Privacy Policy
Rupkatha Boutique, operating under the brand name Rupkatha ("we," "us," "our," or the "Company"), is
committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains
how we collect, use, store, share, and protect your personal data when you access or use our Platform located
at our website (the "Platform") and when you interact with our services.
This Privacy Policy is published in compliance with the Information Technology Act, 2000, the Information
Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information)
Rules, 2011 ("SPDI Rules"), the Consumer Protection Act, 2019, and other applicable Indian laws and
regulations.
By using our Platform or providing your personal information to us, you consent to the collection, storage,
processing, and use of your information as described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you voluntarily provide to us when you:
• Register for an account on our Platform – Name, email address, date of birth, gender, mobile
number, and password.
• Place an order – Billing address, shipping address, and contact details.
• Make a payment – Payment method details (processed securely via payment gateways; we do not
store full card numbers or UPI credentials on our servers).
• Contact our customer service – Correspondence, queries, complaints, and feedback.
• Subscribe to newsletters or promotional communications – Email address and name.
• Participate in surveys, contests, or promotions – Any information you choose to provide.
1.2 Information Collected Automatically
When you access our Platform, we may automatically collect:
• Device information – IP address, browser type and version, operating system, device identifiers.
• Usage data – Pages visited, time spent on pages, links clicked, search queries entered on our
Platform.
• Location data – Approximate location derived from your IP address.
• Cookies and tracking data – Described in detail under the Cookies section below.
1.3 Information from Third Parties
We may receive information about you from third parties, including:
• Payment gateways and financial institutions for transaction verification.
• Logistics and delivery partners for order fulfilment.
• Social media platforms if you use social login or share our content.
2. Sensitive Personal Data or Information (SPDI)
Under the SPDI Rules, the following categories of data may be classified as sensitive personal data or
information:
• Financial information such as bank account details, credit card, debit card, or UPI payment details.
Rupkatha | rupasaha339@gmail.com | 8
• Any other information processed for the purpose of providing services under these categories.
We handle all SPDI with heightened security measures and collect such information only where strictly
necessary for completing transactions. Payment details are processed exclusively through PCI-DSS compliant
payment gateways and are not stored on our servers.
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Order Processing and Fulfilment
• Processing and confirming your orders.
• Arranging shipment and delivery of products.
• Communicating order status, tracking information, and delivery updates.
• Processing returns, refunds, and cancellations.
3.2 Account Management
• Creating and managing your user account.
• Verifying your identity and maintaining account security.
• Enabling features such as order history, wishlists, and saved addresses.
3.3 Customer Support
• Responding to your queries, complaints, and support requests.
• Resolving disputes and troubleshooting issues.
3.4 Marketing and Communications
• Sending you promotional offers, discounts, and product recommendations (with your consent or as
permitted under applicable law).
• Personalising your shopping experience based on your browsing and purchase history.
• Conducting surveys and collecting feedback to improve our services.
3.5 Legal and Compliance
• Complying with our legal obligations under applicable Indian laws.
• Detecting, preventing, and addressing fraud, security breaches, and prohibited activities.
• Enforcing our Terms and Conditions and other policies.
3.6 Business Operations
• Analysing usage trends and improving Platform functionality.
• Maintaining internal records, financial accounting, and tax compliance.
4. Cookies and Tracking Technologies
We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on our
Platform. Cookies are small text files stored on your device by your browser.
4.1 Types of Cookies We Use
• Essential Cookies: Necessary for the operation of our Platform (e.g., maintaining your shopping cart,
login sessions).
• Analytical/Performance Cookies: Help us understand how visitors interact with our Platform by
collecting aggregated, anonymous data.
• Functional Cookies: Allow the Platform to remember your preferences (e.g., language, region, saved
addresses).
Rupkatha | rupasaha339@gmail.com | 9
• Marketing/Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of
marketing campaigns.
4.2 Managing Cookies
You may control and manage cookies through your browser settings. Please note that disabling certain cookies
may affect the functionality and user experience of our Platform. For more information on managing cookies,
refer to your browser's help documentation.
5. Sharing and Disclosure of Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information in the
following limited circumstances:
5.1 Service Providers and Business Partners
• Payment processors and gateways for secure transaction processing.
• Logistics and courier partners for order delivery (name, address, and contact details shared only as
necessary).
• Technology and cloud service providers for Platform hosting, maintenance, and analytics.
• Marketing and communication platforms for sending emails and SMS notifications.
