Privacy Policy

This policy explains what personal information Kanha Kishori collects when you visit kanhakishori.com or place an order with us, how we use it, and the choices you have. We keep this deliberately short and readable — no lawyer-speak.

Who we are

Kanha Kishori is a handcrafted-adornments atelier operating from Prestige Tranquility, Budigere Cross, Bangalore 560049. Contact: +91 99800 42923.

What we collect

• Order details: your name, phone number, delivery address (flat / society / city / state / pincode), and the items you order. Payment method (UPI / cash / prepaid).
• Shipping-form data: when you fill in a shipping address via a magic link, that address is stored against your order for Delhivery to pick up.
• Browsing data:anonymous session data (device type, referrer, pages visited) via server logs. We don’t use third-party analytics that build a cross-site profile of you.
• Bag / cart data:the items you add to your bag are stored in your browser’s local storage — this lives only on your device and syncs to us only when you submit an enquiry.

What we don’t collect

• Card numbers or CVVs — we don’t handle card payments directly.
• Cross-site advertising identifiers or third-party tracking cookies.
• Location data beyond the delivery address you enter.

How we use it

• To process and dispatch your order (including handing the address to Delhivery for pickup + delivery).
• To send you order updates over WhatsApp (bill, dispatch, tracking).
• To handle returns, refunds, and questions you raise.
• To improve the catalog and shop experience (e.g. which products get the most enquiries).

Who we share it with

Your data is shared with the following third parties, only to the extent needed to fulfil an order:

• Delhivery — the courier we use for shipping. Gets name, phone, and delivery address for the shipment they carry.
• Supabase — our database + auth provider. Stores order records securely (SOC 2 Type 2 certified).
• Cloudflare — hosts our product photos + caches the site. No personal information passes through here.
• Hostinger — hosts the website itself. Server logs (IP addresses, page requests) sit here for standard security / uptime purposes.

We do not sell, rent, or trade your data to any third party. We don’t use it for marketing beyond order-related messages.

How long we keep it

• Order records: 7 years (required for GST + tax records).
• Server logs: 30 days.
• Local-storage bag data: lives on your device until you clear it or 24 hours pass.

Your rights

You can ask us to:

• Show you what personal data we hold about you.
• Correct wrong or outdated information.
• Delete your account records (subject to the 7-year retention needed for tax purposes on completed orders).

WhatsApp us at +91 99800 42923 with the request and we’ll respond within 7 business days.

Security

The site runs on HTTPS end-to-end. Order records are stored in a Supabase database protected by row-level security policies — only authenticated staff can read them. Passwords (for staff logins) are hashed and never stored in plain text.

Changes to this policy

If we materially change how we handle data, we’ll update the “Last updated” date at the top of this page and, for material changes, notify existing customers on WhatsApp.

Questions

WhatsApp us at +91 99800 42923. Monday to Saturday, 10:00 to 18:00 IST.