PRIVACY POLICY

Effective Date: 18 October 2026
Welcome to www.krrishu.com (the “Website”), owned and operated by Krrishu (“Krrishu”, “we”, “our”, or “us”). Krrishu is a Jaipur-based brand founded by Manju Rajawat, specialising in Sujani embroidery jackets and celebrating India's traditional craftsmanship through contemporary fashion and handcrafted products.

At Krrishu, we value your privacy and are committed to handling your personal information responsibly. This Privacy Policy explains how we may collect, use, store, process, disclose and protect your personal information when you visit our Website, browse our products, create an account, place an order, contact our customer support team or otherwise use our services.

This Privacy Policy is intended to provide transparency about our data-handling practices and to align with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and other applicable legal requirements, as in force from time to time.

By accessing or using our Website, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will seek

Information We Collect

We may collect information necessary to operate our online store, process orders, provide customer support, improve your shopping experience and meet applicable legal obligations.

A. Personal Information You Provide

When you interact with our Website, you may provide the following information:

First and last name.
Email address.
Mobile number.
Shipping and billing addresses.
State, city and PIN code.
Order details and purchase history.
Account information, where you create an account.
Product reviews, feedback and shopping preferences.
Customer support communications.
Information you provide when requesting returns, exchanges, cancellations or refunds.
Any other information you voluntarily provide when communicating with us.

Please provide only the information necessary for your interaction with Krrishu.

B. Payment Information

Payments made through our Website may be processed by authorised third-party payment service providers.

Depending on the payment method, these providers may process payment-related information to complete your transaction.

Krrishu does not intend to store complete debit card or credit card details, CVV numbers, UPI PINs, internet banking passwords or other sensitive payment credentials on its own servers. The actual handling of payment information depends on the payment providers and integrations used by our store.

Please never share your UPI PIN, OTP, card PIN or banking password with anyone claiming to represent Krrishu.

Automatically Collected Information

When you visit our Website, certain technical and usage information may be collected automatically by our e-commerce platform and enabled third-party services, including:

IP address.
Device type and browser information.
Operating system and language preferences.
Date and time of your visit.
Pages and products viewed.
Products added to your cart.
Referral URLs and browsing activity.
Website performance and diagnostic information.
Purchase and interaction data, where applicable.

We use this information, where applicable, to maintain Website functionality, understand shopping behaviour, improve our services and help protect our Website against misuse.

D. Cookies and Similar Technologies

Our Website may use cookies, pixels, tags and similar technologies through Shopify and other enabled services.

These technologies may be used for:

Essential cookies: To support shopping cart functionality, checkout and core Website operations.
Analytics cookies: To understand how visitors use the Website and identify opportunities for improvement.
Preference cookies: To remember relevant settings and preferences.
Marketing cookies: To measure advertising performance and, where enabled and permitted, provide relevant advertisements.

You may manage cookies through your browser settings and any cookie preferences made available on our Website. Disabling certain cookies may affect some Website features.

Where required by applicable law, we will seek consent before using non-essential cookies or similar technologies.

E. Information from Third Parties

Depending on the services integrated with our Website, we may receive relevant information from third parties, such as:

Payment service providers.
Courier and logistics partners.
Shopify and other e-commerce service providers.
Marketing and advertising platforms.
Analytics providers.
Customer support and communication services.

Such information may be used for order fulfilment, payment confirmation, delivery updates, customer support, fraud prevention and other legitimate business purposes.

How We Use Your Personal Information

We may use your personal information for the following purposes, as applicable.

Order Processing and Fulfilment

Receiving, confirming and processing orders.
Arranging payment processing and product delivery.
Sending order confirmations, invoices and shipping updates.
Managing cancellations, returns, exchanges and refunds.
Responding to questions about Sujani jackets and other products.

Customer Account Management

Creating and maintaining customer accounts, where available.
Providing access to order history and saved preferences.
Helping you manage your shopping experience.
Verifying information where reasonably necessary.

Customer Support

Responding to questions, complaints and feedback.
Assisting with orders, payments, shipping and returns.
Resolving disputes and addressing service-related concerns.

Website Improvement

Understanding how visitors browse and use our Website.
Improving product pages, navigation and checkout functionality.
Analysing Website performance and customer experience.
Testing and maintaining Website features.

Security and Fraud Prevention

Identifying suspicious transactions and potentially fraudulent activity.
Protecting customer accounts and Website operations.
Investigating misuse and unauthorised access.
Enforcing our applicable terms and policies.

Marketing and Communications

Where permitted by applicable law and subject to any required consent, we may use your contact information to send:

Product updates and new collection announcements.
Promotional emails and offers.
SMS or WhatsApp communications.
Newsletters and brand updates.
Relevant product recommendations.

You may opt out of promotional communications at any time by using an available unsubscribe option or contacting us at customer.care@krrishu.com.

Opting out of marketing messages will not necessarily stop essential communications relating to an existing order, payment, delivery or customer support request.

