Privacy policy

General Terms & Grievance Redressal

• Company GSTIN No: 27AALCK0109J1ZK
• We reserve the right to cancel any order at our discretion.
• Cookie Policy: You can change your cookie settings to accept or decline cookies in your browser. You can still browse our website even if you do not accept cookies.

Questions, Concerns & Grievances

Our dedicated Grievance Redressal Team manages all queries and escalations across all touchpoints. Customers and external stakeholders may lodge feedback, complaints, or questions via the following coordinates:

• Resolution Process: For any grievance or complaint, a confirmation of receipt will be sent to the sender within 72 hours of receiving the written concern. A formal written response will be provided within 15 business days.

Privacy Policy & Data Collection

• Definition of Personal Data: Personal data is defined as any information that can be used to identify an individual. This includes name, phone number, address, age, email ID, or information that classifies your presence.
• Data Retention Period: Personal data will be retained only as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws. When the data is no longer required for business or legal purposes, it will be securely deleted or anonymized.
• Reasonable Security Measures: We have taken and will continue to take reasonable precautions and security arrangements to prevent unauthorized access, collection, disclosure, copying, modification, or disposal of your personal data.
• Browser Security: While we strive to protect your personal data, we cannot ensure the absolute security of data transmitted over an unsecure network. We strongly urge you to use a secure browser.
• Regulatory Framework: The Data Privacy and Protection regime in India is currently regulated by the Information Technology Act, 2000 (“IT Act 2000”) along with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
• How We Collect Data: We obtain personal data directly when you provide business cards, fill out online forms, subscribe to our newsletters, register for pop-ups, attend events, visit our physical stores, or collaborate with us professionally.
• Sensitive Documents: In specific cases, personal identification documents revealing race, religion, ethnic origin, or biometric data may be collected for beneficial owners of corporate entities or applicants as mandated by law.
• CCTV Surveillance: CCTV cameras at our retail locations and offices capture images of visitors. CCTV footage is automatically overwritten within 30 days.
• Location-Based Data: We may process the geographical location of your device to provide tailored location-based services, relevant offers, and product improvements.
• Consent & Withdrawal: We rely on freely given consent. You may withdraw or modify your consent at any time by contacting us at info@kalkifashion.com.

Why do we need personal data?

We aspire to be transparent when collecting and processing your personal data. Purposes typically include:

• Providing professional services and reviewing client files for quality assurance.
• Promoting our products, services, and capabilities to existing and prospective customers.
• Sending event invitations and managing guest entry for sponsored events.
• Personalizing landing pages, recommendations, and communications based on your interactions.
• Administering and ensuring the security of our IT infrastructure, applications, and websites.
• Authenticating registered accounts and securing restricted site sections.
• Processing orders, inquiries, requests for proposals, and customer support tickets.
• Complying with anti-money laundering (AML), combating the financing of terrorism (CFT), and fraud prevention regulations.
• Compiling health and safety records following any incident or accident.

Do we share personal data with third parties?

We may share personal data with trusted third parties who are contractually bound to safeguard the data. These include:

• Service providers supporting IT infrastructure, cloud software, telecommunications, document archiving, and logistics/mailroom services.
• Professional advisers such as legal counsel, external auditors, and insurers.
• Specialist partners conducting anti-money laundering and conflict checks.
• Law enforcement, regulatory bodies, and government agencies where mandated by applicable law.

Do we transfer your personal data outside India?

We may transfer personal data to international collaborators or service providers located inside or outside India whenever necessary for business operations. All recipient organizations are bound by strict data protection agreements in accordance with applicable legislation.

What are your data protection rights?

• Access: Request confirmation on whether we process your data and receive copies of your information.
• Correction: Request updates or corrections to any incomplete or inaccurate personal data.
• Erasure: Request deletion of your personal data once consent is withdrawn or if the data is no longer necessary.
• Right to Object to Direct Marketing (Including Profiling): Opt out of receiving marketing communications and profiling at any time.
• Right to Withdraw Consent: Withdraw consent previously granted without affecting past lawful processing. To exercise these rights, please email us at info@kalkifashion.com. Identity verification may be required to protect your information.

What about personal data security?

• We implement robust technical and organizational security protocols to protect personal data against accidental loss, unauthorized access, destruction, or alteration. Access is strictly restricted to authorized personnel who are subject to confidentiality obligations.
• Users are responsible for keeping passwords and account credentials confidential. Please note that data transmission across the internet involves inherent risks, and any transmission is at your own risk.

How long do we retain personal data?

We retain personal data strictly for the period required to deliver our services, fulfill contractual obligations, and comply with legal, regulatory, and audit requirements. Once that period expires, data is securely removed per the firm's data retention policy.