Privacy Policy

Effective date: [26th MAY 2026]

This Privacy Policy explains how The Kalakriti collects, uses, stores, shares, protects, and handles personal data when you visit our store, use our website/app, place an order, contact us, subscribe to communications, participate in offers, or interact with us through any official channel.

1. Who we are

The Kalakriti is operated by [legal entity name] under the brand name The Kalakriti. For applicable personal-data processing, [legal entity name] acts as the Data Fiduciary. Our store address is Shop no. 1 & 2, Ground Floor, Plot No. P-13, Saraswati Kunj, Sector 53, Golf Course Road, Gurugram, Haryana - 122002.

For privacy-related queries, contact:

Privacy contact / Grievance Officer: [name and designation]

Email: [info@thekalakriti.com]

Phone: [+917827280035]

Postal address: The Kalakriti, Shop no. 1 & 2, Ground Floor, Plot No. P-13, Saraswati Kunj, Sector 53, Golf Course ​ ​Road, Gurugram, Haryana - 122002

2. Personal data we may collect

Depending on your interaction with us, we may collect the following categories of personal data:

Identity and contact details: name, phone number, email address, billing address, shipping address, landmark, pin ​code, and recipient details.

Order and transaction details: products viewed or purchased, order number, invoice details, payment status, refunds, exchanges, delivery records, returns, support requests, and warranty-related information.

Payment-related information: limited payment confirmation details, transaction IDs, payment mode, last four digits of card where provided by the payment gateway, UPI/payment reference, or refund account details. We do not intentionally store full card numbers, CVV, UPI PINs, banking passwords, or payment authentication credentials.

Communication details: emails, calls, WhatsApp messages, chats, feedback, reviews, complaints, survey responses, and support history.

Device and usage information: IP address, browser type, device identifiers, pages viewed, referring URLs, timestamps, cookies, analytics data, and similar technical information when you use our website or app.

·       Marketing preferences: newsletter subscription status, consent choices, campaign responses, wishlists, cart activity, coupon use, and opt-out requests.

·       CCTV and store-security data: images or video footage captured at our physical store for safety, security, and loss-prevention purposes, where cameras are installed and notices are displayed.

3. How we collect personal data

·       Directly from you when you visit the store, place an order, create an account, fill a form, contact customer care, request a return, subscribe to marketing, or participate in offers.

·       Automatically through cookies, pixels, analytics tools, server logs, and similar technologies when you use our website or app.

·       From payment gateways, logistics partners, marketing platforms, marketplaces, social-media platforms, fraud-prevention tools, or other service providers involved in processing your order or interaction.

·       From someone who places an order for you or sends you a gift, to the extent necessary to deliver the product or communicate about the order.

4. Purposes of use

We process personal data for lawful and specific purposes, including:

·       To process, confirm, pack, ship, deliver, exchange, return, refund, or service your order.

·       To issue invoices, receipts, payment confirmations, store credits, vouchers, warranty support, or order updates.

·       To respond to enquiries, complaints, feedback, product questions, return requests, or grievance requests.

·       To manage customer accounts, carts, wishlists, subscriptions, loyalty benefits, offers, and preferences.

·       To send service communications such as order confirmation, delivery status, refund status, policy updates, or safety notices.

·       To send marketing messages, newsletters, offers, launches, events, festive promotions, or product recommendations where permitted by law and your choices.

·       To personalize website/app experience, improve our product selection, measure campaign performance, prevent fraud, secure our systems, and troubleshoot technical issues.

·       To comply with tax, accounting, consumer-protection, data-protection, legal, regulatory, law-enforcement, and dispute-resolution obligations.

·       To protect the safety, security, property, rights, and legitimate interests of TheKalakriti, customers, employees, and visitors.

5. Notice, consent, and withdrawal

Where we rely on consent, we will provide a clear notice describing the personal data involved, the specific purpose of processing, how to withdraw consent, and how to contact us. We will seek consent through a clear affirmative action such as a form, checkbox, account setting, OTP flow, message, written confirmation, or another appropriate method. We will not rely on pre-ticked boxes for consent where consent is required.

·       Consent withdrawal contact: [email/link/phone/process].

·       Consent manager, if used: [consent manager name/link/details].

·       Marketing opt-out method: [unsubscribe link/WhatsApp opt-out/email/process].

