Privacy Policy

1. Who We Are and What This Covers

ValueList (valuelist.in) is an independent deal-discovery website run out of India. This policy covers this website only, not the stores we link out to.

We build for shoppers in India: prices in rupees, deals on stores that sell and ship within India. The site will still open if you visit from another country, and you're welcome.

2. What We Collect

Almost nothing. There are no accounts or logins on ValueList, so there is no profile sitting on a server with your name on it. Here is the complete list:

• Your contact-form submission: the name, email address, and message you choose to type in. Sent only when you submit the form with the consent box ticked, along with a Cloudflare Turnstile bot-check token that proves a human sent it. The token is used to block spam and discarded after verification.
• Aggregate, anonymous usage numbers via Cloudflare Web Analytics: which pages get opened, where visitors come from, and a broad country-level breakdown. This tool uses no cookies, no local storage, and no device fingerprinting, and it does not keep your IP address as personal data. Because it cannot be tied back to you, it isn't personal data at all.

That's the whole list.

3. Why We Collect It

• Contact-form details: to answer your message. Not for newsletters, not for marketing, not for ads. We've never sent a marketing email and don't plan to start.
• Turnstile bot check: to keep automated spam out of our inbox.
• Aggregate analytics: to see which deal categories people actually open and to fix slow or broken pages.

Handing us your contact details is consent-based: you give it by ticking the checkbox, and you can take it back just as easily. One email to privacy@valuelist.in withdraws your consent, and withdrawing is meant to be as simple as agreeing was. That's how the law requires it to work, and it's how we built it.

4. Affiliate Links & What Happens When You Leave Our Site

When you click a store button (“View on Amazon”, “View on Flipkart”, and so on), you go to the merchant through a referral link. If you buy something there, the merchant credits ValueList with a small commission. You pay the same price either way: the commission comes out of the store's margin, not your pocket.

From that point on, you're on the store's site and its rules apply. Amazon, Flipkart, Meesho, Myntra and others may set their own cookies to record the referral. We don't control that, we don't receive your payment details, delivery address, or order history, and this policy doesn't cover what happens over there. We never see any of it; checkout stays entirely on the store.

5. What We Don't Do

No Google Analytics, no Google Tag Manager, no Meta/Facebook pixel, no advertising tags, no session recording, no device fingerprinting, no cross-site tracking. We don't buy data, we don't sell or rent it, and we don't build interest profiles about anyone. Our only measurement tool is Cloudflare Web Analytics, described above.

If that ever changes, this page changes first, with a fresh date at the top, rather than quietly behind your back.

6. Who Can See It, and Data Leaving India

We don't sell or rent your data to anyone. A small number of service providers process it on our behalf, only to keep the site running: Cloudflare handles our analytics, bot protection on the contact form, and content delivery/security. They act strictly on our instructions for those jobs and can't use your details for purposes of their own.

Like most websites in India, parts of our infrastructure sit with global providers (Cloudflare operates worldwide), so processing can happen outside India. The law permits this as long as the Government of India hasn't notified restrictions for that country; if it ever does, we'll stop those transfers at once.

Beyond that, we share information with authorities only when a lawful request genuinely requires it.

7. How Long We Keep It

Contact conversations: kept while your inquiry is open, then for a short record period (up to about a year) in case you come back with a follow-up on the same thread. Ask us to erase sooner and we will, unless we're legally required to hold on to something (tax records, an active dispute, or legal claims).

Where we erase data on our own because its purpose is finished, we give you at least 48 hours' notice before we erase it.

Aggregate analytics contain nothing about you, so there's nothing in them to delete. Server security logs are kept for about a year, which the law allows for detecting and remediating fraud.

8. Your Rights Over Your Data

You have the right to:

• Access: ask what personal data we hold about you and how we've used it.
• Correction and completion: fix anything wrong or half-finished.
• Erasure: have your data deleted, subject only to what the law obliges us to retain.
• Grievance redressal: get a real response to any complaint about how your data is handled.
• Nomination: appoint someone to exercise these rights for you if you can't do it yourself, including after your death, as the Act provides.

To use any of them, email privacy@valuelist.in or write through our Contact Us page. Tell us what you need; we may ask you to confirm it's really you, but since we hold so little data, that's quick. We respond within 30 days.

Not satisfied with our reply? You can escalate the matter to the relevant data protection authority in India. Write to us and we'll share the current process for doing so.

9. Children

ValueList is aimed at adults shopping for household and everyday products. It isn't directed at anyone under 18, and we don't knowingly collect children's data. If you're a parent or guardian and think your child has sent us personal details, email privacy@valuelist.in and we'll delete it.

10. Security

The site runs entirely over HTTPS, so anything between your browser and us is encrypted in transit. Access to the contact inbox is limited to the people who answer it. We never collect payment details: you don't pay ValueList anything, ever.

No online system is unbreakable, and we won't pretend otherwise. If a breach ever affects your personal data, we'll inform you and the relevant data protection authority promptly.

11. Questions, Requests & Grievances

Our designated contact point for everything in this policy, data requests, complaints, or plain confusion, is privacy@valuelist.in, or our Contact Us page. This is our grievance channel under applicable law, and writing to it reaches a person, not a ticket queue. We aim to acknowledge quickly and respond fully within 30 days.