Privacy Policy

This Privacy Policy describes how KGShops ("we", "us", "our") collects, uses, and protects information you provide when using kgshops.in (the "Site") or placing an order with us. By using the Site, you agree to the practices described below.

1. Information we collect

Account data: name, email, phone number, Security Date and password (stored as a one-way hash) when you register.
Order data: shipping address, billing address, order history, and any GSTIN you provide for tax invoices.
Payment data: payments are processed by us ( Razorpay for online Payments); we do not store full card or UPI credentials on our servers.
Device & usage data: IP address, browser type, referrer, and pages visited, used to detect fraud and improve the Site.

2. How we use your information

To process and deliver orders,send order updates through user's Account Notification, prevent fraudulent transactions, respond to support requests, and — only if you opt in — send you marketing emails/notifications about new collections. You can unsubscribe from marketing at any time via the link in any marketing email/notification or by contacting [email protected].

3. Cookies & sessions

We use strictly necessary cookies and HTTP-only session cookies to keep you signed in and to protect against cross-site request forgery (CSRF). We do not use third-party advertising cookies on the Site.

4. Sharing of information

We share information only with: (a) payment processors (Razorpay for Online Payments) to authorise your transaction, (b) shipping couriers to deliver your order, and (c) law enforcement when legally required. We do not sell or rent your personal data to third parties.

5. Data retention & deletion

We retain order records for 7 years as required by Indian tax law. You may request deletion of your account and non-essential data at any time from your account settings, but we still store some information like email,name,login IP Address for security purpose. [email protected]; we will action verified requests within 30 days.

6. Security

All traffic is encrypted with TLS & One extra layer of our own asymetric key pairs . Passwords are stored in hash. Payments are handled entirely on Razorpay's PCI-DSS compliant infrastructure (online Payments only). We also provide advance security options for doing High Risk Changes.No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Turnstile (Cloudflare)

Our sign-in page uses Cloudflare Turnstile, a privacy-preserving bot-detection service. Turnstile processes minimal signals — client IP address, TLS fingerprint, User-Agent header, Sitekey and associated origin — solely to distinguish human visitors from bots. Cloudflare does not have the ability to directly identify any individual from these signals. The Turnstile Privacy Addendum (reproduced below) supplements Cloudflare's main Privacy Policy.

Turnstile in plain English

Cloudflare Turnstile is the friendly robot gatekeeper at our login door — it checks if you're human without making you squint at blurry traffic lights. It glances at your IP address, browser fingerprint, and a few other technical bits, then quickly decides "yep, that's a person" or "nope, that's a bot."

Cloudflare promises they cannot identify you personally from these signals — and we trust them on that. The important part: Turnstile is doing this to keep bots out, not to build a profile on you.

For the full legal version (complete with paragraphs, clauses, and the fine print), head over to Cloudflare's Turnstile Privacy Policy.

9. Your rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you have the right to access, correct, port, or delete your personal data, and to withdraw consent for processing. Contact [email protected] to exercise these rights.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced by a banner on the Site and by email/notification to registered users at least 7 days before they take effect.

11. Contact

Questions about this policy? Email [email protected].