Privacy policy

 

Last Updated: 24 December 2025

Karpaa (“Karpaa”, “Company”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit or make a purchase from www.karpaa.in (“Site”) or otherwise interact with our services (collectively, “Services”). By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

If you do not agree with any part of this Privacy Policy, please do not use the Site or provide us with your personal information.

 1. Scope and Legal Basis

This Privacy Policy applies to all users of the Site, including visitors, registered customers, and any person who communicates with us through email, phone, social media, or other channels related to Karpaa.

Karpaa processes your personal information in accordance with applicable Indian law, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDP Act), as may be amended from time to time. Where relevant, Karpaa also takes into account international best practices such as the General Data Protection Regulation (GDPR) and similar global privacy frameworks to the extent they apply.

2. Information We Collect

We collect different types of information depending on how you interact with the Site and our Services.

2.1 Information You Provide Directly

When you voluntarily provide information to us, including during account creation, checkout, or customer support interactions, we may collect: 

  • Identity and contact information: Name, email address, mobile number, shipping and billing address.
  • Order and transaction information: Products purchased, order values, payment status, preferred shipping options, and related communications. 
  • Payment information: Limited payment details such as payment method and transaction identifiers. Full card or banking details are collected and processed directly by our payment gateway providers and Shopify; Karpaa does not store your full payment card information on its own servers. 
  •  Account information: Username, encrypted password, preferences, and saved addresses (if you create an account).
  • Communications: Content of your messages, reviews, feedback, or inquiries sent via email, forms, chat, or social media.
2.2 Information Collected Automatically

When you visit or use the Site, certain information is automatically collected using cookies, pixels, and similar technologies. This may include:

  • Technical data: IP address, device identifiers, browser type, operating system, language settings, and approximate location based on IP.
  • Usage data: Pages visited, products viewed, time and date of visits, time spent on pages, clickstream data, referring URLs, and interactions with banners or forms.
  • Log data: Error logs, access logs, and other diagnostic information for security and performance analysis.
2.3 Information from Third Parties

We may receive information about you from trusted third parties, such as:

  • Platform provider: Shopify, which powers our ecommerce infrastructure and may collect and process certain information on our behalf.
  • Payment processors: Such as Razor pay, PayPal, or other gateways that process your payments securely and send us confirmation of payment status.
  • Analytics and marketing partners: Such as Google Analytics, Meta (Facebook/Instagram), and advertising networks that help us understand user behavior and deliver relevant ads. Any personal information received from third parties is treated in accordance with this Privacy Policy.

3. How We Use Your Information

We use the information we collect for one or more of the following purposes, in line with applicable law and your reasonable expectations:

  • Providing and operating the Services:
    • Process orders, accept payments, arrange shipping and delivery, handle returns and exchanges, and provide invoices or receipts. 
  • Account management:
    • Create and maintain your customer account, remember your preferences, and provide a personalized shopping experience. 
  • Customer support:
    • Respond to your inquiries, complaints, and requests; provide after-sales support; and communicate important service-related information. 
  • Improvement and analytics:
    • Analyze Site performance, understand user behavior and preferences, improve our products and services, and develop new features or offerings. 
  • Marketing and promotions:
    • Send you promotional messages, newsletters, offers, abandoned cart reminders, and recommendations based on your interactions and purchase history, as permitted by law. You may opt out of marketing at any time (see Section 9). 
  • Security, fraud prevention, and compliance:
    • Detect and prevent fraudulent transactions, abusive activity, or security incidents; enforce our terms and policies; and comply with legal, regulatory, and tax obligations.

Where required, we rely on your consent (for example, for certain marketing activities or cookies), performance of a contract (for processing orders), compliance with legal obligations, or legitimate interests such as improving our services and protecting our business.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure the Site functions properly, to understand how you use the Site, and to provide you with a better, more personalized experience.

