Privacy Policy

1 Data We Collect

We collect the following categories of personal data:

2 How We Use Your Data

• Process and fulfil your orders, including customization proofs
• Send order confirmations, shipping updates, and delivery notifications
• Provide customer support and respond to your enquiries
• Personalise your browsing experience and product recommendations
• Send promotional emails and offers (with your consent; unsubscribe anytime)
• Comply with legal obligations (GST filings, customs declarations)
• Detect, prevent and investigate fraud or misuse

3 Data Sharing

We do not sell your personal data. We share data only with trusted partners who are contractually bound to protect it:

• Logistics partners (Delhivery, Blue Dart, FedEx) — for order delivery
• Payment processors (Razorpay, Stripe) — for secure payment processing
• Analytics providers (Google Analytics with IP anonymisation) — for site improvement
• Legal authorities — only when required by law or court order

4 Cookies

We use strictly necessary cookies (session management, cart state), functional cookies (preferences, language), and analytics cookies (Google Analytics). You may disable non-essential cookies through your browser settings at any time. Disabling cookies may affect the functionality of the checkout process.

5 Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected. Order records are retained for 7 years to comply with GST and accounting regulations. Marketing consent records are retained for 3 years after the last interaction.

6 Your Rights

Under applicable data protection laws, you have the right to:

To exercise any of these rights, email privacy@giftnkraft.com. We will respond within 30 days.

7 Security

We implement industry-standard security measures including SSL/TLS encryption, access controls, and regular security audits. Payments are processed through PCI-DSS compliant gateways. While no method of transmission over the internet is 100% secure, we take all reasonable precautions.

8 Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately.

9 Contact Our Privacy Team