All third-party service providers are contractually obligated to use your information only for the purposes for
which it is shared and to maintain appropriate security standards.
5.2 Legal Requirements
We may disclose your personal information if required to do so by law, court order, or governmental authority,
or to protect the rights, property, or safety of our Company, customers, or the public.
5.3 Business Transfers
In the event of a merger, acquisition, sale of assets, or restructuring of our business, your personal information
may be transferred to the acquiring entity, subject to the same privacy protections described in this Privacy
Policy.
5.4 With Your Consent
We may share your information with other third parties with your explicit consent, such as for referral
programmes or co-branded campaigns.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy,
unless a longer retention period is required or permitted by applicable law. The criteria we use to determine
retention periods include:
• The duration of your account or business relationship with us.
• Legal obligations requiring us to retain data for specified periods (e.g., tax records, financial
transactions under Indian accounting laws).
• Our legitimate business interests such as fraud prevention and dispute resolution.
When your personal data is no longer needed, we will securely delete or anonymise it in accordance with
applicable laws and our internal data governance standards.
7. Data Security
We are committed to protecting your personal information from unauthorized access, use, disclosure,
alteration, or destruction. We implement appropriate technical and organisational security measures, including:
• Secure Sockets Layer (SSL) / TLS encryption for data transmitted over the internet.
Rupkatha | rupasaha339@gmail.com | 10
• Secure, encrypted storage of personal data on our servers.
• Access controls and authentication mechanisms to restrict access to your data.
• Regular security assessments, vulnerability testing, and audits.
• Employee training on data privacy and security best practices.
Notwithstanding our security measures, no method of data transmission or storage over the internet is
completely secure. We cannot guarantee the absolute security of your data and disclaim liability for any breach
that occurs despite our reasonable precautions.
8. Your Rights as a Data Principal
Under the SPDI Rules and the Digital Personal Data Protection Act, 2023 (once in force) and applicable
Indian law, you have the following rights in relation to your personal data:
8.1 Right to Access
You have the right to request access to the personal information we hold about you, including information
about how it is processed and with whom it is shared.
8.2 Right to Correction
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
8.3 Right to Withdrawal of Consent
Where our processing of your personal data is based on your consent, you have the right to withdraw your
consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to
withdrawal.
8.4 Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which
it was collected, subject to our legal obligations to retain certain data.
8.5 Right to Opt-Out of Marketing
You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe"
link in our emails or contacting us at rupasaha339@gmail.com.
To exercise any of the above rights, please contact our Grievance Officer (details below). We will respond to
your request within a reasonable time as required under applicable law.
9. Grievance Officer
In accordance with the Information Technology Act, 2000, and the rules made thereunder, and the
Consumer Protection Act, 2019, we have appointed a Grievance Officer to address concerns regarding your
personal data. If you have any grievances, queries, or concerns regarding our Privacy Policy or the handling
of your personal data, please contact:
Grievance Officer: Rupkatha Boutique
Address: Bimal Sinha Sarani, Ward 12, Hakim Para, Siliguri, West Bengal 734001
Email: rupasaha339@gmail.com
Response Time: We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30
days.
10. Children's Privacy
Our Platform is not intended for individuals under the age of 18. We do not knowingly collect, process, or retain
personal data from minors. If we become aware that we have inadvertently collected personal information from
Rupkatha | rupasaha339@gmail.com | 11
a person under 18, we will take immediate steps to delete such information. Parents or guardians who believe
their child has provided personal information to us are requested to contact us at rupasaha339@gmail.com
immediately.
11. Third-Party Websites and Links
Our Platform may contain links to third-party websites, payment portals, or social media platforms. This Privacy
Policy does not apply to those third-party platforms. We encourage you to review the privacy policies of any
third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or
operational needs. When we make material changes, we will update the "Last Updated" date at the top of this
Policy and, where appropriate, notify you via email or a prominent notice on our Platform. Your continued use
of the Platform following such changes constitutes your acceptance of the updated Privacy Policy.
13. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes
arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the
competent courts in Siliguri, District Darjeeling, West Bengal, India.
14. Contact Us
For any questions, concerns, or feedback regarding this Privacy Policy or our data practices, please reach
out to us:
Business Name: Rupkatha Boutique
Brand Name: Rupkatha
Registered Address: Bimal Sinha Sarani, Ward 12, Hakim Para, Siliguri, West Bengal 734001
Contact Email: rupasaha339@gmail.com
Jurisdiction: Siliguri, Darjeeling, West Bengal – 734001, India