EFFECTIVE 2 SEPTEMBER 2026 · LAST UPDATED 2 SEPTEMBER 2026 · VERSION 2.0
This Privacy Policy explains what personal information Kala Creation collects when you use our Website or buy from us, why we collect it, how we use and protect it, and what rights you have over it.
1. Who We Are and What This Policy Covers
Kala Creation (“we”, “us”, “our”) operates the website kalacreation.in and sells Indian ethnic wear, Indo-Western wear and bottom wear through that website and through our physical stores in Ahmedabad. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Kala Creation is the Data Fiduciary in respect of the personal data described in this policy, and you are the Data Principal.
This policy applies to personal data we collect through our Website and our online sales channels. It does not apply to any third-party website you reach through a link on our site.
2. Information We Collect
| CATEGORY | WHAT IT INCLUDES | WHY WE COLLECT IT |
|---|---|---|
| Order and contact information | Name, billing address, shipping address, email address, phone number. | To process, fulfill and deliver your Order and to contact you about it. |
| Transaction information | Order history, amounts paid, payment method type, and the status of any return or refund. We do not collect or store your full card number, CVV or UPI PIN. | To take payment, keep accounts and tax records, and handle returns. |
| Account information | Login credentials and saved preferences, if you create an account. | To let you sign in, track orders and save addresses. |
| Technical information | IP address, browser type and version, operating system, device type, referring pages, and pages viewed on our site. | To keep the site secure, diagnose problems and understand how the site is used. |
| Communications | Messages, enquiries, reviews and complaints you send us by email, phone or through the site. | To answer you and to resolve grievances. |
We do not knowingly collect sensitive categories of data such as health information, biomet‐ ric data or government identity numbers, and you should not send such information to us.
3. How We Use Your Information
We use your personal data only for the purposes for which it was collected, namely to:
- process, confirm, pack, dispatch and deliver your Orders;
- take payment and issue invoices and refunds;
- communicate with you about an Order, a delivery, a return or an enquiry;
- handle returns, exchanges, warranty questions and grievances;
- maintain and secure our Website and prevent fraud and misuse;
- meet our obligations under tax, accounting, consumer protection and other applicable
law; and - where you have separately consented, send you marketing communications about new collections, offers and store news.
We do not sell your personal data, and we do not use it to build advertising profiles about you.
4. Consent and How to Withdraw It
How we obtain your consent
When you provide us with personal data to complete a transaction, verify a payment, place an Order, arrange a delivery or return a purchase, you consent to our collecting it and using it for that specific purpose.
Where we wish to use your personal data for a secondary purpose — such as marketing — we will ask for your express consent separately, and give you a clear opportunity to decline. Declining marketing does not affect your ability to shop with us.
How to withdraw your consent
You may withdraw your consent to the collection, use or disclosure of your personal data at any time, and doing so is as straightforward as giving it. Write to us at cre‐ ationkala296@gmail.com, call +91 81606 75079, or use the unsubscribe link in any marketing email you receive from us.
Withdrawing consent takes effect going forward. It does not affect the lawfulness of any‐ thing we did with your data before you withdrew it, and it does not remove data we are required by law to retain — for example, invoice and tax records.
5. Cookies and Similar Technologies
We use cookies — small text files stored on your device — to keep your session active as you move through the site, to remember the contents of your shopping bag, and to understand in aggregate how our site is used so that we can improve it. Cookies set by us are not used to identify you personally on other websites.
You can control or delete cookies through your browser settings. Please note that disabling cookies may prevent parts of the Website, including checkout, from working correctly.
6. Payments
We use authorised third-party payment gateways to process payments. Neither we nor our payment partners store your card data on our servers. Card data is encrypted in transit in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
Our payment gateway adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint effort of card networks including Visa, Mastercard, American Express, RuPay and Discover. These requirements help ensure the secure handling of payment card information by our store and its service providers.
Your purchase transaction data is used only for as long as is necessary to complete your purchase, after which the transaction details we retain are limited to what we need for accounting, tax and returns purposes.
7. Sharing and Disclosure
We share your personal data only with the parties and for the purposes listed below:
- Courier and logistics partners — your name, delivery address and phone number, so that your Order can be delivered.
- Payment gateways and banks — the information necessary to process your payment or refund.
- Technology service providers — website hosting, email and order-management providers who process data on our behalf and under contract.
- Professional advisers and authorities — where we are required to disclose information by law, by a court order, or by a lawful request from a government authority, or where disclosure is necessary to enforce our Terms & Conditions or protect our rights.
