Privacy Policy
Last updated: 3 September 2026
This Privacy Policy explains how Verra Living Private Limited ("Verra", "we", "us" or "our") collects, uses, shares and protects your personal data when you visit www.verra.in, place an order, create an account, or otherwise interact with us.
We act as the data fiduciary for this personal data and process it in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and rules made under it, and other applicable Indian law. By using the Site, you acknowledge this Policy. Where the law requires consent, we will ask for it separately.
1. Personal data we collect
We collect the following categories of personal data.
Data you give us
- Identity and contact details: name, email address, phone number, and billing and shipping addresses.
- Order information: the products you buy, order value, transaction history and delivery preferences.
- Payment information: processed by our payment providers. We receive confirmation of payment and limited details such as the payment method and the last four digits of a card; we do not store complete card numbers.
- Account information: login credentials and any preferences you save.
- Communications: messages, support tickets, call notes, product reviews, ratings, survey answers and quiz responses.
- Marketing preferences: your choices about receiving emails, SMS and other communications.
Data we collect automatically
- Device and connection data: IP address, browser type, operating system, device identifiers and language settings.
- Usage data: pages viewed, links clicked, referring pages, search terms on the Site, and time spent.
- Cookies and similar technologies: used for essential site functions, analytics and (with consent) marketing. See the Cookies section below.
Data from third parties
- Payment gateways and fraud-prevention providers.
- Logistics and delivery partners (for example, delivery status and address verification).
- Analytics and advertising platforms.
- Social media platforms, if you interact with our pages or ads.
2. How we use your personal data
- To process and deliver your orders, take payment, and provide invoices and order updates.
- To provide customer support and handle returns, exchanges and warranty claims.
- To create and manage your account.
- To send service communications such as order, delivery and security notifications.
- To send marketing communications about Verra products and offers, where you have consented or where otherwise permitted by law, and to measure how those communications perform.
- To personalise your experience and show relevant content and recommendations.
- To understand how the Site is used and to improve our products, content and services.
- To detect, prevent and investigate fraud, security incidents and misuse.
- To comply with legal obligations, including tax, accounting and consumer-protection requirements, and to establish, exercise or defend legal claims.
3. Our lawful basis for processing
We process personal data on one or more of the following bases: your consent; the need to perform a contract with you (for example, to fulfil an order); certain legitimate uses permitted under the Digital Personal Data Protection Act, 2023; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time as described in the 'Your rights' section, without affecting processing already carried out.
4. Cookies and similar technologies
We use cookies and similar technologies to keep the Site working, remember your cart and preferences, measure traffic and performance, and — with your consent — support marketing and measure ad performance.
You can manage non-essential cookies through our cookie preference controls and through your browser settings. Blocking some cookies may affect how the Site works.
5. How we share your personal data
We do not sell your personal data. We share it only as described below.
- Service providers who process data on our instructions, including payment gateways, logistics and courier partners, warehousing providers, email and SMS providers, cloud hosting, analytics providers and customer-support tools.
- Professional advisers such as auditors, lawyers and insurers, where necessary.
- Government authorities, regulators, courts or law-enforcement agencies where required by law or to protect our rights, users or the public.
- A buyer or successor entity in connection with a merger, acquisition, financing or reorganisation, subject to appropriate confidentiality safeguards.
- Other parties with your consent or at your direction.
6. Data retention
We keep personal data for as long as needed for the purposes described in this Policy, including to provide our services, and then for the period required to meet legal, tax, accounting and dispute-resolution obligations. Transaction and tax records are generally retained for the statutory period. When data is no longer needed, we delete or anonymise it.
7. Data security
We use reasonable technical and organisational measures to protect personal data, including encryption of data in transit, access controls and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal-data breach affects you, we will notify you and the relevant authority as required by law.
8. Transfers outside India
Some of our service providers may process personal data outside India. Where that happens, we do so in accordance with applicable law and take steps to ensure your data continues to be protected.
9. Your rights
Subject to applicable law, you have the right to:
- access a summary of the personal data we hold about you and how we process it;
- ask us to correct or complete inaccurate or incomplete data;
- ask us to erase personal data that is no longer required;
- withdraw consent where we rely on it, and unsubscribe from marketing at any time;
- nominate another individual to exercise your rights in the event of your death or incapacity; and
- raise a grievance with us and, if unresolved, complain to the Data Protection Board of India.
To exercise any of these rights, contact us at privacy@verra.in. We may need to verify your identity before acting on a request, and we will respond within the timelines required by law.
10. Children
The Site and our products are intended for adults. We do not knowingly collect personal data from children under 18 without verifiable parental consent. Products in the Bébé by Verra range are marketed to parents and carers, not to children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.
11. Third-party links
The Site may link to third-party websites and services. This Policy does not apply to them, and we are not responsible for their privacy practices. Please review their policies before providing personal data.
12. Marketing choices
You can opt out of marketing emails using the unsubscribe link in any message, reply STOP to marketing SMS where indicated, or contact privacy@verra.in. You will still receive non-promotional service messages related to your orders and account.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a revised 'Last updated' date and, where changes are significant, provide additional notice. Please review this page periodically.
14. Grievance Officer and contact
If you have a question, request or complaint about how we handle your personal data, contact:
The Grievance Officer, Verra Living Private Limited. Email: privacy@verra.in. Registered office address available on request — write to legal@verra.in.
We will acknowledge complaints within 48 hours and aim to resolve them within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
This document is provided for general information. If anything here conflicts with a mandatory right under Indian law, that right prevails.
