PRIVACY POLICY
Kalakruti by Komal
Effective Date: 19 April 2026
Last Updated: 19 April 2026
At Kalakruti by Komal, we respect your privacy and are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, shop with us, create an account, or contact us.
1. Who We Are
Kalakruti by Komal is a small e-commerce platform specializing in authentic, handcrafted Motibharat beadwork jewelry, purses, torans, and home décor from Gujarat, India.
We are operated by [Your Legal Name / Entity Name] (the “Data Fiduciary”).
Registered Address: [Please insert your full business address here, e.g., Ahmedabad, Gujarat, India]
Contact Email: [Insert your official email, e.g., hello@kalakrutibykomal.in]
2. Information We Collect
We collect the following categories of personal data:
A. Information You Provide
- Name, email address, phone number, shipping & billing address
- Account login credentials (if you register)
- Order details, payment information (processed securely by third-party gateways like Razorpay)
- Messages, inquiries, or reviews you send us
- Any custom order requests or special instructions
B. Automatically Collected Information
- IP address, browser type, device information
- Pages visited, time spent, and browsing behavior
- Cookies and similar tracking technologies (see Section 7)
C. Information from Third Parties
- Data received when you log in via Google, Facebook, or other social login (if enabled)
- Payment confirmation from our payment processor
We do not collect any sensitive personal data (such as biometric data, health data, caste, religion, etc.) unless strictly required for a specific lawful purpose and with your explicit consent.
3. How We Use Your Information
We process your data only for the following purposes:
- To process your orders and deliver products
- To create and manage your account
- To communicate with you about orders, shipments, and customer service
- To send important transactional emails/SMS
- To improve our website and customer experience
- To prevent fraud and ensure website security
- To comply with legal obligations (tax, accounting, consumer laws)
- With your consent: marketing updates, newsletters, and promotional offers (you can withdraw consent anytime)
4. Legal Basis for Processing (DPDP Act)
We process your data on the basis of:
- Consent (where required)
- Contract (to fulfill orders and provide services)
- Legitimate interests (website improvement, fraud prevention)
- Legal obligation (statutory compliance)
5. Sharing of Your Information
We share your data only when necessary:
- With payment gateways (e.g., Razorpay) – they have their own privacy policies
- With shipping/logistics partners (for delivery)
- With IT/service providers (website hosting, analytics, email service) who are bound by strict confidentiality
- In case of merger, acquisition, or sale of business (with prior notice where required)
- When required by law, court order, or government authority
We do not sell your personal data to third parties for marketing purposes.
6. Data Security
We implement reasonable organizational and technical security measures to protect your data. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential website functionality
- Analytics (Google Analytics or similar)
- Improving user experience
- Remembering your preferences
You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect website functionality.
8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or as required by law.
Once no longer needed, we securely delete or anonymize it.
9. Your Rights as a Data Principal (DPDP Act)
You have the right to:
- Access, correct, or update your data
- Withdraw consent (where processing is based on consent)
- Request deletion of your data (subject to legal obligations)
- Restrict or object to processing
- Nominate another person to exercise your rights in case of death or incapacity
- File a grievance
To exercise any of these rights, please contact us using the details below.
10. Children’s Privacy
Our website is not intended for children under 18 years. We do not knowingly collect data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please read their privacy policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated “Last Updated” date. We encourage you to review it periodically.
13. Grievance Redressal (Mandatory under DPDP Act)
We have appointed a Grievance Redressal Officer to address your concerns regarding data protection.
Name: [Insert Name – can be Komal or yourself]
Email: [Insert official email]
Address: [Insert full address]
We will acknowledge and resolve your grievance within one month (or as per law).
You also have the right to approach the Data Protection Board of India if your grievance is not resolved satisfactorily.
By using our website, you acknowledge that you have read and understood this Privacy Policy.