We are committed to protecting your personal data and being transparent about how we use it.
Last Updated:
This Privacy Policy describes how Kambal Ghar ("we", "us", "our"), a retail clothing brand based in Varanasi, Uttar Pradesh, India, collects, uses, shares, and protects your personal information when you visit our website (kambalghar.in) or opt in to receive communications from us.
This policy is aligned with the Digital Personal Data Protection Act, 2023 (DPDPA), TRAI regulations on commercial communications, and applicable consumer protection laws.
By submitting your details through any form on our website, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.
When you submit the opt-in form or interact with our website, we may collect the following categories of personal information:
We use the information we collect for the following purposes:
| Purpose | Channels Used | Legal Basis |
|---|---|---|
| Customer support and enquiry responses | Phone, WhatsApp, Email, RCS | Consent / Legitimate interest |
| Order confirmations and shipping updates | SMS, WhatsApp, Email, RCS | Contract fulfilment |
| Marketing campaigns and promotional messages | Email, SMS, WhatsApp, RCS | Explicit marketing opt-in consent |
| New product and collection announcements | Email, SMS, WhatsApp, RCS | Explicit marketing opt-in consent |
| Festive offers and seasonal sales | Email, SMS, WhatsApp, RCS | Explicit marketing opt-in consent |
| Personalised product recommendations | Email, WhatsApp, RCS | Explicit marketing opt-in consent |
| Brand loyalty and referral programmes | Email, SMS, WhatsApp | Explicit marketing opt-in consent |
| Website analytics and performance improvement | Internal / Analytics tools | Legitimate interest |
| Fraud prevention and security | Internal systems | Legal obligation / Legitimate interest |
We use Rich Communication Services (RCS) to deliver rich-media messages to your mobile device, including product images, interactive buttons, carousels, and quick replies.
RCS messages are sent through verified business agent accounts registered with Google and participating Indian telecom carriers. Our brand identity is verified by the RCS aggregator and messages will clearly display our official brand name and logo.
Your mobile number may be shared with our authorised RCS messaging provider solely for the purpose of sending you RCS messages on our behalf. The provider is contractually obligated to protect your data and is prohibited from using it for any other purpose.
To opt out of RCS communications, reply STOP to any message or contact us as detailed in Section 11.
We use the WhatsApp Business Platform (operated by Meta Platforms, Inc.) to send notifications to customers who have provided a WhatsApp-registered number and opted in.
Messages sent via WhatsApp may include order updates, promotional offers, product catalogues, and customer support conversations. Your number will be shared with WhatsApp's infrastructure; Meta's own privacy policy applies to the processing of data on their platform.
To opt out of WhatsApp messages, reply STOP to any WhatsApp message we send, or block our number.
We send SMS messages through TRAI-registered telemarketing infrastructure (DLT — Distributed Ledger Technology platform) for commercial communications. All promotional SMS messages are sent through registered sender IDs and pre-approved message templates as required by TRAI regulations.
To opt out of promotional SMS messages, reply STOP to any message or register your number on the National Do Not Call Registry (NDNC) at trai.gov.in.
We use your email address to send transactional emails (order confirmations, receipts) and, if you have opted in, marketing emails (offers, newsletters, product launches). Every marketing email includes a clear and functional unsubscribe link.
Email delivery may be processed through a third-party email service provider. This provider acts as a data processor on our behalf and is contractually restricted from using your data for any independent purpose.
We are committed to ensuring the security of your personal data. We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction, including:
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a significant risk to your rights, we will notify you and the relevant authorities as required by law.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
| Data Type | Retention Period |
|---|---|
| Opt-in consent records (name, number, date, channel) | 5 years from date of opt-in (for regulatory compliance) |
| Customer purchase and order data | 7 years (for GST and accounting compliance) |
| Marketing email lists | Until opt-out + 1 year |
| Website analytics data | 26 months (standard analytics retention) |
| Customer support correspondence | 3 years after resolution |
After the applicable retention period, data is securely deleted or anonymised.
We may share your personal data with the following categories of trusted third-party service providers who process data on our behalf:
All third-party providers are contractually obligated to:
We do not sell, rent, or trade your personal information with unaffiliated third parties.
Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights:
To exercise any of these rights, contact us using the details in Section 13. We will acknowledge receipt within 72 hours and respond substantively within 30 days.
You may opt out of any category of communication at any time:
Reply STOP to any message from us. You will be removed from our messaging list within 7 business days.
Reply STOP to any WhatsApp message, or block our contact. Contact us by email to request removal.
Click the Unsubscribe link in any marketing email. You will be removed immediately and your preference will be honoured for all future campaigns.
Contact us by email or phone with your name and registered mobile number / email address and request removal from all communications.
Our website uses cookies and similar technologies to improve your browsing experience, analyse traffic, and remember your preferences. Cookies may include:
By using our website, you consent to the use of cookies as described. You may disable cookies through your browser settings; however, this may affect the functionality of the website.
Our website and communications are not directed at children under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a person under 18 without verified parental consent, we will delete it promptly.
For privacy-related queries, data access requests, opt-out requests, or complaints, please contact our Grievance Officer:
We are committed to resolving your concerns promptly and transparently.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website or communications services after the effective date of the revised policy constitutes acceptance of the changes.