists;
- Standard Contractual Clauses (SCCs) or equivalent safeguards;
- Your explicit consent for transfers required to fulfil your order.
8. How long we keep data
- Account data — for as long as your account is active, plus 7 years after closure (Indian Income Tax Act / KSA Zakat & Tax requirements)
- Order and invoice records — 7 years
- Marketing emails — until you opt out, then immediately removed from marketing lists
- Server logs — 90 days, then aggregated
- Backups — encrypted, rotated every 30 days
9. How we protect data
- HTTPS / TLS 1.2+ on all sites
- Passwords stored as PBKDF2 hashes (Django default), never in plain text
- Database access restricted to whitelisted IPs and authenticated services
- Encrypted backups
- Principle of least privilege for staff access; activity logged
- Service account keys (Google Cloud, AWS) stored with restricted file permissions on production servers
If a personal-data breach affects your information and is likely to result in significant harm, we will notify you and the relevant supervisory authority within the timeframes required by the DPDP Act and PDPL.
10. Your rights
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to fix incorrect or incomplete data
- Erasure — ask us to delete your account and personal data, subject to legal retention requirements
- Objection — object to processing based on legitimate interests, including direct marketing
- Withdrawal of consent — at any time, where we rely on consent
- Portability — receive your data in a structured, machine-readable format
- Complaint — lodge a complaint with the Data Protection Board of India (under DPDP Act) or the Saudi Data & AI Authority (SDAIA)
To exercise any of these rights, email info@west-velocity.com with the subject line "Data Rights Request". We will respond within 30 days.
11. Children
Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If we discover that we have collected such data without verifiable parental consent, we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified by email to registered users at least 14 days before they take effect, and the "Last updated" date at the top of this page will be revised.
13. Contact & Data Protection Officer
For privacy questions, data-rights requests, or to report a concern, contact us:
- Data fiduciary / controller: Poonthottathil Gardenz Fresh LLP (LLPIN AAZ-5387)
- Registered office: Room No. 6/477Q, Rahmath Nagar, Edayur Post, Malappuram, Kerala 676552, India
- Privacy email: info@west-velocity.com
- Founder & nominated DPO contact: Shabeer M. Poonthottathil — shabeer@gardenzfresh.com
- India: +91 95261 51069
- Saudi Arabia: +966 56 065 7898
By using our services, you confirm that you have read and understood this Privacy Policy.