What Kavora Emporium collects when you use kavoraemporium.shop, why, who else sees it and what you can require us to do with it. Written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
1. Who holds your data
The data fiduciary is Kavora Emporium, a sole proprietorship trading as Kavora Emporium from A-29, Khatipura Rd, Kumawat Colony, Alpana Colony, Khatipura, Jhotwara, Jaipur, Rajasthan 302012, India. Any question about your personal data goes to the Grievance Officer in section 10.
2. What we collect
| To fulfil an order | Name, delivery address, PIN code, phone number, email, order contents |
|---|---|
| Given to the freight partner | Name, address, PIN code and phone — the freight desk calls before routing the vehicle |
| To confirm payment | That a UPI transfer succeeded and its reference; or the COD amount collected |
| If you open an account | Login email, encrypted password, saved addresses, order history |
| If you claim a fault | Your unboxing video and photographs |
| Automatically | IP address, browser and device type, pages viewed, referring page |
We do not collect or store card numbers, CVV codes, UPI PINs or bank passwords. There is no card form on this site: payment is authorised inside your own UPI app and only the confirmation reaches us. We do not knowingly collect data from anyone under 18 — tell us if a child’s data has reached us and we will erase it.
We ask for a phone number for one reason: surface freight will not route a heavy consignment without a number the driver can call. It is used for that delivery and nothing else.
3. Why we use it
- To check, pack, edge-protect and manifest your consignment, and to keep you posted in transit.
- To handle cancellations, returns, replacement requests and refunds — including sending a single missing part rather than a whole grill.
- To answer your emails, including assembly and first-burn questions.
- To assess a damage claim and, where needed, to pursue it with the freight partner.
- To detect and prevent fraud, and abuse of the returns process.
- To keep the invoice and order records Indian tax and consumer law require.
- To see, in aggregate, which sizes and configurations people look at, so we stock better.
We do not build advertising profiles and we do not sell your data. If we ever want to email you about new stock we will ask first, and every such email carries an unsubscribe link.
4. Who else sees it
- Freight partners (Delhivery Heavy and VRL) — name, address, PIN code and phone, to route and deliver the consignment.
- The UPI payment gateway — processes the transfer and holds credentials we never see.
- Hosting and email providers — store the site and its correspondence on our behalf, under contract.
- Authorities — where a valid legal demand under Indian law requires disclosure.
None of them may use your data for their own purposes, and we do not register a manufacturer warranty on your behalf — that keeps your details out of a third party’s database.
5. Cookies and analytics
We set cookies necessary for the site to work — cart contents, login session, your consent choice — and use aggregate analytics to count visits and see which pages are read. You can block or delete cookies in your browser; blocking the necessary ones breaks the cart and checkout.
6. How long we keep it
Order and invoice records for as long as tax and consumer law require, then deleted. Account data while your account is open. Support email and claim media for two years, because a freight claim can take months to close. Analytics data is aggregated and identifies nobody.
7. Your rights under the DPDP Act, 2023
- Access — ask what personal data we hold and what we have done with it.
- Correction — have inaccurate or incomplete data corrected.
- Erasure — have data deleted where we no longer need it and no law requires it kept.
- Withdraw consent — where we relied on consent, withdraw it at any time.
- Grievance — complain to our Grievance Officer, then to the Data Protection Board of India.
- Nominate — appoint someone to exercise these rights for you in the event of death or incapacity.
Write to us with enough detail to identify your order or account. We respond within 30 days.
8. Security
The site is served over an encrypted connection and administrative access is limited to the proprietor behind a strong password. Because we hold no payment credentials, the most sensitive data a breach could reach is a delivery address and a phone number — a deliberate design choice, not luck. No system is perfectly secure; if a breach ever affects your data we will notify you and the Data Protection Board of India as the DPDP Act requires.
9. Replacement requests and claim media
The unboxing video and photographs you send are used only to assess your replacement request and, where necessary, to support a claim against the freight partner. We do not publish them and we do not use them in marketing without your written permission.
10. Grievance Officer
Under the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer is the proprietor of Kavora Emporium:
- Grievance Officer — Kavora Emporium
- Address: A-29, Khatipura Rd, Kumawat Colony, Alpana Colony, Khatipura, Jhotwara, Jaipur, Rajasthan 302012, India
- Email: connect@kavoraemporium.shop
- Hours: Monday – Saturday, 10:00 AM – 7:00 PM IST. Closed on Sundays and public holidays.
Complaints are acknowledged within 24 hours and resolved within 15 days.
11. Transfers and changes
We operate only in India and your data is processed in India. If a provider we use ever stores data outside India, it will be one permitted under the DPDP Act. Changes to this policy are published here; the version applying to your order is the one in force when you ordered. Disputes fall to the courts at Jaipur, Rajasthan.