Privacy Policy

Last updated 21 September 2026

This policy explains what personal information Krafts Rhythm of Hands collects, why, and what you can ask us to do with it. We collect as little as we can, and we do not sell it to anyone.

What we collect

• When you order: your name, email address, postal address and phone number. We need these to take payment, ship your order and talk to you about it.
• When you enquire: your name, contact details and whatever you tell us about what you are looking for.
• Payment information: handled entirely by our payment gateway. We never receive or store your card, UPI or bank details. We keep only a reference to the transaction.
• Technical data: basic server logs, and cookies strictly necessary to keep you signed in and to remember the piece you are buying while you check out.

Why we use it

To fulfil your order, to answer you, to keep records the law requires us to keep, and — only if you have separately and explicitly opted in — to send you occasional news about new work. Marketing consent is never pre-ticked, it is recorded with a timestamp, and you can withdraw it at any time from any such email or by contacting us.

Who we share it with

We share the minimum necessary with:

• our payment gateway, to take payment;
• our courier, to deliver your order;
• our email provider, to send you order updates;
• our accountant and tax authorities, where the law requires it.

We do not sell or rent your personal information to anyone, for any purpose.

How long we keep it

Order and invoice records are retained for as long as tax law requires — currently six years for income-tax records and 72 months for GST records. Enquiries that do not become orders are kept only as long as they are useful, and deleted after that.

Your rights

You can ask us to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete your information;
• stop sending you marketing.

One honest limit on deletion. If you ask us to delete your data, we remove your name, phone number and contact details from our customer records and replace your email with a non-identifying placeholder. We cannot delete the name and address printed on an invoice for an order you actually placed, because we are independently required to keep those records for tax purposes. We tell you this up front rather than promising a deletion we cannot fully perform.

Security

The site runs over HTTPS. Access to customer data is restricted, protected by two-factor authentication, and every administrative change is logged. Payment details never touch our systems at all.

Cookies

We use cookies that are strictly necessary for the site to work — keeping you signed in, and remembering which piece you are buying during checkout. We do not use advertising or cross-site tracking cookies.

Children

This site is not intended for children, and we do not knowingly collect personal information from anyone under 18.

Contact

To exercise any of the rights above, or to ask a question about this policy, see Contact us. If you are not satisfied with our response, our grievance redressal page explains how to escalate.