Privacy Policy & Data Protection
Official statutory privacy framework, purpose limitation, and cryptographic security guarantees for patrons of KB Fashions Handlooms & Textiles.
KB Fashions Handlooms & Textiles never sells, monetizes, rents, trades, or disseminates customer mobile numbers, delivery addresses, or purchase histories to third-party telemarketers, credit bureaus, or advertising networks. Your information is used strictly to fulfill handloom textile orders within our local delivery network.
1. Categories of Personal Data Collected
In compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we collect only necessary data:
- Identity & Contact Information: Full name, verified mobile phone number, and authenticated email address for OTP issuance and order communication.
- Physical Delivery Coordinates: House number, street landmark, village name, and postal PIN code (503145) to enable runner dispatch.
- Transactional Records: Invoice numbers, ordered items, measurement lengths, payment reference IDs, and customer support ticket correspondence.
2. Purpose Limitation & Lawful Processing
Personal data collected by KB Fashions Handlooms & Textiles is processed solely for lawful commercial fulfillment:
- Generating statutory Bills of Supply as mandated by Indian commercial statutes.
- Routing local delivery runners to recipient doorsteps within our 10 km service territory.
- Issuing two-factor authentication OTPs (strictly valid for 5 minutes).
- Facilitating customer support inquiries and warranty resolution via our transparent ticket system.
3. Cryptographic Security Standards (Section 43A IT Act)
We maintain reasonable security practices and procedures as defined under Section 43A of the Information Technology Act, 2000:
- Salted Password Hashing: User passwords are never stored in plaintext. Passwords are cryptographically salted and hashed using bcrypt (cost factor 10).
- Transport Layer Security: All data in transit between customer web browsers and our application servers is encrypted via TLS 1.3 with modern 256-bit cipher suites.
- Tamper-Evident Audit Ledger: Administrative operations, status modifications, and support ticket activities are logged in an immutable SHA-256 cryptographic audit chain.
- Zero Sensitive Payment Storage: Credit card numbers, debit card PINs, CVV codes, and netbanking credentials are processed exclusively on Cashfree Payments PCI-DSS Level 1 certified infrastructure.
4. Data Principal Rights & Account Erasure
Under the Digital Personal Data Protection Act, 2023, patrons have the statutory right to:
- Access a summary of personal information processed by the platform.
- Request rectification of inaccurate delivery addresses or phone numbers via the Account portal.
- Request permanent account deactivation and data erasure, subject to mandatory statutory tax retention periods for Bills of Supply.