Our service providers are permitted to use your data only to the extent necessary to perform the services they provide to us.
8. Third-Party Services and Links
Certain third-party service providers, such as payment gateways and payment transaction processors, have their own privacy policies governing the information we are required to provide to them for your purchase-related transactions. We recommend that you read those policies so that you understand how your personal data will be handled by those providers.
Some providers may be located in, or have facilities located in, a jurisdiction different from yours or ours. If you proceed with a transaction involving such a provider, your information may become subject to the laws of the jurisdiction in which that provider or its facilities are located. Where personal data is transferred outside India, we do so only in accordance with the DPDP Act and any restrictions notified by the Central Government.
When you click on a link on our store, it may direct you away from our site. Once you leave our Website or are redirected to a third-party website or application, you are no longer gov‐ erned by this Privacy Policy or by our Terms & Conditions. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
9. Data Retention
We retain your personal data only for as long as the purpose for which it was collected con‐ tinues to be served, or for as long as we are required to retain it under applicable law — whichever is longer. In practice:
- order, invoice and payment records are retained for the period required under Indian tax and accounting law;
- account data is retained while your account remains active, and is erased on request after that;
- grievance and correspondence records are retained for a reasonable period after the matter is closed; and
- technical logs are retained for a limited period for security and diagnostic purposes.
When personal data is no longer needed and we are not required to keep it, we erase it
10. Data Security
To protect your personal data we take reasonable security safeguards and follow industry practice to prevent it from being lost, misused, accessed without authorisation, disclosed, altered or destroyed. These measures include encryption of data in transit, restricted access to customer records, and contractual obligations on the service providers who process data for us.
No method of transmission over the internet or of electronic storage is completely secure. While we work to protect your personal data, we cannot guarantee its absolute security. If a personal data breach occurs, we will notify you and the Data Protection Board of India as required under the DPDP Act.
11. Your Rights
Under the DPDP Act, you have the following rights in relation to your personal data:
- Right to access — to obtain a summary of the personal data we hold about you and how it is being processed, and the identities of those with whom it has been shared.
- Right to correction and erasure — to have inaccurate or misleading data corrected or completed, and to have data erased where it is no longer needed and we are not required by law to retain it.
- Right to grievance redressal — to a readily available means of raising a complaint with us about our handling of your data, and to a response within the timelines set out below.
- Right to nominate — to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent — as described in Section 4 above.
To exercise any of these rights, contact us using the details in Section 16. We may need to verify your identity before acting on a request. We will respond within thirty (30) days, and in any case within the ninety (90) day period prescribed for the resolution of data grievances.
12. Children
Our Website is not directed at children. By using this Website you represent that you are at least eighteen (18) years of age, being the age of majority under the Indian Majority Act, 1875. Where a person under 18 is to use this Website or make a purchase, it must be with the consent and under the supervision of a parent or legal guardian, and we will process a child’s personal data only with verifiable parental consent as required under the DPDP Act. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
13. Marketing Communications
With your permission, we may send you emails or messages about our store, new collec‐ tions, offers and other updates. Every marketing message includes a means of opting out, and you can also opt out at any time by writing to creationkala296@gmail.com. Transaction‐ al messages relating to an Order you have placed — order confirmations, dispatch notices and delivery updates — are not marketing and will continue to be sent.
14. Business Transfers
If Kala Creation is acquired by or merged with another business, your personal data may be transferred to the new owners so that we may continue to serve you. In that event we will notify you, and the new owner will be bound by commitments no less protective than those in this Privacy Policy.
15. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time, so please review it periodic‐ ally. Changes and clarifications take effect immediately upon their posting on the Website. If we make material changes to this policy, we will say so on this page and update the “last up‐ dated” date above, so that you are aware of what information we collect, how we use it, and under what circumstances we disclose it.
16. Contact and Grievance Redressal
For any question about this Privacy Policy, to exercise any of your rights, or to raise a com‐ plaint about how we have handled your personal data, contact our Grievance Officer. We ac‐ knowledge complaints within forty-eight (48) hours and resolve them within one (1) month, and in all cases within the ninety (90) day period prescribed for data grievances under the DPDP framework.
GRIEVANCE OFFICER – KALA CREATION
| creationkala296@gmail.com | |
| Primary phone | +91 81606 75079 |
| Secondary phone | +91 96013 69073 |
| Postal address | 101, 1st Floor, Serenity Square, Navrang Circle, Navrangpura, Ahmedabad – 380009, Gujarat, India |
| Hours | Monday to Saturday, 11:00 – 20:00 IST |
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.