Types of cookies we may use include:

  • Strictly necessary cookies: Required for core site functionality such as cart, checkout, and account login.
  • Performance and analytics cookies: Used by tools like Google Analytics to measure traffic, usage patterns, and performance.
  • Functional cookies: Remember your preferences (such as language or region) and improve usability.
  • Advertising and marketing cookies: Used by us and our partners (such as Meta and Google Ads) to deliver relevant advertisements and measure campaign effectiveness.

 You can manage or disable cookies in your browser settings. However, disabling certain cookies may affect the functionality and user experience of the Site.

5. How We Share Your Information

Karpaa does not sell your personal information. We only share your information in limited circumstances and with appropriate safeguards.

We may disclose your information to:

  • Service providers and vendors:
    • Shopify (store platform), payment gateways, shipping and logistics partners, IT and cloud hosting providers, email and SMS providers, analytics and marketing partners, and professional advisers (such as auditors or legal counsel). These parties are required to use your information only to perform services for us and to protect it appropriately. 
  • Affiliates and group entities:
    • Where necessary for internal business, operational, or administrative purposes, subject to this Privacy Policy. 
  • Law enforcement, regulators, and government authorities:
    • Where required by applicable law, regulation, legal process, or governmental request, or to protect our rights, property, or safety or that of others. 
  • Business transfers:
    • In connection with any merger, acquisition, restructuring, or sale of all or part of our business or assets, your information may be transferred to the relevant third party, subject to privacy protections consistent with this Policy. 

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration, or destruction. These measures may include SSL encryption, access controls, secure server environments, and regular security reviews.

Despite our efforts, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

  • To provide the Services and complete transactions.
  • To comply with legal, regulatory, accounting, or reporting requirements.
  • To resolve disputes and enforce our agreements.

Where information is no longer required, it will be securely deleted, anonymized, or otherwise processed in accordance with applicable law. 

8. International Transfers

Your information may be stored and processed in India or in other jurisdictions where our service providers operate. Data in these locations may be subject to laws different from those in your jurisdiction.

By using the Site, you consent to the transfer of your information outside your country of residence, subject to reasonable safeguards and as permitted by law. Where required, we will rely on contractual protections or other lawful transfer mechanisms.

9. Your Rights and Choices

Subject to applicable law, you may have the following rights in relation to your personal information:

  • Right to access: Request confirmation whether we process your personal information and obtain a copy of such information.
  • Right to correction: Request correction or updating of inaccurate or incomplete data.
  • Right to deletion: Request deletion of your personal information, subject to legal or contractual retention obligations.
  • Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
  • Right to restrict or object: In some cases, request restriction of processing or object to certain types of processing, such as direct marketing.
  • Marketing preferences: opt out of marketing communications at any time by using the unsubscribe link in emails or by contacting us. Even if you opt out of marketing, you may still receive transactional or service-related messages (such as order confirmations).

To exercise any of these rights, please contact us using the details in Section 12. We may request additional information to verify your identity before processing your request, as required by law.

10. Third-Party Sites and Services

The Site may contain links to third-party websites, applications, or services. These third parties have their own privacy practices, which may differ from ours. We are not responsible for the content or privacy policies of such third-party sites, and you are encouraged to review their policies before providing any information.

11. Updates to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we update the Policy, we will revise the “Last Updated” date at the top of this page. In some cases, we may provide additional notice (such as a banner or email). Your continued use of the Site after such changes constitutes acceptance of the updated Privacy Policy. 

12. Contact Us

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, you may contact us at:

Karpaa

Email: support@karpaa.in

Website: www.karpaa.in

Address: 23, Bajrang Nagar Vistar, Malpura Gate, Sanganer, Jaipur, Rajasthan, India(302029)

Phone: +91 9784064425

Business Hours: Monday to Saturday, 10:00 AM – 7:00 PM

Karpaa is committed to addressing your concerns promptly and to handling your personal information in a fair, transparent, and secure manner.