Razorpay Compliant & Data Protected

Welcome to Kamakalpa (www.kamakalpa.com), an authentic Ayurvedic wellness brand operating under the aegis of Ayursanthi ("we", "us", "our", or the "Company"), headquartered in Kerala, India. We are committed to safeguarding your personal privacy and maintaining the confidentiality of information entrusted to us by customers, visitors, and users of our website.

This Privacy Policy describes how we collect, use, process, disclose, and secure your personal information when you browse our website or purchase our Ayurvedic wellness formulations, including the Kamakalpa Bathing Bar. By accessing or using our website, you agree to the collection and use of your details in accordance with this Policy.

1. Information We Collect

When you interact with our website, we may collect the following categories of information:

• Personal Identification Details: Full name, telephone/mobile number, email address, postal address, pin code, state, and city provided when filling out contact forms, registering, or placing an order.
• Billing & Delivery Information: Complete shipping address, recipient contact number, order details, invoice information, and delivery instructions.
• Transaction & Payment Data: Transaction ID, payment reference number, payment mode (Credit Card, Debit Card, UPI, NetBanking, Wallet), and transaction timestamp provided by our payment gateway partner, Razorpay.
• Technical & Usage Information: Internet Protocol (IP) address, browser type and version, device identifier, operating system, time zone settings, referral URLs, pages viewed, session duration, and navigation flow on our website.
• Customer Inquiries & Communications: Feedback, ratings, customer service communications, correspondence sent via email or website contact forms.

2. How We Use Your Information

We use the collected information for legitimate business purposes, including:

1. Order Processing & Fulfillment: Processing transactions, preparing orders, generating GST tax invoices, and delivering products through our contracted courier and logistics partners.
2. Customer Support: Responding to questions, handling order tracking requests, addressing refund or return inquiries, and resolving technical issues.
3. Transaction Notifications: Sending automated SMS, WhatsApp, or email notifications regarding order confirmation, dispatch updates, tracking details, and invoice receipts.
4. Security & Fraud Prevention: Detecting, preventing, and investigating unauthorized access, payment fraud, or breaches of our Terms & Conditions.
5. Website Improvement & Analytics: Analyzing website traffic patterns to improve user navigation, optimize site performance, and refine product offerings.
6. Regulatory & Legal Compliance: Complying with applicable laws in India, taxation mandates (GST), and court orders.

3. Payment Processing via Razorpay

We utilize Razorpay as our primary payment aggregator and gateway. When you make an online payment on our website:

• Your payment details are collected and processed directly by Razorpay on their secure, encrypted payment screens.
• Razorpay adheres to the Payment Card Industry Data Security Standard (PCI-DSS) Level 1, which represents the highest degree of security in the payment processing industry.
• Kamakalpa does not have access to, nor do we store, your card numbers, CVVs, expiry dates, or UPI MPINs.
• For complete details on how Razorpay protects your transaction data, you may review Razorpay's Privacy Policy.

4. Cookies and Web Tracking

Our website uses cookies (small text files stored in your web browser) and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required to keep our shopping cart active, maintain session integrity, and facilitate secure checkout.
• Analytical & Performance Cookies: Enable us to measure visitor counts, bounce rates, and traffic sources to optimize website speed and usability.
• Functional Cookies: Remember your preferences (such as location or saved details) to personalize your return visits.

You may configure your browser settings to reject cookies or notify you when a cookie is placed. However, disabling essential cookies may impact certain checkout features of our website.

5. Information Sharing and Disclosure

We strictly maintain that your personal information is never sold, traded, or rented to third-party marketing companies. We only share information with trusted third parties under stringent confidentiality agreements for the following purposes:

• Logistics & Courier Partners: Third-party courier companies (such as Delhivery, Blue Dart, DTDC, India Post) to physically transport and deliver your parcels. Only the recipient's name, delivery address, and contact number are shared.
• Payment Gateways: Razorpay Software Private Limited for verifying and settling online transactions.
• Technology & Hosting Infrastructure: Cloud hosting, server providers, and technical maintenance partners who assist us in operating our web portal under confidentiality contracts.
• Legal & Law Enforcement: Where mandated by law, judicial warrants, government summons, or in order to protect our legal rights, property, and user safety.

6. Data Security and Retention

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized disclosure, loss, alteration, or theft. These measures include Transport Layer Security (TLS 1.3 / SSL 256-bit encryption), restricted database access, and regular vulnerability checks.

We retain personal information only for as long as is necessary to fulfill the purposes for which it was gathered, maintain accurate business records, and satisfy tax (GST) and statutory audit obligations under Indian law.

7. Your Privacy Rights

Under Indian privacy and data protection frameworks, you are entitled to:

• Request access to the personal data we hold about you.
• Request the rectification of inaccurate or incomplete information.
• Request the erasure of your personal data, subject to statutory retention mandates (e.g. past transaction invoices).
• Opt out of receiving non-transactional marketing communications at any time.

8. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer for Kamakalpa is:

9. Updates to this Policy

We reserve the right to periodically amend or update this Privacy Policy to reflect changes in our operational practices, regulatory requirements, or payment gateway obligations. Any updates will be published on this page with an updated "Last Updated" date. Continued use of our website constitutes your acceptance of the revised terms.