You may withdraw consent for future processing by contacting us or using the unsubscribe/opt-out mechanism provided, where available. Withdrawal of consent will not affect processing already completed before withdrawal. It may also affect our ability to provide certain services, such as order updates, returns, refunds, account access, delivery, or support, where the relevant data is necessary for that purpose.

6. Cookies and similar technologies

Our website or app may use cookies, pixels, tags, SDKs, analytics tools, and similar technologies to remember preferences, improve site performance, understand usage, prevent fraud, and show relevant offers. You can manage cookies through your browser or device settings. Some website features may not function correctly if cookies are disabled.

7. Sharing of personal data

We do not sell your personal data. We may share personal data only where necessary and lawful, including with:

·       Payment gateways, banks, UPI/payment service providers, fraud-prevention partners, and refund processors.

·       Delivery partners, courier companies, logistics aggregators, packaging partners, installation partners, or service technicians.

·       Technology providers, website/app hosting providers, analytics providers, CRM tools, email/SMS/WhatsApp providers, cloud storage, security tools, and customer-support tools.

·       Marketing and advertising platforms, only to the extent required for permitted marketing, analytics, measurement, personalization, or opt-out management.

·       Professional advisers, auditors, accountants, insurers, legal advisers, and compliance consultants.

·       Government authorities, courts, regulators, law-enforcement agencies, or other persons where required or permitted by law.

·       Successors or potential successors in connection with business transfer, merger, restructuring, financing, acquisition, or sale of assets, subject to appropriate safeguards.

8. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, for business records, customer service, legal claims, tax and accounting compliance, fraud prevention, security, regulatory obligations, and dispute resolution. When retention is no longer necessary, we will delete, anonymize, aggregate, or securely archive the data as appropriate.

9. Security safeguards

We use reasonable technical and organizational safeguards to protect personal data against unauthorized access, misuse, loss, alteration, disclosure, or destruction. These may include access controls, limited employee access, contractual confidentiality obligations, secure payment gateways, encryption in transit where available, malware protection, backups, and periodic review of systems and vendors. No system is completely secure, and customers should also protect their passwords, OTPs, payment credentials, and devices.

10. Children

Our products and services are intended for adults and general household use. We do not knowingly target children for the collection of personal data. If we are required to process personal data of a child, we will do so only as permitted by applicable law and, where required, with verifiable consent from a parent or lawful guardian.

11. Your rights

Subject to applicable law, you may have rights to:

·       Know what personal data we process and for what purpose.

·       Access information about your personal data.

·       Correct inaccurate or misleading personal data.

·       Complete incomplete personal data.

·       Update outdated personal data.

·       Request erasure of personal data where retention is no longer necessary or legally required.

·       Withdraw consent for future processing where processing is based on consent.

·       Nominate another individual to exercise your rights in accordance with applicable law.

·       Raise a grievance with us and, where applicable, pursue remedies before the appropriate authority.

To exercise these rights, contact us using the details in Section 1. We may verify your identity before fulfilling a request. We will respond within timelines required under applicable law.

12. Data breach notice

If a personal data breach occurs and notification is required by law, we will notify affected individuals and/or the appropriate authority in the manner and timeline required under applicable law. The notice may include a description of the incident, likely impact, steps taken, and contact details for assistance.

·       Internal breach contact: [name/designation/email/phone].

·       Breach assessment and notification owner: [team/person].

·       Incident log location/process: [process].

13. Cross-border processing

Some service providers, technology tools, cloud infrastructure, analytics tools, or support systems may process data outside India. Where such processing occurs, we will take steps required under applicable Indian law and contractual safeguards to protect personal data.

14. Third-party links

Our website, app, messages, or social media pages may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party services. Please review their privacy policies before providing personal data.

15. Privacy grievance process

For any privacy grievance, rights request, consent withdrawal, correction, erasure, or data-use concern, contact the Privacy contact / Grievance Officer listed in Section 1. We may verify your identity before acting on a request. We will acknowledge and resolve requests within timelines required by applicable law.

·       Grievance Officer name: [name]

·       Designation: [designation]

·       Email: [privacy or grievance email]

·       Phone: [phone number]

·       Response timeline: [timeline required by applicable law / internal SLA]

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website or otherwise made available. The “Effective date” above will indicate the latest version. Continued use of our services after an update means you acknowledge the revised policy.