PRIVACY POLICY

KRAVVY (“KRAVVY”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what personal information we collect when you visit kravvy.com(the “Site”), how we use it, who we share it with, and the choices you have. By using the Site you consent to the practices described below.

We collect the following categories of information:

• Information you give us— name, email address, shipping address, billing address, phone number, and any messages you send via our contact form.
• Order & payment information— items purchased, order amount, transaction status. Card and banking details are collected and processed directly by Razorpay; we never see or store them on our servers.
• Device & usage data— IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps. This data is collected automatically by our hosting provider (Vercel) and Vercel Analytics.
• Cookies & similar technologies— small data files stored on your device to keep your cart, remember preferences, and measure traffic. See section 6.

• To process and fulfil your orders, including shipping.
• To communicate with you about your order, respond to your queries, and provide customer support.
• To send service-related emails (order confirmations, shipping updates, refund notifications).
• With your explicit consent, to send marketing emails about new drops, promotions, and brand news. You can unsubscribe at any time.
• To detect, prevent, and address fraud, security, or technical issues.
• To analyse Site performance and improve product and user experience.
• To comply with our legal and tax obligations.

We do not sell your personal information. We share it only with the following categories of third parties, and only to the extent required to operate our business:

• Shopify— for product catalogue, order management, and inventory.
• Razorpay— for payment processing. Razorpay handles your card and banking information directly under their own privacy policy.
• Shipping & logistics partners— to deliver your order to the address you provide.
• Email service providers— to send transactional and (with your consent) marketing emails.
• Hosting & analytics providers(Vercel, Vercel Analytics) — to host the Site and understand traffic patterns. Analytics data is aggregated and does not identify individual users.
• Government authorities— when required by Indian law, court order, or to protect our legal rights.

We retain your personal information for as long as needed to provide the services you requested, comply with our legal and accounting obligations (typically up to 8 years for transaction records under Indian tax law), resolve disputes, and enforce our agreements. After that, we delete or anonymise the data.

We use the following types of cookies and storage:

• Essential— for cart functionality (stored in your browser’s local storage), authentication, and basic Site operation.
• Analytics— via Vercel Analytics, which collects aggregated, non-identifying page-view data.
• Payment— cookies set by Razorpay during checkout to securely process your payment.

You can control cookies through your browser settings. Disabling essential cookies may break parts of the Site (cart, checkout).

We use reasonable technical and organisational measures to protect your information, including HTTPS encryption in transit and access controls on our servers. Payment processing happens on Razorpay’s PCI-DSS-compliant systems. However, no system is perfectly secure — we cannot guarantee absolute security and you transmit information at your own risk.

Depending on the laws applicable to you (including India’s Digital Personal Data Protection Act, 2023), you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal information, subject to our legal record-keeping obligations.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email us at support@kravvy.com. We will respond within a reasonable timeframe and may need to verify your identity before acting on your request.

The Site is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected such information, we will delete it promptly.

Some of the third-party services we use (e.g. Vercel) may process data on servers located outside India. By using the Site, you consent to such transfers. We work with reputable providers and rely on their data-protection commitments.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. For material changes we will make reasonable efforts to notify you (for example, by email or a Site banner).

If you have questions, comments, or complaints about this Privacy Policy or our data practices, please contact us at support@kravvy.com.