Privacy Policy for Durga Craft World
Effective Date: November 24, 2024
Durga Craft World (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy outlines how we collect, use, store, and share your personal information when you visit our website, durgacraftworld.com, and engage with our services. It also explains your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR), and how you can exercise them.
1. Data Controller Information
The data controller for your personal information is:
Durga Craft World
1/182, Mansarovar Yojna, Kanpur Road,
Lucknow, Uttar Pradesh, India – 226012
Email: durgacraftworld@gmail.com
2. Information We Collect
We collect and process the following types of personal data:
(a) Information You Provide to Us
- Account Information: When you create an account or make a purchase, we collect your name, email address, phone number, billing and shipping address, and payment details.
- Contact Forms: When you contact us via email or forms on our website, we collect your name, email, and any other information you provide.
(b) Information We Collect Automatically
- Device Data: IP address, browser type, operating system, and device information.
- Usage Data: Pages visited, time spent on our website, and other analytics data via cookies and similar technologies.
(c) Information from Third Parties
- Payment processors and shipping providers may share information to fulfil your orders.
3. How We Use Your Information
We use your personal data for the following purposes:
- Order Fulfillment: Processing payments, shipping products, and providing order-related updates.
- Customer Support: Responding to your inquiries and resolving issues.
- Marketing and Promotions: Sending newsletters and promotional offers (only with your explicit consent).
- Website Improvement: Monitoring and improving website functionality and user experience.
- Legal Compliance: Complying with legal obligations, such as tax and accounting requirements.
4. Legal Basis for Processing
Under GDPR, we rely on the following legal bases for processing your data:
- Contractual Necessity: To process your orders and deliver products.
- Legitimate Interests: To improve our website and provide customer support.
- Consent: For sending marketing communications (you can withdraw consent at any time).
- Legal Obligation: To comply with applicable laws and regulations.
5. How We Share Your Information
We do not sell or rent your personal data. However, we may share your data with:
- Service Providers: Payment processors, shipping companies, and IT service providers.
- Legal Authorities: When required to comply with legal obligations or protect our rights.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting obligations.
- Order Data: Retained for 7 years for tax compliance.
- Marketing Data: Retained until you opt out.
7. Security Measures
We implement technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure, including:
- SSL encryption for secure data transmission.
- Regular security audits and data access controls.
- Secure third-party payment processing (we do not store payment details directly).
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Access: Request a copy of your personal data.
- Correction: Request corrections to inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal obligations.
- Restriction: Request a restriction on the processing of your data.
- Portability: Request to transfer your data to another controller in a machine-readable format.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Withdraw Consent: Withdraw consent for data processing at any time.
To exercise these rights, contact us at durgacraftworld@gmail.com.
9. Cookies and Tracking Technologies
We use cookies to:
- Remember your preferences.
- Provide personalized content.
- Analyze website performance and usage.
You can manage your cookie preferences through your browser settings.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites.
11. International Data Transfers
If you access our website from outside India, your data may be transferred to and processed in India, which may have different data protection laws. We ensure such transfers comply with GDPR through appropriate safeguards.
12. Changes to This Privacy Policy
We may update this policy to reflect changes in our practices or legal obligations. Updates will be posted on this page, with the “Effective Date” updated accordingly.
13. Contact Us
If you have questions or concerns about this Privacy Policy or your data, contact us:
Durga Craft World
Email: durgacraftworld@gmail.com
Address: 1/182, Mansarovar Yojna, Kanpur Road, Lucknow, Uttar Pradesh, India – 226012
This Privacy Policy ensures transparency and compliance with GDPR standards, protecting user privacy effectively.