Privacy Policy

1. Information We Collect

When you browse, shop, or interact with The Khadeejah of Kashmir, we may collect the following information:

• Personal details — name, email address, phone/WhatsApp number, shipping and billing addresses
• Account information — login credentials, measurement profiles, wishlists, and saved addresses
• Order & payment data — purchase history, transaction references (processed securely through Razorpay; we never store your card details)
• Communication records — messages sent via the contact form, WhatsApp, or email
• Device & usage data — IP address, browser type, pages viewed, and cookies (used solely to improve your experience)

2. How We Use Your Information

• Process and fulfil your orders, including shipping and delivery updates
• Manage your account, loyalty points, and measurement profiles
• Respond to enquiries, service requests, and customer support messages
• Send order confirmations, invoices, and essential transactional emails
• Improve our website, product offerings, and overall shopping experience
• Comply with applicable Indian laws and regulations (including GST)

3. Information Sharing

We never sell your personal information. We only share data with:

• Payment processors — Razorpay, to securely handle transactions
• Shipping & logistics partners — to deliver your orders
• Service providers — hosting, email delivery, and analytics tools that help us operate
• Legal obligations — when required by Indian law, court order, or to protect our rights

All third-party service providers are contractually bound to protect your data and use it only for the specified purpose.

4. Cookies

We use essential cookies to keep your shopping cart active and your session secure. We may also use analytics cookies (such as Google Analytics) to understand how visitors use our site. You can disable cookies in your browser settings, but some features of the website may not function properly.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption on all pages
• Secure password hashing (bcrypt)
• CSRF protection on all forms
• Rate-limited login and password reset endpoints
• Regular security reviews and updates

While we take every reasonable precaution, no method of transmission over the Internet is 100% secure. We encourage you to use strong, unique passwords for your account.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Order records are retained as required under Indian tax and accounting regulations. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Opt out of promotional communications at any time
• Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us using the details below.

8. Third-Party Links

Our website may contain links to external websites (e.g., social media profiles). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.