Privacy Policy

Cottage Handicraft Pvt. Ltd. ("Cottage Handicraft", "we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

This policy is compliant with the Information Technology (Amendment) Act, 2008, the Digital Personal Data Protection Act 2023 (India), and, where applicable, the General Data Protection Regulation (GDPR) for users in the European Economic Area.

Information You Provide Directly

• Account information: Name, email address, password (hashed), and phone number when you register.
• Order information: Billing address, shipping address, and order history when you place a purchase.
• Payment details: Payment is processed by PCI-DSS compliant third-party gateways. We never store full card numbers.
• Communications: Messages you send us via contact forms, email, or live chat.
• Reviews & feedback: Content you submit in product reviews or surveys.

Information Collected Automatically

• Usage data: Pages visited, time spent, referring URLs, clicks, and navigation patterns.
• Device data: Browser type, operating system, screen resolution, and device identifiers.
• Location data: Country and city-level location inferred from IP address (not GPS data).
• Cookies and tracking: See the Cookies section below for full details.

We use the information we collect for the following purposes:

• Order fulfilment: To process, confirm, and ship your orders and provide order updates.
• Account management: To create and manage your customer account and provide customer support.
• Personalisation: To personalise your browsing experience, show relevant products, and remember your preferences.
• Marketing communications: To send you newsletters, offers, and new product announcements — only with your consent, and always with an easy unsubscribe option.
• Analytics & improvement: To understand how visitors use our website and improve our products and user experience.
• Fraud prevention: To detect, investigate, and prevent fraudulent transactions and other illegal activities.
• Legal compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.

We do not sell, trade, or rent your personal information to any third party for their own marketing purposes. We may share your information only in the following circumstances:

• Service providers: Trusted third-party companies who assist us in operating our website and fulfilling orders (payment processors, shipping companies, email service providers). These parties are bound by confidentiality agreements and cannot use your data for any other purpose.
• Legal requirements: If required by law, court order, or government authority, or to protect the rights and safety of Cottage Handicraft, our customers, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred, with prior notice and the same level of protection.
• Artisan partners: Limited shipping information (name, address) is shared with the artisan workshop fulfilling your order, strictly for production and dispatch purposes.

We use cookies and similar tracking technologies to enhance your experience on our website. You can manage your cookie preferences at any time through your browser settings.

Essential cookies cannot be disabled as they are necessary for the website to function.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: Retained for the duration of your account and up to 3 years after account closure.
• Order records: Retained for 7 years to comply with Indian tax and accounting laws.
• Marketing preferences: Until you withdraw consent or unsubscribe.
• Website logs: Retained for up to 12 months for security and debugging purposes.

When data is no longer required, we securely delete or anonymise it so it can no longer be linked to you.

We implement appropriate technical and organisational measures to protect your personal information:

• All data transmissions are encrypted using 256-bit TLS/SSL protocols.
• Payment data is processed through PCI-DSS Level 1 compliant gateways; we never store full card numbers.
• Passwords are stored as salted cryptographic hashes, never in plain text.
• Access to customer data is restricted on a strict need-to-know basis with role-based permissions.
• Regular security audits and penetration testing are conducted by independent third parties.

If you have reason to believe your data has been compromised, please contact us immediately at hello@cottagehandicraft.com.

Depending on your location, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request that we correct any inaccurate or incomplete information.
• Right to Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Right to Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to the processing of your data for marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time for any processing that relied on your consent.

Our Service is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal data from a child under 18, we will promptly delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@cottagehandicraft.com.

Cottage Handicraft is based in India. If you are accessing our Service from outside India, your information may be transferred to, stored, and processed in India. By using our Service, you consent to this transfer.

For users in the European Economic Area: where we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

If you have any questions or requests regarding this Privacy Policy, please contact our Data Protection Officer:

• Email: hello@cottagehandicraft.com
• Phone: +91 96727 77788
• Postal address: Data Protection Officer, Cottage Handicraft Pvt. Ltd., Jain Plywood, Tonk Rd, near Jaipur Glass Factory, Jawahar Nagar, Bajaj Nagar, Jaipur, Rajasthan 302018, India.

We aim to resolve all privacy-related queries within 30 days of receipt.