Privacy Policy

We collect the following categories of personal data:

• Account information: Name, email address, and password (hashed) when you register.
• Order information: Billing address, shipping address, phone number, and payment details (payment details are processed by our payment gateway — we do not store card numbers).
• Communication data: Messages sent to us via email or contact forms.
• Usage data: Pages visited, products viewed, time spent on site (collected via analytics tools).
• Newsletter subscription: Email address if you subscribe to our newsletter.

We use the data we collect to:

• Process and fulfil your orders, including sending order confirmations and shipping updates.
• Create and manage your account.
• Respond to your enquiries and provide customer support.
• Send marketing emails and newsletters only if you have opted in.
• Improve our website, products, and services based on usage analytics.
• Prevent fraud and ensure security.
• Comply with legal obligations.

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using your personal data is:

• Contract performance: Processing necessary to fulfil your order.
• Legitimate interests: Improving our services, fraud prevention.
• Consent: Marketing communications (you can withdraw consent at any time).
• Legal obligation: Tax, accounting, and regulatory compliance.

We do not sell or rent your personal data. We share your information only with:

• Shipping partners (e.g., Blue Dart, DHL, India Post) — to fulfil your order.
• Payment processors (e.g., Razorpay) — to process your payment securely.
• Email service providers — to send order confirmations and newsletters.
• Analytics providers (e.g., Vercel Analytics) — to analyse website traffic in an anonymised manner.
• Legal authorities — if required by law or to protect our legal rights.

All third-party service providers are contractually bound to keep your data confidential and use it only for the specified purpose.

We use the following types of cookies on our website:

• Essential cookies: Required for the website to function (e.g., session authentication, shopping cart).
• Analytics cookies: Help us understand how visitors interact with our site (anonymous data only).
• Marketing cookies: Only set with your consent to personalise ads.

You can control and delete cookies through your browser settings. Disabling essential cookies may affect website functionality.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Account data: Until you delete your account.
• Order data: 7 years (for tax and legal compliance under Indian law).
• Marketing preferences: Until you unsubscribe.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Ask us to limit how we process your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Unsubscribe from marketing at any time via the link in our emails.

To exercise any of these rights, contact us at Kullufab@gmail.com.

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and restricted database access. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights, we will notify affected users within 72 hours of becoming aware of the breach.

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made. We encourage you to review this policy periodically.

For privacy-related enquiries, contact our data protection point of contact:

• 📧 Kullufab@gmail.com
• 📍 KulluFab, Kullu, Himachal Pradesh — 175101, India