Privacy Policy

1. Introduction

Welcome to PravahsHandicrafts Private Limited ("Company", "we", "us", or "our"). We operate the e-commerce website www.pravahshandicrafts.com, related mobile responsive sites, and future mobile applications (collectively, the "Platform"). We are deeply committed to respecting your privacy and protecting the personal data you share with us.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, register an account, make purchases, or interact with our services.

2. Definitions

• "Personal Information" means any data about an individual who is identifiable by or in relation to such data.
• "Platform" refers to the PravahsHandicrafts website, mobile site, and associated applications.
• "User", "you", or "your" refers to any individual accessing or using the Platform, including customers and visitors.
• "Data Fiduciary" refers to PravahsHandicrafts Private Limited, determining the purpose and means of processing personal data.

3. Information We Collect

We collect various types of information to provide and improve our services. The data we collect includes:

• Personal Information: First and last name, date of birth, and gender.
• Contact Information: Email address, phone number, and social media handles.
• Payment Information: Payment methodology preferences and masked transaction identifiers (Note: Complete credit/debit card numbers are not stored on our servers).
• Billing Details: Billing address and tax identification numbers (if applicable).
• Shipping Address: Delivery addresses, postal codes, and landmarks.
• Device Information: Hardware models, operating systems, and unique device identifiers.
• Browser Information: Browser type, version, and language preferences.
• Cookies: Session identifiers and tracking data (see Section 8).
• IP Address: Internet Protocol addresses for security and localization.
• Order History: Records of products purchased, pricing, and fulfillment status.
• Wishlist: Items saved for future reference.
• Customer Reviews: Feedback, ratings, and comments submitted on the Platform.
• Communications: Records of emails, chats, and calls with our customer support teams.

4. How We Collect Information

• Registration: When you create an account on the Platform.
• Checkout: When you place an order and provide billing/shipping details.
• Contact Forms: When you submit inquiries through our contact pages.
• Newsletter: When you subscribe to our marketing emails.
• Cookies: Automatically collected as you navigate the Platform.
• Customer Support: When you communicate with our representatives.
• Social Login: When you choose to log in using third-party social media accounts.
• Third-party Integrations: From our logistics and payment partners regarding the status of your transactions.

5. Purpose of Processing

• Order Processing: To manage your purchases, generate invoices, and execute transactions.
• Payment Verification: To authenticate payments securely via our payment aggregators.
• Delivery: To coordinate with logistics partners for the successful dispatch and delivery of your orders.
• Customer Support: To resolve queries, handle returns, and manage refunds.
• Fraud Prevention: To detect and prevent fraudulent transactions and unauthorized account access.
• Marketing: To send promotional offers, newsletters, and exclusive discounts (subject to your opt-in consent).
• Product Recommendations: To personalize your shopping experience.
• Analytics: To analyze user behavior, improve website performance, and optimize our catalog.
• Legal Compliance: To comply with applicable tax, corporate, and e-commerce laws.
• Security: To maintain the integrity of our network and safeguard User data.

6. Legal Basis

• Consent: When you explicitly agree to receive marketing communications or accept non-essential cookies.
• Contractual Necessity: When processing is required to fulfill our contract with you.
• Legal Obligations: When we are required to retain records for tax auditing or law enforcement purposes.
• Legitimate Interests: When processing is necessary for our legitimate business interests provided these do not override your fundamental rights.

7. Payment Security

The security of your financial data is paramount. We do not store, process, or transmit complete debit/credit card information or UPI PINs on our company servers.

• Payment Gateways: All online transactions are processed securely through our authorized payment gateway partners.
• PCI-DSS Compliance: Our payment partners are fully compliant with the Payment Card Industry Data Security Standard (PCI-DSS).
• SSL Encryption: All data transmitted between your browser and our payment gateways is encrypted utilizing SSL / TLS technology.

8. Cookies Policy

Our Platform uses cookies to distinguish you from other users, providing a seamless browsing experience.

• Essential Cookies: Strictly necessary for the operation of the Platform.
• Analytics Cookies: Help us understand how visitors interact with the website.
• Functional Cookies: Allow the Platform to remember choices you make.
• Marketing Cookies: Used to track visitors across websites to display relevant ads.

Disabling Cookies: You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

9. Data Sharing

We never sell personal information to third parties.

We may share your data solely with trusted entities to facilitate our services:

• Payment Gateways: For secure payment processing.
• Shipping Partners & Courier Companies: For the physical delivery of your orders.
• Government Authorities: When mandated by law, court order, or regulatory frameworks.
• Technology Providers: Cloud hosting services, CRM software, and email service providers necessary for our operations.
• Analytics Services: Third-party tools to monitor and analyze website traffic.

10. Data Retention

• Orders & Tax Records: Retained for a minimum of 7 years to comply with Indian financial and tax laws.
• Customer Accounts: Retained as long as your account remains active.
• Marketing Preferences: Retained until you withdraw your consent or unsubscribe.

11. User Rights

Depending on your jurisdiction, and strictly in accordance with the DPDP Act, 2023, you hold the following rights:

• Access: The right to request copies of your personal data.
• Correct: The right to request correction of inaccurate or incomplete data.
• Delete: The right to request the erasure of your personal data (Right to be Forgotten).
• Withdraw Consent: The right to withdraw consent for data processing at any time.
• Data Portability: The right to request the transfer of your data to another organization.
• Lodge Complaints: The right to file a grievance with the Data Protection Board of India or our Grievance Officer.

12. Data Security

• Encryption: Data at rest and in transit is secured using modern cryptographic protocols.
• Firewalls: Enterprise-grade firewalls protect our server infrastructure.
• Access Control: Strict Role-Based Access Control (RBAC) ensures only authorized personnel can access sensitive data.
• Monitoring: Continuous network monitoring to detect and mitigate potential cyber threats.
• Secure Servers: Data is hosted in secure, compliant cloud environments.
• Employee Confidentiality: All staff and contractors are bound by stringent NDAs.

13. Children's Privacy

Our Platform is not directed to, nor do we knowingly collect personal data from, children under the age of 18. If you are under 18, you may use the Platform only with the involvement and consent of a parent or guardian.

14. International Transfers

PravahsHandicrafts Private Limited is based in India. Your information may be transferred to, and maintained on, servers located outside of your state, province, or country, where data protection laws may differ. If we transfer data internationally, we ensure appropriate safeguards are in place.

15. Third-Party Links

Our Platform may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites.

16. Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or regulatory obligations. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.