Privacy Policy

Last Updated: 22-09-2025

1. Introduction

Welcome to Getkraftz ("we," "our," or "us"). We operate the website Getkraftz (the "Site").

We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a purchase, or interact with us, in compliance with the Indian Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws.

By using our Site, you consent to the data practices described in this policy. If you do not agree with the terms, please do not access or use our Site.

2. Information We Collect

We collect information that can be used to identify you ("Personal Data") as defined under the DPDPA.

A. Personal Information You Provide

When you make a purchase, create an account, or contact us, we may ask you to provide:

  • Identity & Contact Data: Name, email address, shipping and billing address, phone number.
  • Payment Data: Credit/debit card numbers, expiration dates, and security codes.
    Note: We use PCI-DSS compliant third-party payment processors and do not store your full payment card details on our servers.
  • Account Data: A username and password for your account.
  • Communications: Any correspondence you send to us (e.g., customer support inquiries, product reviews).

B. Information Collected Automatically

When you visit our Site, we may automatically collect:

  • Technical Data: Information about your device and internet connection, including your IP address, browser type, operating system, and device identifiers.
  • Usage Data: Information about your interaction with our Site, such as the pages you visit, the products you view, and the time spent on the Site.
  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect the information above. For more details, please see our Cookie Policy section.

3. How We Use Your Information (Purpose of Processing)

We use the information we collect only for the following lawful purposes:

  • To Fulfill Your Contract: To process your orders, payments, deliveries, returns, and exchanges.
  • To Create and Manage Your Account: To create your customer profile and allow you to track orders.
  • To Communicate With You: To send you order confirmations, shipping updates, and respond to your inquiries.
  • For Customer Support: To provide you with support and address your concerns.
  • For Marketing and Advertising (with Consent): To send you promotional emails about new products, special offers, or other information we think you may find interesting. You can opt-out at any time.
  • To Improve Our Site and Services: To analyze how customers use the Site and improve our product offerings and user experience.
  • For Security and Fraud Prevention: To protect our Site and our customers from fraud and security threats.
  • To Comply with Legal Obligations: As required by applicable Indian laws.

4. Legal Basis for Processing (Under DPDPA)

As per the DPDPA, we process your personal data based on the following grounds:

  • Consent: For specific purposes like marketing communications, we will seek your explicit consent. You have the right to withdraw your consent at any time.
  • Legitimate Use: For purposes necessary to provide you with the services you requested, such as fulfilling your order and providing customer support.
  • Legal Obligations: To comply with laws and regulations applicable to us in India.

5. How We Share Your Information

We may share your personal data with third parties only in the following scenarios:

  • Data Processors (Service Providers): We share information with trusted third parties who provide services on our behalf, such as payment processing, shipping and delivery (e.g., Delhivery, DTDC), email marketing, data analysis, and website hosting. These parties are contractually obligated to use your data only to provide these services and to maintain its confidentiality.
  • Legal and Regulatory Authorities: We may disclose information where required by law, subpoena, or other legal process, or to comply with requests from Indian governmental authorities.
  • Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
  • With Your Consent: We may share your information for any other purpose with your explicit consent.

We do not sell your personal data to third parties.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by Indian law (e.g., for tax, accounting, or legal obligations). For example, we will retain order information for 7 years as required by the Indian Companies Act, 2013, and tax laws.

7. Your Rights Under the DPDPA

Under the DPDPA, you have the following rights regarding your personal data:

  • Right to Access & Summary: You have the right to request a summary of the personal data we hold about you and how we process it.
  • Right to Correction and Erasure: You have the right to correct inaccurate or incomplete personal data. You also have the right to request the erasure of your personal data.
  • Right to Grievance Redressal: You have the right to readily available means of registering a grievance with us.
  • Right to Nominate: You have the right to nominate another individual who can exercise your rights in the event of your death or incapacity.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact our Grievance Officer using the details provided in the "Contact Us" section below.

8. Data Security

We implement appropriate technical and organizational security measures designed to protect the security of your personal data, including encryption and secure servers. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

9. International Data Transfers

Your data is primarily stored and processed on servers located within India. However, if we need to transfer your data outside India, we will ensure that such transfers occur only to territories recognized as having adequate data protection laws by the Indian government, or we will implement appropriate safeguards as required by the DPDPA.

10. Grievance Officer

In compliance with the DPDPA and IT Act, 2000, we have appointed a Grievance Officer to address your concerns regarding data protection. If you have any questions or grievances about this Privacy Policy, you can contact:

Name: Rahul Baruah
Email: support@getkraft.com
Address: Pragjyotish Nagar, AEC Road, Guwahati, Kamrup(Metro), Assam, India - 781014

We will respond to all legitimate requests and grievances within the timelines prescribed by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.