KOOL MART – PRIVACY POLICY

Effective Date:

Kool Mart ("Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal data in compliance with India’s Digital Personal Data Protection Act, 2023 (“DPDPA”) and other applicable laws.

This Privacy Policy outlines how we collect, use, store, process, share, and protect your personal data when you visit our website www.koolmartindia.com, mobile apps, or interact with our services offline or through other digital platforms.

This policy applies to all individuals residing in India who use our services, including customers, suppliers, vendors, and business partners (“Data Principals”).

1. Categories of Personal Data We Collect

• Personal Information: Full name, contact details, address, ID proofs, DOB, gender.
• Financial Information: Bank, UPI, card details (not stored).
• Transactional Data: Order history, invoices, grievances.
• Technical Data: IP, browser, device info, cookies.
• Marketing Preferences.

We do not knowingly collect data from children below 18 without parental consent.

2. Purpose and Use of Personal Data

• To fulfill contracts and deliver services.
• Verify identity and prevent fraud.
• Personalize shopping experience.
• Send updates, offers, or support responses.
• Marketing with consent.
• Comply with legal obligations.
• Analytics and service improvement.

3. Consent and Legal Basis for Processing

• Consent – for non-mandatory data collection.
• Legal Obligation – as per applicable laws.
• Performance of Contract.
• Legitimate Use – e.g., fraud prevention.

You may withdraw consent by writing to: operation@koolmartindia.com

4. Data Sharing and Disclosure

• With service providers under confidentiality.
• With government/law enforcement as required.
• With partners (with consent).
• During mergers or asset transfers (with safeguards).

5. Data Security Practices

• End-to-end encryption.
• Regular vulnerability checks.
• Multi-factor authentication and firewalls.
• Staff training and confidentiality.

6. International Data Transfers

Data may be transferred to approved countries with proper agreements ensuring protection.

7. Data Retention

• Financial data: 7 years
• Support records: 5 years
• Marketing data: Until opt-out
• Legal compliance: As required

8. Your Rights as a Data Principal

• Right to Access
• Right to Correction
• Right to Erasure
• Right to Withdraw Consent
• Right to Grievance Redressal
• Right to Nominate

9. Grievance Redressal Mechanism

Grievances are resolved within 7 working days. You may escalate to the Data Protection Board of India if unresolved.

10. Children’s Data

We do not collect data from those under 18. Guardians can request deletion or correction.

11. Links to Third-Party Platforms

We are not responsible for external site privacy practices. Review their policies before use.

12. Policy Updates

We may update this policy. Major changes will be communicated via email, SMS, or website notifications.

This Privacy Policy complies with the Digital Personal Data Protection Act, 2023.