Legal and Regulatory Compliance

We may process information when reasonably necessary to comply with applicable laws, respond to lawful requests from authorities, maintain required business records, prevent fraud or establish, exercise or defend legal claims.

3. Disclosure and Sharing of Personal Information

Krrishu does not sell or rent your personal information to third parties for their independent marketing purposes.

We may share relevant information with service providers when necessary to operate our store and fulfil your requests.

E-commerce and Technology Providers

Our store may use Shopify and related technology services for e-commerce operations, Website hosting, checkout and order management.

Payment Service Providers

Payment information may be shared with the payment provider you use to process and verify transactions.

Shipping and Logistics Partners

We may share your name, phone number, delivery address and necessary order details with courier companies and logistics partners so they can deliver your purchases.

Marketing and Communication Services

Where enabled, we may use email, SMS, WhatsApp Business or advertising services to communicate with customers and manage promotional campaigns.

Analytics Providers

We may use analytics tools to understand Website usage and performance, subject to the services enabled and applicable privacy requirements.

Business Operations

Relevant information may be accessed by authorised personnel and service providers assisting with order management, inventory, accounting, customer support and other necessary business operations.

Legal and Security Requirements

We may disclose information when required by applicable law or lawful authority, or when reasonably necessary to investigate fraud, protect rights, safeguard customers or address security concerns.

Where third-party service providers process personal information on our behalf, we will seek to ensure that appropriate contractual and security measures are in place, as required by applicable law.

Legal Basis for Processing

Depending on the circumstances and applicable law, we may process your personal information on the basis of:

Your consent, where required.
Processing necessary to fulfil your order or provide a requested service.
Compliance with applicable legal obligations.
Other lawful grounds permitted under applicable Indian law.

Where consent is the applicable basis, you may withdraw it in accordance with applicable law. Withdrawal may affect our ability to provide certain services, but will not invalidate processing lawfully carried out before withdrawal.

Security of Your Personal Information

We seek to protect personal information through reasonable technical, organisational and administrative safeguards appropriate to the nature of the information and the services we use.

Depending on the systems involved, safeguards may include:

Secure e-commerce infrastructure.
Access restrictions for authorised personnel.
Account authentication and security controls.
Secure data transmission where supported.
Monitoring and review of security practices.

No online platform or electronic storage system can guarantee absolute security. While we take reasonable steps to protect personal information, we cannot promise that every transmission or storage system will be completely secure.

If you suspect unauthorised use of your account or personal information, please contact us promptly.

International Transfers of Personal Information

Some service providers used by our online store may process or store information on servers located outside India.

Where personal information is transferred internationally, such transfers will be handled in accordance with applicable Indian law and any relevant restrictions or safeguards that apply.

The location and processing arrangements may depend on Shopify and the third-party services integrated with our Website.

Third-Party Websites and Services

Our Website may contain links to third-party websites, payment services, social media platforms or other external services.

These services operate under their own privacy policies and practices. Krrishu does not control the privacy practices of independent third parties.

We encourage you to review their privacy policies before providing personal information directly to them.

Children's Privacy

Our Website is intended for individuals who are legally capable of entering into binding contracts under applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law. Where required, we will take appropriate steps to address the collection or processing of such information.

If you believe that a child has provided personal information to us in circumstances that require attention, please contact customer.care@krrishu.com.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required under applicable law.

Retention periods may depend on the type of information and the reason it was collected. Information may be retained for:

Processing and fulfilling orders.
Maintaining customer accounts and purchase records.
Handling returns, refunds, complaints and disputes.
Meeting tax, accounting and other legal requirements.
Preventing fraud and protecting our business.

When personal information is no longer required, we will take appropriate steps to delete, anonymise or otherwise dispose

Your Privacy Rights

Subject to applicable law, you may have rights relating to your personal information, including the right to:

Request information about personal data processed by us.
Request correction or updating of inaccurate information.
Request deletion of personal information where legally permissible.
Withdraw consent where processing is based on consent.
Raise concerns or grievances about the handling of your information.
Exercise any other rights available under applicable law.

We may need to verify your identity before responding to certain requests.

To make a privacy-related request, contact us at customer.care@krrishu.com.

We will respond in accordance with applicable legal requirements. Certain information may need to be retained where required by law or necessary to address outstanding transactions, disputes or other legitimate obligations.

Grievance Redressal

If you have questions, concerns or complaints about this Privacy Policy or the processing of your personal information, you may contact us using the details below.

Grievance Contact — Krrishu

Email: customer.care@krrishu.com

Phone / WhatsApp: +91 7023587722

Business Address: [Insert your verified registered business address, Jaipur, Rajasthan, India]

We will make reasonable efforts to address grievances within the timelines prescribed under applicable law.

If a formally designated Grievance Officer is required for your business, insert that person's verified name and designation before publishing this policy.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business operations, Website functionality, service providers, privacy practices or applicable legal requirements.

The revised policy will be published on this page with an updated effective date.

We encourage you to review this page periodically to stay informed about how Krrishu handles personal information.