Privacy Policy

When you register an account, place an order, or subscribe to a Vitasta water plan, we collect the following personal information:

• Full name and contact phone number
• Email address (optional but recommended for digital invoices)
• Delivery address within Jhelum and surrounding areas
• Order history, subscription preferences, and delivery logs
• Empty bottle ledger balances and exchange records

Your personal data is used exclusively for:

• Processing and delivering your water orders
• Managing your 19L bottle exchange ledger and subscription schedule
• Sending delivery confirmations, invoices, and service notifications via SMS
• Improving our route efficiency and customer experience
• Complying with legal and regulatory obligations in Pakistan

All customer data is stored on encrypted servers located within Pakistan. We employ industry-standard security measures including:

• Encrypted database connections (TLS 1.3) for all data in transit
• Password hashing using bcrypt with 12 salt rounds
• Role-based access controls — only authorized admin personnel can access customer records
• Regular security audits of our digital infrastructure

We do not sell, rent, or share your personal data with third parties.Your phone number, delivery address, and transaction history remain strictly within Tripure Industries. We do not engage in data monetization or advertising targeting based on customer information.

Limited data (delivery address and phone number) may be shared with our contracted delivery personnel on a per-route basis, solely for the purpose of completing your delivery. These personnel are bound by confidentiality agreements.

We retain your account data for the duration of your active subscription plus three (3) years after cancellation, as required by Pakistani tax and business record laws. After this period, personal data is anonymized or permanently deleted. Bottle ledger records may be retained longer for reconciliation purposes.

As a customer, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data (subject to legal retention requirements)
• Withdraw consent for non-essential data processing

To exercise these rights, please contact us through our Contact page or visit our facility in Jhelum. We will respond to all requests within 15 business days.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Registered users will be notified of material changes via email or SMS. The “Last updated” date at the top of this page indicates when the policy was last revised.