Privacy Policy

Effective Date: 26th July 2026

This Privacy Policy explains how Craftivaa collects, uses, shares, and protects personal information when you visit or shop from our website, craftivaa.in, or otherwise interact with us. This draft is aligned to the Digital Personal Data Protection Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020, which require clear notice, lawful processing, user rights, and a grievance mechanism for e-commerce businesses in India.

1) Information We Collect

We collect information that you provide directly to us, information collected automatically, and information received from third parties.

Information you provide directly

• Name

• Email address

• Phone number

• Billing address and shipping address

• Company name, if provided

• Order details

• Messages sent through our contact forms, email, WhatsApp, or customer support

• Any customization details, artwork, logos, or instructions you provide for corporate gifting orders

Information collected automatically

• IP address

• Browser type and version

• Device information

• Pages viewed and time spent on the site

• Referring website or source

• Cookies and similar tracking technologies

Information from third parties
We may receive information from payment gateways, logistics partners, advertising platforms, analytics providers, and other service providers that help us operate our store and fulfill orders.

2) How We Use Information

We use personal information for the following purposes:

• To process and fulfill your orders

• To deliver products and provide order updates

• To manage payments, refunds, and invoicing

• To respond to inquiries and provide customer support

• To personalize products, packaging, and services

• To improve our website, products, and customer experience

• To send important service messages, such as order confirmations and shipping updates

• To send marketing communications, promotions, and offers, where permitted by law and where you have not opted out

• To detect fraud, misuse, or suspicious activity

• To comply with legal, accounting, tax, and regulatory requirements

We process personal data only for lawful purposes and, where required, based on consent or other permitted grounds under Indian law. Requests for consent must be clear and plain, and consent may be withdrawn with comparable ease.

3) Cookies and Similar Technologies

We use cookies and similar technologies to help our website work properly and to improve your browsing experience.

Cookies may be used for:

• Essential site functions

• Remembering your preferences

• Analytics and performance measurement

• Understanding how visitors use our website

• Marketing and remarketing, where applicable

You can usually control cookies through your browser settings. However, disabling some cookies may affect the functionality of our website.

4) Third-Party Services

We may share information with trusted third-party service providers that help us run our business, including:

• Payment processors

• Shipping and logistics partners

• Website hosting and IT service providers

• Analytics providers

• Marketing and advertising platforms

• Customer support and communication tools

These third parties are authorized to use your information only as necessary to provide services to us or to comply with legal obligations. Their own privacy policies may also apply when you use their services.

We may also disclose information if required to do so by law, court order, government request, or to protect our rights, customers, or business.

5) Data Security

We take reasonable administrative, technical, and physical measures to protect personal information against unauthorized access, alteration, disclosure, or destruction.

These measures may include:

• Access controls

• Secure systems and passwords

• Encryption where appropriate

• Regular monitoring of systems

• Limiting internal access to personal data on a need-to-know basis

While we work to protect your information, no online system can be guaranteed to be completely secure. Please use caution when sharing sensitive information online.

6) Data Retention

We keep personal information only for as long as necessary to:

• Fulfill the purposes described in this Policy

• Complete orders and customer support

• Maintain business and financial records

• Comply with tax, accounting, legal, and regulatory obligations

• Resolve disputes and enforce agreements

When information is no longer needed, we will delete it or anonymize it where reasonably possible, subject to legal retention requirements.

7) Customer Rights

Subject to applicable law, you may have the right to:

• Access a summary of your personal data and how it is being processed

• Know the identities of parties with whom your personal data has been shared, where applicable

• Request correction, completion, updating, or erasure of your personal data

• Withdraw consent where processing is based on consent

• Request grievance redressal

• Nominate another individual to exercise your rights in the event of death or incapacity, where applicable under law

To exercise these rights, contact us using the details below. We may need to verify your identity before acting on your request.

If you have a grievance, you may contact us first so we can try to resolve it promptly. Under the Consumer Protection (E-Commerce) Rules, 2020, e-commerce entities are required to establish a grievance redressal mechanism, display grievance officer details, acknowledge consumer complaints within 48 hours, and redress them within one month.

8) Children's Privacy

Our website and services are intended for business and adult customers. We do not knowingly collect personal information from children without appropriate consent where required by law. If you believe a child has provided us with personal data, please contact us so we can review and take appropriate action.

9) International Transfers

If personal information is transferred to service providers or systems located outside India, we will take reasonable steps to ensure appropriate protection for that information in accordance with applicable law and our internal controls.

10) Marketing Communications

If you subscribe to our emails or provide your contact details during checkout, we may send you product updates, offers, and other marketing messages. You can opt out at any time by using the unsubscribe link in our emails or by contacting us directly.

11) Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third-party platforms. We encourage you to review their privacy policies before sharing any information.

12) Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make changes, we will post the updated version on this page and revise the Effective Date above. Your continued use of our website after changes are posted means you accept the updated Policy.

13) Contact Information

If you have questions, concerns, or requests about this Privacy Policy or your personal data, please contact us at:

Craftivaa
Email: Craftivaa.co@gmail.com
Address: CBD Belapur, Navi Mumbai
Phone: 8591015160
Website: craftivaa.in

14) Consent

By using our website, placing an order, or interacting with our services, you acknowledge that you have read and understood this Privacy Policy. Where required, we will ask for your consent before collecting or using your personal information for specific purposes. Any consent request will be presented in clear and plain language and will include the contact details of the relevant person for rights-related communication.