This explains what we collect, why we collect it, how long we keep it and how to make us delete it. It is written to satisfy the Digital Personal Data Protection Act 2023, and to be understandable, which are not the same requirement.
Who you are buying from
- Seller
- Karewa
- Registered address
- Arabal -B, Doru Anantnag, JK – 192211 IN
- FSSAI licence
- x76xbx22
- GSTIN
- 87243812
- hello@karewa.com
- Phone
- 9622895054
The seller named above is the data fiduciary for everything described here. Write to the email address above about anything on this page.
What we collect, and why
We collect only what an order actually needs.
- Your name, delivery address, PIN code and landmark. To get the parcel to you. The courier gets these because it cannot deliver without them.
- Your phone number. So the courier can call you on the day, and so we can confirm a cash on delivery order before dispatching it.
- Your email address. To send the order confirmation, delivery updates and the tax invoice.
- Your GSTIN, if you give it. Only to put it on the tax invoice so your business can claim input credit. Optional, and blank for almost everybody.
- Order and payment records. We are required to keep these. We never see or store your card or UPI details; the payment provider handles those and we only learn whether the payment succeeded.
What we do not do
We do not sell your data. We do not share it with anybody except the people who have to have it to complete your order: the courier, the payment provider and our accountant. We do not send marketing email to somebody who has only ever placed an order, unless they asked for it.
How long we keep it
- Order and invoice records: eight years. Not our choice. GST law requires it.
- Your account, if you made one: until you delete it.
- Delivery address and phone: with the order record, for the same period, because an invoice without the address it was delivered to is not a valid record.
- Anything else, including an abandoned cart: 12 months.
Getting your data, or getting it deleted
Under the DPDP Act you can ask us what we hold about you, ask us to correct it, and ask us to delete it. Email the address above and we will respond within 30 days.
We will delete what we are allowed to delete. We cannot delete an invoice inside its eight year retention period, and we will tell you plainly which records those are rather than pretending we have erased everything.
DECISION PENDING. A dedicated deletion request form reaching a monitored inbox is ticket KP-411. Until it exists this page relies on the email address above, which must therefore be monitored.
Cookies
The site sets what it needs to keep your cart and your session working. Those cannot be switched off without breaking the shop.
DECISION PENDING. Analytics and marketing cookies, and the consent banner that must gate them, are ticket KP-411. Until that ships, no analytics or marketing scripts run on this site at all, which is why there is no banner asking you about them.
Complaints
Write to us first, at the address above. If we have not resolved it, you can raise it with the Data Protection Board of India.
