utkarshita collects the minimum personal data required to fulfil orders and to understand which crafts and editorial subjects hold interest. Processing beyond what is necessary to operate the service is undertaken only with consent.
Scope. This policy applies to personal data processed by utkarshita in connection with the website, customer accounts and orders. The use of cookies and similar technologies is described in the Cookies Policy.
1.Data collected
The following categories of personal data are processed.
- 1(a)To fulfil orders: the registered mobile number constituting the account identity, the customer's name, delivery addresses, and order and return history.
- 1(b)With consent: first-party signals describing site usage, including the crafts and editorial subjects viewed, processed for analytics and for personalization. Consent to either may be withheld without restricting the ability to purchase.
2.Consent
Processing is organised into three categories.
- 2(a)Essential processing is always active. It is what enables authentication, the cart, and the placing of an order, and cannot be disabled without preventing the service from operating.
- 2(b)Analytics and personalization are optional and are processed only with consent.
- 2(c)Consent may be reviewed and changed at any time from Privacy in the customer's account. A decision is recorded against the session and reconciled to the account upon sign-in.
3.Payment data
Card and banking details are not stored on utkarshita's systems. Where online payment is available it is processed by a payment provider. No payment information is collected for Cash on Delivery orders.
4.Disclosure
Personal data is disclosed only to the extent a given step requires it.
- 4(a)Delivery address and contact details are disclosed to the logistics partner effecting delivery.
- 4(b)Where online payment is available, the details required to process the payment are disclosed to the payment provider.
- 4(c)utkarshita does not sell personal data and does not employ third-party advertising trackers.
5.Rights of the customer
Personal data may be reviewed and corrected from the customer's account. The account and the personal data held for it may be deleted by the customer from Account → Privacy.
Records that utkarshita is required to retain, including for tax and accounting obligations, are retained only for the period the law requires.
6.Security
Personal data is protected by appropriate technical and organisational measures, and sensitive details are held encrypted. No system is perfectly secure; utkarshita treats personal data as data for which it is accountable.