Privacy policy

Kaswan & Craft, operating the brand Thar Craft ("Thar Craft", "we", "us", "our"), respects your privacy. This policy explains what personal data we collect through [www.tharcraft.com] and our related channels, why we collect it, how we use and share it, and the rights you have over it.

This policy is issued in accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023 and the rules made thereunder, as applicable.

By using our website or placing an order, you agree to this policy.

1. Information we collect

You give us directly:

Name, email address, phone number
Billing and shipping address
Order and transaction history
Account login details, if you create an account
Communications with our support team, reviews, and survey responses
Any details you provide for customised orders

Collected automatically:

IP address, device type, browser type, operating system
Pages visited, time spent, referring URLs, click behaviour
Cookies and similar technologies (see Section 6)

From third parties:

Order and payment confirmations from payment gateways
Delivery status from courier partners
Aggregated analytics and advertising data from platforms such as Google and Meta

Payment information: We do not store your card, UPI or net banking credentials. All payments are processed by PCI-DSS compliant payment gateways such as [Shopify Payments / Razorpay / PayU]. We receive only a confirmation of payment and limited transaction details.

2. How we use your information

To process, fulfil and deliver your orders
To send order confirmations, dispatch and delivery updates
To handle returns, exchanges, refunds and warranty claims
To respond to your queries and provide customer support
To send marketing communications, offers and new product announcements, where you have consented
To improve our website, products, merchandising and service
To detect, prevent and investigate fraud, abuse and security incidents
To comply with legal, tax and regulatory obligations

3. Legal basis for processing

We process personal data on the basis of your consent, and for certain legitimate uses permitted under applicable law — including fulfilling an order you have placed, meeting legal obligations, and preventing fraud. You may withdraw consent at any time (see Section 8), though this may limit our ability to serve you.

4. How we share your information

We share personal data only as needed, with:

E-commerce platform: Shopify Inc., which hosts our online store
Payment gateways: to process your payments securely
Logistics and courier partners: name, address and phone number, to deliver your order
Communication and marketing tools: email and SMS/WhatsApp service providers, where you have opted in
Analytics and advertising providers: such as Google Analytics and Meta, generally in aggregated or pseudonymised form
Professional advisers: accountants, auditors and lawyers, under confidentiality
Authorities: where disclosure is required by law, court order or a lawful government request

We do not sell your personal data.

5. Data transfers

Some of our service providers, including Shopify, may store or process data on servers located outside India. Where this happens, we take reasonable steps to ensure your data continues to receive appropriate protection, consistent with applicable Indian law.

6. Cookies

We use cookies and similar technologies to keep your cart working, remember your preferences, understand how the site is used, and show relevant advertising. You can block or delete cookies through your browser settings, but some parts of the site may not function properly if you do.

7. Data retention

We keep personal data only as long as necessary for the purposes described above, or as required by tax, accounting and other laws — typically [8] years for transaction and invoice records. When data is no longer needed, we delete or anonymise it.

8. Your rights

Subject to applicable law, you have the right to:

Access a summary of the personal data we hold about you and how we process it
Correct inaccurate, incomplete or outdated data
Erase your personal data, where it is no longer required and no legal obligation requires us to retain it
Withdraw consent at any time, including unsubscribing from marketing emails via the link in every email or by writing to us
Nominate another individual to exercise your rights in the event of your death or incapacity
Raise a grievance with us, and escalate to the relevant authority if unsatisfied

To exercise any of these rights, email Help@tharcraft.com. We may ask you to verify your identity before acting on a request, and will respond within the timeframe required by law.

9. Security

We use reasonable technical and organisational safeguards — including SSL encryption, access controls and secure hosting — to protect your data against unauthorised access, alteration, disclosure or destruction. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

10. Children's data

Our store is intended for adults. We do not knowingly collect personal data of children under 18 years of age without verifiable consent from a parent or lawful guardian. If you believe we have collected such data, please contact us and we will delete it.

11. Third-party links

Our site may link to third-party websites and social media pages. We are not responsible for their privacy practices, and encourage you to read their policies.

12. Changes to this policy

We may update this policy from time to time. The revised version will be posted on this page with a new "Last updated" date. Material changes will be notified by email or a prominent notice on the site.

13. Grievance Officer

In accordance with applicable Indian law, the details of our Grievance Officer
Designation: Grievance Officer, Kaswan & Craft Address: Vaishali Nagar, Jaipur, Rajasthan – 302034 Email: Help@tharcraft.com Response time: We acknowledge complaints within 48 hours and endeavour to resolve them within [30 days / one month] of receipt.