Privacy Policy

About this policy

Kasturi Fashions is operated by its proprietor, Ravula Kasturi. This policy explains how we handle personal information through kasturifashions.com, customer accounts, orders and support communications.

It describes our information practices. Reading or browsing this page does not, by itself, provide consent to optional marketing or tracking.

Information we collect

The information involved depends on how you use our services:

• Contact and delivery details: your name, email address, mobile number, billing address, delivery address and instructions you provide.
• Account information: registration details, sign-in identifiers, verification status and account preferences.
• Order information: purchased products, order value, payment status, transaction references, delivery updates and return or refund requests.
• Support communications: messages and photographs you choose to send about an order or product.
• Technical information: IP address, browser and device details, essential cookies and security records generated when the website is used.

Please provide only information relevant to your request. Do not send passwords, OTPs, full card numbers or other sensitive credentials to our support email.

How we use your information

We use relevant information to create and manage accounts, verify sign-ins, process payments and orders, arrange delivery, provide support and handle returns or refunds.

Technical and transaction records help us detect misuse, secure accounts, resolve disputes and meet applicable accounting, tax and legal obligations.

Order confirmations, verification codes and delivery messages relate to the service you request. Optional promotional messages require a separate choice where applicable. You can ask us to stop promotional messages without stopping necessary order or security communications.

Login and payments

Mobile and email verification

Where code-based sign-in is available, your mobile number or email address is used to send a verification code and connect you to your account. The delivery provider processes the destination and information needed to deliver and verify the message. If SMS verification is provided through Twilio Verify, Twilio processes that information as part of its verification service.

Google sign-in

If you choose an available Google sign-in option, we receive the account identifier, verified email and basic profile information needed to create or connect your account. This does not give us access to your Gmail messages, contacts or Google password. Google's own privacy settings also apply to your use of Google.

Payment processing

When you pay through an external payment provider, that provider handles the payment credentials you submit under its own terms and privacy practices. We receive the order-related payment status and transaction information needed for fulfilment, reconciliation or refunds. Contact us if you need the identity of the provider used for your transaction.

Cookies and information sharing

Essential cookies and similar storage support features such as sign-in sessions, cart contents and security. Blocking them in your browser may prevent those features from working. Clearing browser cookies does not delete an account or existing order records.

If we enable optional analytics or advertising tools, we will explain the tools and their purposes and provide the choices required by applicable law before using them. Optional tracking choices are separate from accepting an order or signing in.

Service providers

Relevant information is shared with providers that help operate the store, including hosting, email or SMS delivery, payments, courier delivery and customer support. The information involved depends on the service: for example, a courier needs delivery and contact details, while a verification provider needs the destination for a code.

Information may also be disclosed where required by law or necessary for a lawful fraud investigation or legal claim. Some providers may process data outside India; any transfer must follow applicable requirements.

External websites

Links to social networks or other websites lead to services with their own privacy practices. Review those policies before providing information through another service.

Retention and security

Personal information is retained for the period needed for the purpose it was collected, including account operation, order fulfilment, support and dispute handling. Some invoice, transaction and legal records must be kept for periods required by applicable law. Temporary verification data is subject to expiry and cleanup.

Account deletion does not necessarily remove records we are legally required to retain. We delete or anonymise information that is no longer needed, subject to legitimate retention obligations and the lifecycle of secure backups.

We take reasonable measures to protect information against unauthorised access, disclosure and misuse. No website or transmission method can guarantee absolute security. Protect your sign-in details and report suspected account misuse promptly.

Your choices and requests

You can contact us to request access to information associated with your account, correct inaccurate details, request account or information deletion, withdraw consent where processing relies on it, or raise a privacy concern. Requests are handled subject to applicable law and legitimate record-retention requirements.

We may ask for information reasonably necessary to verify that a request comes from you or an authorised representative. We will not ask you to disclose your password or a login OTP to our support team. Withholding information needed for a particular service may mean we cannot provide that service.

Promotional messages

Use the unsubscribe option in a promotional message, where provided, or contact our support email to request removal from promotional communications.

Children and young customers

If you are under 18, involve a parent or guardian before providing personal information or placing an order. Parents or guardians can contact us about a child's information. Any processing of children's data must meet the consent and other safeguards required by applicable law.

Updates to this policy

We may update this policy when our services, information practices or legal obligations change. The date at the top identifies the latest published update. Where a change requires a fresh notice or consent, we will provide that notice or obtain that consent separately.